last executing test programs:

4m57.37892439s ago: executing program 32 (id=283):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000340)={0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'})

4m48.807559344s ago: executing program 33 (id=736):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m19.82417219s ago: executing program 34 (id=1318):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000540), 0xa7c, r0}, 0x38)
r1 = syz_open_dev$evdev(&(0x7f0000000580), 0x2, 0x8e2b00)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000d00)=""/127)

4m10.811577579s ago: executing program 35 (id=1752):
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000006c0)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="4b180d64"], 0x8)

3m44.124924281s ago: executing program 36 (id=2713):
capset(0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_read_part_table(0x1053, &(0x7f0000002180)="$eJzsz8EJwlAQBND5MYkBPaQDtRR70H4C9uLBArxaik1YgPhREAtQD+9ddmGGhQ0/dk1K0iRllsdaPvI2mSe5ZVFb3fCWTetNDtsmGZJyWWZKcly90u45+5RxTJtzpvTZlVqvl/enb3wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/uHgAA//+AkQhu")

3m42.638647343s ago: executing program 37 (id=2734):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000580)={0xa, 0xe22}, 0x1c)
recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=@isdn={0x22, 0x8, 0x5, 0x4, 0x12}, 0x80)
syz_emit_ethernet(0x46, &(0x7f0000000640)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1000", 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)

3m37.86347943s ago: executing program 38 (id=2960):
mkdirat(0xffffffffffffff9c, &(0x7f0000001340)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000001380)='./proc\x00', &(0x7f00000013c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0)
write$cgroup_pid(r0, &(0x7f0000001440), 0x12)

3m33.679583676s ago: executing program 39 (id=3114):
mkdir(&(0x7f00000001c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0xc002, 0x0)
chdir(&(0x7f00000002c0)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.current\x00', 0x275a, 0x0)

2m47.714108565s ago: executing program 40 (id=3514):
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
exit(0x9)
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000140)={{0x77359400}, {0x0, 0xe4c}}, 0x0)

2m43.973170586s ago: executing program 41 (id=3548):
r0 = socket(0x2, 0x3, 0x6)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
syz_emit_ethernet(0x36, &(0x7f0000000a80)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x38, &(0x7f0000000f40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x67, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x254e}, {"dc7b"}}}}}}, 0x0)

2m31.695516068s ago: executing program 42 (id=3565):
openat(0xffffffffffffff9c, 0x0, 0x400442, 0x20)
eventfd2(0x9, 0x80000)
syz_usb_connect$cdc_ecm(0x5, 0x59, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x8, 0x26e13da04bead3eb, 0x80, "", [{{0x9, 0x4, 0x0, 0xf1, 0x2, 0x2, 0x6, 0x0, 0xf, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x4, 0x3}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x6, 0xa5}, @acm={0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xc, 0xf, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x1, 0x3, 0x1, 0x20, 0x9}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]})
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x8000)

1m36.835424534s ago: executing program 43 (id=4640):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x800714, &(0x7f00000003c0)={[{@test_dummy_encryption}]}, 0xfe, 0x4da, &(0x7f0000001940)="$eJzs3N1vFFUfAODfbD8oUGhfXl5eQdAqGokfLS0fcuGFGk1M1MREL/CytgWRhRpaEyCNVmPwmsR746WJl155541RLox/gCZeGhKijQnFxKRmdmbKdrvbD9qysH2eZLvnzJyZc87MOduzc3YmgE2rL/2TRHRHxC8R0ZNFFyboy95mZ6ZGbs1MjSQxN/fmH0kl3c2ZqZEiabHd9jxyqBRR+jSJ55PF+U5cunx2uFweu5DHBybPvT8wcenyM2fODZ8eOz12fujEiaNHBp89PnRswXZ1drXI1jrL0nrd3Pfh+P69r7x99fWRk1ff+fHrdF97DmTrq+uxrFuLSvFqvWR96VH7c66idt3jK87s/rCjKpy0N7EgrEpbRKSnq6PS/3uiLW6fvJ54+ZOmFg7YUOn/pi2NV0/PAS0siWaXAGiO4h99+v23eMU/d2nwcQ+48UJEZx6enZkamZ2/DtAepXx5xwbm3xcRJ6f//iJ9xWqvQwAA3IHK2ObpmvFfRSn2VN6zuY6d+RxKb0T8JyJ2RcR/I2J3RPwvopL2/xHxQLbxXM8K8++riS8e/5Su1y3zOknHf89Vjf1mq+qfv/W25bEdlfp3JKfOlMcO58fkUHRsSeODS+Tx3UudDddVj//SV5p/MRbMC3C9PbtAN7+T0eHJ4fU6CDc+jtjXXq/+yfxMQNoC9kbEvtXtemcROPPkV/sbJVq+/ktYh3mmuS8jnsjO/3TU1L+QNJifTNv48aFjA11RHjs8ULSKxa79fOWN+UjN5OSa6r8O0vO/bWH7r0nR81eSzdd2RLk8dmFi9Xlc+fWzht9p0vrv3ZaFl2n/89L235m8VZmz/undbNnF4cnJC4MRnclrlXjeWboiXT50e9uLebxIn9b/0MH6/X9Xvk1a/wcjIm3EByJ2PhQRD+dlfyQiHo2Ig0vU/4cXH3tvifonkURTz/9o3c+/+fbfm1TP1zcMNE7Tdvb7bxvN26/s8+9oTFc+azOVz79lLFXS6sAaDx8AAADcF0oR0R1JqT8L93VHqdTfn/2Gf3dsK5XHJyafOjX+wfnR7B6B3ugoFVe6eqquhw4m0/kes/hQfq24WH8kv278edvWSrx/ZLw8Gl1Nrj1sbtsX9v8o+n/q97Zmlw7YcI3n0Za4NQBoCbX9v9SkcgB330p+R+O7ALSmOv2/3jM0gBbkeS2wedXr/x/VxBeN/40QoCUs7v+/1XlkHdCKjP9h89L/YfNaff/3CwFoASu6SX7dA8XNAksmLopYN03Xiu/wv7cD1/JKrn2HxeNhNrLMW+P2kihVAt3R9GN4Z4GelSSOiG/WnFfbOpQ57TF39/hUPXAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgPvZvAAAA///Lvdd/")
r0 = openat(0xffffffffffffff9c, &(0x7f0000001e40)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000001f00)='E', 0xed0, 0x47ecf)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000001f40)={0x17c04, 0xffffffffffffffff, 0x401, 0x100000001})

1m30.097062521s ago: executing program 44 (id=4881):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
unshare(0x64000600)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r0, 0x0)

1m29.860624615s ago: executing program 45 (id=4884):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/devices/serial8250/power/control\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='auto', 0x4)

1m23.112476263s ago: executing program 46 (id=5132):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_mount_image$msdos(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x100c404, &(0x7f0000000840)={[{@dots}, {@fat=@gid}, {@dots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@nodots}, {@fat=@check_strict}, {@dots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@fat=@dmask}, {@fat=@dmask={'dmask', 0x3d, 0xfffffffffffffff8}}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8}}, {@fat=@flush}, {@fat=@usefree}, {@fat=@errors_continue}, {@dots}]}, 0x1, 0x1f5, &(0x7f0000000940)="$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")
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280)
syz_emit_ethernet(0x2a, &(0x7f0000000740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x8, 0x1c, 0x64, 0x0, 0x2, 0x33, 0x0, @private=0xa010102, @loopback}, "62fb5338591f8e40"}}}}, 0x0)

56.396457959s ago: executing program 1 (id=5677):
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000800)='./proc\x00', &(0x7f0000000840)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/sys/kernel/watchdog\x00', 0x2, 0x0)
write(r0, &(0x7f0000000900)='1', 0x1)

56.385340889s ago: executing program 1 (id=5678):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x408, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0xc0184d08, 0x0)

56.311261567s ago: executing program 1 (id=5679):
r0 = socket$igmp(0x2, 0x3, 0x2)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)=0xffffffffffffffff)

56.289822499s ago: executing program 1 (id=5680):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x4, &(0x7f0000000040), 0x0, 0x76a, &(0x7f0000001100)="$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")
mount$incfs(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x80, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x8c)
openat$incfs(r0, &(0x7f0000000480)='.pending_reads\x00', 0x22000, 0x1b4)

56.068031892s ago: executing program 1 (id=5685):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./tracefs\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracefs/available_tracers\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/112, 0x70}], 0x1, 0x5, 0xfffffffe)

55.933485995s ago: executing program 1 (id=5695):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x40e02, 0x0)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f0000000780)='net/xfrm_stat\x00')
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

55.933388355s ago: executing program 47 (id=5695):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x40e02, 0x0)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f0000000780)='net/xfrm_stat\x00')
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

43.954763617s ago: executing program 5 (id=6118):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = syz_clone(0x21100000, 0x0, 0xffffffffffffffe3, 0x0, 0x0, 0x0)
process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0)
syz_clone3(&(0x7f0000000340)={0x88020000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58)

43.590345944s ago: executing program 5 (id=6120):
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000600)='./tracing\x00', &(0x7f0000000640)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./tracing/set_event\x00', 0x1, 0x0)
write(r0, &(0x7f0000000700)='!foo:mod:', 0x9)

43.508220923s ago: executing program 5 (id=6127):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0xff, 0x5534, &(0x7f0000011480)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfbVxo6Q+quu9VuoNj9AhddllxFY5Ar9ALcAa667a7CCLsSRSiECA2JiTfJ9nD2NbzA7GZmacBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE7pbzmf/P71ddA0zmrdzCHvKJomCQAAAK/UspxPqg+juj9M1z+kS59TP4uIPCIeGrsX8WYrZpHilDueL+/l8CeiirB5Rz8d7yLiWzquPp36VwAAAICXazGdjdOqenUanTshulRP2uTvv7cUL4uIcvSvpWj55vTloEfX++eHNv/vXvzccTc7LrVqYisal8zcqKbcem1F26+4raRJzeBOk9VN3l06AABAV7ZHAh2OQgAAAOjYj3MnwHlUq56pFj8V8PfrJi0Ivt3qAQAAABfo2KpnAAAA4DkaPnq3Gv9fwP5/H//b/w8AAACerN7/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFNalvPJYjobN42zWjfTzrcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArtmfdxSGYTAIg5tEeXVCF/D9b2kW7NatmxkQfPxbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAK4/j5XnGqzGTbfQ6k7x7Xkk+nRrfTo1f58Y/yVh3/wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY2Z+XFAxhMAaA+R8q7qT3P6yE6hlEmIFCSOjiAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeKPP9fK9w6/hSPJv27C0HknWTg1bpzGHae+H8dgZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDJzv37xk3FAQD/3vl8pQVECChDEKISAyw0vZaWrgygiIE/ASlKryVw5UebgVYVKAsbytwFwYgQEihs/R86t1KXsnW4oUhMDCD77OT1KOKgin0kn4/0/L62HL/vc6IoXz/nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgyfnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6iKRJw=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)

42.547375981s ago: executing program 5 (id=6138):
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f00000001c0)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f00000002c0)="$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")
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file1\x00', 0x143041, 0x149)
pwritev2(r0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

42.036001543s ago: executing program 5 (id=6143):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x11700)

41.903721526s ago: executing program 5 (id=6145):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000000000/0x4000)=nil)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='cmdline\x00')
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000c00)=""/4116, 0x1014}], 0x1, 0x16, 0xffffffff)

41.903482506s ago: executing program 48 (id=6145):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000000000/0x4000)=nil)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='cmdline\x00')
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000c00)=""/4116, 0x1014}], 0x1, 0x16, 0xffffffff)

40.628031956s ago: executing program 3 (id=6167):
setns(0xc9, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x63ba, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x800, @mcast2}, 0x1c, 0x0}}], 0x1, 0x60040000)

40.116672019s ago: executing program 3 (id=6170):
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)

38.743661569s ago: executing program 3 (id=6157):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2048cc, &(0x7f0000000140)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5f97722752a98440a5725268a242c0263564f968d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de293ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df73df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRESHEX=0x0, @ANYBLOB="3ac58d341d191bef3ae54e2d8e854dfa3fe8747801d92ff81e579847d2b423f484d1496e058c6f263b7b677c8d09ad0d79e87a33f66a0daec47924e10e2e97a2a01cce8df6a0fe3d6022c192b1b4c56d2476c6db0fb227706027c8f12fd70f2d498eb433bb079342a248f3943e8e36a1f1413e43e8c8b44ef2608a56270405bd17d42477414f3e04a03b0f77319dad6dcfa93bf2225fc86d5b072a15767e1c96c528cb49aad10adac2f0987518e0ab6ad1422b2f6a6e1b95008908515af8f8e25229f98714fc7bcfac86405567a58dad46435e1e1c9a9f1d40d64c1815a8ec9637e957011ead474f307af7f77dcf43b42bcd497c679f6458380f921577c1f2201a3951f43556fda4a933da66e9215d9620814f7efe891431945b7d703a59922d986c5a5aa7a4f3d08622f3d70656a0eeb5caa6e8876fd100fe0188651004fc295060bd4d071c8a3b0eea874ce8f57cce710456bd9c6ddc613e5894bd9d28f218aef298131096762e1a80a806196d84a08aebe53fcdec082e5edd41bbe56b2a287150cc216f64461841b7753ced9dc226d2a712e0beb3c5b3e25e30888bc8e9eab621176c41e8153906468d78bcf57128f5f8317504a43e5847300d306e4de9e089ceab08c61fc7690e6265886bb997cd4f44551042f29c9aafa839b19124e1b7b947f4fe734882214a0c4e877efc33a826aca15921504784ec31208f5fe025fe0c886914677ff14456fafcd65686fa0b34679b04002bfa99def3ed3c1421aee0639492aa64f548f94c3e0c42d84099393114758c80f89e0e19428891a986f98c607dfc0be446a867b9e519e80970ad346b4259aac04f0b433538556019c527b693ff3974d7b75c16468c852242eb233200226b99ed408f9485b3c77abb3d610871d459ebcb3c1243aac559cec49278a410eb83c38b7c130b916698846a85406343a1350880bdf126d5a3f0e23c51350d617dfc261f68587560cf37bc50cc23bbb7aa2bed7c97e6e1a03ac44bbfa5eeda22c81293d07b6ebaca99b88c8d7176afa173bc976080f73cd5be206a4f3e92b060f43a175e3cb5de297521c5059b93f8d1f1f54b2b2c2a0a7484a638700a4af64038b8d4828315f2ce5e4b57cf4f694d342deeaf017bfba61f1e4855e1a1cef523c1b3af45041389cf985622eac5d7d1238915943ac747cf89103a0661ec3b2459a9f963aa489ee1774bfb90a9fb91c86dbd368f00bef3b5760f9e3e81765b4737e27e38fdebe9f172c4fdbf7cd519bb9f5b7d133de01015b7788acdd15b2c17d217bce05b9d3d1045322a69d2c1bcc904ce388be016b721f519b38179e653b167995ed1765c1e2f7e69608e0b2f69e300f9910dbc959773f509d6512ad46cada69de9f8d984c644bee2f6aab6eace602beee981f81693b0713fd5a62a4f974956b4547b4b2534d99b0646ab33382949d277617b007375bc25b7eddebb77c489f10366f9ef6984713a82b5158659ebd4c4eb407ef449ec245433e6b710661cb8928a3e31a29e16aa4f59d0da7ac259883d18c027f7c8255d951d1fd51e1d6efd7ec4e237e4824b3400a9a099e786eb48adc3be61e39c8df4db73225117a406c52f09c237bbfb57d2a8644cb35f3056bfdcca8de22d46e4352f7f06d600160f4bcf15e8fd0bdcef29583f093354cbe88c94ce23a0260304f6f65e1b33da80f5270b5e78f9daeb59ed5a4a79cc46a09ce7b1a10e3589d37365bc038ca3792e616a066c937e4d4b291c27bd84918e8bdcdd82ff88b535ebc8700917b0ba3c2e8edf4bafb275fe0b21251709c33f2b6ab2daea8cbdd5383c4c097c8be883fc69468bc7cf9e81e459e9d68c5d743daade327b331cf0e291d64a25acffcd75bb74330d9cd77f10fa6204b6bd0dc074288715be2b4e229eb299dbeb696fc420190c73ba7d77301e64ada64fd3b7e22570b2163fee74100d630f8cc0b9a6e110a4317c2c80659840e4f88f5b5326caf2a180f13bf21eb9c3b3b6a277f1f1b92d542e257a81907ad3e640cfb4ce85a1f19bd7e732d4e5a923c453ab783a92466a2090f042368e32cee8c5e57b42f1efc52f6b4963e441ee79b8cea1d0fdf989fa42a2e8d4ca2fd90b2073c4e52ab9c3087993ea00c6847fd15f5e61e194b18b55edbaa2aff53ee0e45273fc0ea23480827bf8f893ad843a928bb62c173eca8b3c267f1c1a74495d3332576bca73dd1af4b3664c478458dd5a167bccdee062ae9e12178cd9191d15c967571a0807a2a9845f8ad45efb865877278e1275f592b3eac4c0d16c7280ca6dc4e67276f1b01bf75942554532dff23091da6acc06c1959d9d343b0742556d0076e781c7426fbc68698f064118c1e48c8ad01ce38f3adddb58bd3983c630505b62c961f1d0c1cb33efaeb7629241b8729b0c9e65d2ed5bc00e09d466f7b61c8ea51088ab21da2c2df10bd89e05f4ef156b75b9c0ef654306693530796da679a9740fa149344aace92b9862c59f5812065205a8f464318fc31e88deb916ae818bad4e87ba219ee5e021d547377e19de06e85769f36cbe675a03701f03f2257e157ee4a48762b796d2ddc266cdbc827ee607a5bc28ceff81932314d053b318d72aa64098f39c64f33d29eff50ed8a2d34bb530c8241fb85de5b2ee69200dadfb568249b3297fb8d1de55769abbf92f5502a910f0ef01da3418609fcd1c15d060d78a7bb1f6297aff407ccfb06e233338ffd6c10d2dc60fe478dd9d9ca21897d2dfee8e86daf14fae06626e7b64d2e8cf02f53db4ca6195e2e440636834d9c3601c1f425b721cb513cb722548c3da07c47f9d32d0415203ead05f6e3759049e35d30efad10ce7ba57e4875b712297266a2c5f1687923bee7701185013e356192bf94722b9777a05222b9a06bbb29ebfd146df58c6c24c6709057011177ec5b0e7c7cbcdd3ace45c8396c64cd40445e09e36e41fb4a180ebb2d975c69730fd958e9f5acc8be6e19108fa270d1596d733e9378808212da528bae1f8cc9eeb4cb98626beb23e6b58a03ad8deaa8116a5483f860caf60f1f40af5f75d71910f045663875a15db63cd1bcfe77eade65275f22a7653565a9158d818115708a9c98c39fc9f57f1c915d070934402b2fb9829710ff96d01037c6ca43972c634dbeee59c5694e867b3a67b7d8c3b2795a99a13ccf4f2f7890e6133b153b000ad2c8b1848083b671ef912b00f6b545f65af4f1be82abfa42bde6047c595b0a2c0df3753e882ccf5c0085853062267afcfb2a5250e8bc605e6878b65d5c631346f6cb269bb4e77576704e79c7995fb1048af1d72b5c6533d858ec2112863ecccf6c541aabe8913468568e8eb2cd5dd72d78c36880f9ce1a403c0f0177155268205c62b4559bf968510c242cc8a08dbb63f041d042bc06e7d28a5ab29bffb3e49fdae733c245dbd6ab037c2a98adcd3bac43f4d92833d6b2d163da9634eaff2fc4f019a6a4d1dd1b6eb4af6f54c1542004c17826b5f84b2d01f15e9cd2d5646326bd2094624c89243202a83353e838ee961efd41d3a9fffa5d857b581af95ecdaf5b2be6b73a37e6da87f37dc33f2cf80b11c50be5047defc754cc022948748f1fc08c8e7edc7194e2b05cfb0f5cbf81f1e25b11f23ea7809aa8b6aed35eb62ca18048b69852bab086158a44078a138567d3246ba2e3aecaa27a857eb8749f46948a2b3bba889d44e0f92757c690dea483d195d6814eae929cd17a3d7632eed2e85bae250b308e4035e7a3af53a9cf02c3db865eb17a09eef4cd20eaad59078eccdbec9cdecf38b3b51d58a07ac56c18a1d01f354da5a41dd1e52b7ae5c64519a51f43de320229737b8fd1f3b6b48d7ff12e6d8ce5484a5d9d819ef1eaf2d0d0f9f38643bf28643640f8a6d8a080534f1b481785186aad542a3121f8d2b36e0007b70f42b81c2f915803c24d15097149ac14828b196eaf7d5c739d80ff4444ad8297aa889bbf09ecfc68a1c30b6d989faed943139f6e7351a52a77174e967922cfb0c0a4e76b7d3e0bc5007e7797113f874b318585d78223517c38c559329a1e583084b8ec269a20ba43a596656dca9591997bd9ce5682d002c6fd93b1219afab27746c45ebe1e0aa32256baaf9cbddbce02be0f0dc7a0eca8beadf0fbc6cd05f99f02220398ef705f4346f883fd0a0c19cea317e943f3111ca13e6b26a9922b84f5facb1ddeea0c645073ee48339d62926887d4c8001c79bf7a815909092cbddc53e2c328dea0ab69b1ae57a268be44d13bc3c8ffb60036b09bab42d86464f329f28be9caf4415867966bbaa6afef0a440c8027869ecf010532aa072814293649b5cb376ce67a1e31fbe2f2525374597efabe6080e6dc0bee5b0584a86fc0bf5cdf7da5502892a5545d5dcaff77851f31cd02a45ed765cab3772d2b67d664b08aa321e8cfbdce5cab54f9fbf4863aa5201d3c79bd6a1651757645dedee9fcea562e17eab64ffb65805fc1fcf070a38cdd0d9948f2f63ea8a369c12a1965b96f6c16c94661c87836f222f2a58b1f4c24e92dfab505b26381fae4b1ff7d23439e8634fa5d907698e40a440904fbf55e160d1acc8c19cc7186edde9dea21270675be409d8305564052515329e502d80be08952b2a43d32cda5689aac4bb0a9f77b10bdd8a2983879c554193c2618448d06c33937c99f7f02133d83115170ebc9842997dac239b0123a80d72650bbb5841a64a742b07fb744179fc0fdcdf533346e5cf53e7d88e51d1d049533a6050bbeec07745486000d7cbce67646208e5d778cc6411fbab08e78bdde85c43224d91010d51d2e4b476f2b1ac038e5f9404923bd3cdaa5c828c75712ca2749513c67899bb3a931b75929919080076700937993633d9db270a470243a7db3d838c12a9530aa9d9c4f2de3ebd9a32ae85be8152da4556dd6e6ebafd31dc5a07b275d37b8e538021eb8b413569bab07d7ba3696f0009d53ef2b3a27c714a934994d76df02d4887c4fab4ab642e900ff5425bbcfedf57f9b84b63d2cb32ce8af833048cab60149c3c5b1f68b498666927462dfba70020cce044598798b7673b17159851e5e5bfca16ca2c25629c1b512303f59d863507e476a6b9f1052adc94e28a036a378059a20be3e23992bdda8afe80c1a79fed8ee835e2f7a4155d4535230ecd06d67cb99567896598f8f7df0788cfc465e1f59c6a0449b21c17d5d06b32b384cb49292a7fb4b36af04d3356dcfabe1c10d26d67b214e81dfebdee5fdedd266882888d520404201580a4ae7b19adf300f35db2fd3dc865c0cec30872e9d26dcd222ba5db191e79440f20158841b7f5a014a121f034ffcc508af78e6eb7d04d82ada23cd1e26ace21168d06a7e6a6ea2a3203e6eeb41c2a163c2ed351bf3a4df34f7e4c7237a409a68a0aeae01aa9ef0538c694c46342166388f6f43da6f9770682dc07d1cd94a1e0209f06955019ba2809b941c9c8a34720912a88b24ef07330755c8fcb320eba7ae5cc5cb487589d95a2e2e98c362c346669d5e7fe6e4c5f0409770c212164ced9e8c54836764a3b1c899f181636418a2467bca105516c948a1da6874010950b44275d91d2e0471107b7112ff87e678d41bcc11d7daa175a0ed7fe92e4acfb75e8f5ca8b56c341e50c3ffa54f264ffb029fd0c8197d75dd04192f46b03d0217ddbb27f700c004866715f5dff738675a105b9814cb7fdd7cabc18ae5d5c8350745ee9a4008ee528d9841ce4d616ac097415245a34e2e46a33fcd4860e90c8790e0854f9c8060044f9cf4629c4a34fa512c3a4bbe745e8cc1fc281c61914e54fcd", @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRESOCT=0x0], 0x1, 0x361, &(0x7f0000001280)="$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")
r0 = open(&(0x7f0000001640)='.\x00', 0x8000, 0x112)
getdents(r0, &(0x7f0000001680)=""/184, 0xb8)
getdents(r0, 0x0, 0x0)

38.555453098s ago: executing program 3 (id=6176):
syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x2000200, &(0x7f0000000740)={[{@nodiscard}]}, 0x7, 0x4ee, &(0x7f0000000780)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000cc0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

37.897263035s ago: executing program 3 (id=6200):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000003c0))
r1 = syz_open_pts(r0, 0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000400)=0xf)

37.535710812s ago: executing program 3 (id=6214):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/net/bridge0/bridge/multicast_startup_query_count\x00', 0x1, 0x0)
write$binfmt_script(r0, &(0x7f0000012300)={'#! ', './file0'}, 0xb)

37.501318155s ago: executing program 49 (id=6214):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/net/bridge0/bridge/multicast_startup_query_count\x00', 0x1, 0x0)
write$binfmt_script(r0, &(0x7f0000012300)={'#! ', './file0'}, 0xb)

33.064132858s ago: executing program 9 (id=6317):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000240)={0xfffffffe, 0x8006, 0xfffffffc, 0x8c4d2, 0x3, "0441920887e87fcb367800000000080100", 0x1, 0x200})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x98)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x8)

32.919957003s ago: executing program 9 (id=6323):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000640)={0x13, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000680)=[{0x0}, {&(0x7f00000006c0)="08001efbb07d586e", 0x8}], 0x2}, 0x20000804)

32.402586195s ago: executing program 9 (id=6339):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100))
shutdown(r1, 0x1)

32.348984001s ago: executing program 9 (id=6342):
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f00000001c0)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f00000002c0)="$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")
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file1\x00', 0x143041, 0x149)
pwritev2(r0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

32.205218526s ago: executing program 9 (id=6346):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)

32.079776569s ago: executing program 9 (id=6347):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r1, 0xffffffffffffffff, 0x0)

32.079621589s ago: executing program 50 (id=6347):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r1, 0xffffffffffffffff, 0x0)

23.63058147s ago: executing program 7 (id=6511):
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x800080, &(0x7f0000000800)=ANY=[], 0x1, 0x105f3, &(0x7f000001d600)="$eJzs3E1vG1UXAODrpOnb9i0lQizYdSSElEi1FSdpBbsAqQCJVBEfC1bg2I7l1l+KncQUIQJrxLJ/BFbs2fMn2CEWSOyKQJ57DU1ooaUmn88jjc/c65kz51pVrTMTOQBn1mz2y8+FcCVcDCFMhxAuh5DvF9KWW4nhhRDC1RDC1ANbIc3/MXE+hHAphHBllDzmLKS3Pr23t3Z/uHYpZb12NCsGJqXyFOe+FEJo9+L+bjvGbiPG22m+stPMY3t5J8X4RvtOGndj3K1v5Bl2K+PjYmVLjXh8t7fdH8XNVqU6io3mZj7f68QL9nca4zz5CbcrW/m4Vt8Yl7uXn3c3DoYp3u0P4k76z7L3cZ4+DAbjGK9TH9bjenp38ljtDNJ8N9ZXqw9HcSfFfpwO1W6rltex8a8+4hPh7WZne5jt1Lf6zW4nu14qv1wq3yiWt7q1+qC+XKy0azeWs7lGa3RYcVCvtFca3W6jVS9Vu+35bK5RrRbL5Wxutb7RrHSycrm0VFooXp9Pe9eyN269n7Vq2dwovtbsbA+arX622d3K4hnz2WJp6ZX57MVy9u7aerb+zs2ba+vvfbj6wa1X1956PR30l7KyucWFxcVieaG4WJ5/wgX/eizXP/qKPpz1H3Dh6U7nrCscdQEAJ0/e/18Mh9n/f/LtvZ9Wv6h8r/+HM+wk9f/N1JA/qv/v1VI+/f8TO9D/jr4uTnf///frzy/0+XFc/7lUsP6f40T/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwZv0w8/Wb+c5sHP8/zT+Tpp5L40IIYSqE8NtDTIfz+3JOpzwzjzh+5kAN3xVCnmF0jf+l7VIIYSVt9599eO3nJvpJAAAAwOn0zd7Vr2K3Hl9mj7ogDlO8aTN1+aMJ5SuEEGZmf5xQtqnRy/MTSpb/+z4XhhPKlt/AujChZOmm2GcTSvdYpveFCw+EQgxTh1kNAABwOPZ3Ap6oAwAAnF5fHnUBTN7jPL8rhPGjzPGz4Pwv7/98IHhx3wgAAAA4gQpHXQAAAADwn8v7/5P8+38AAADAP4u//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzOzv3cqA1EcQB+tnEC+aOgKMdIaYUblJEScswRUUCaoATSQhqgBnLbElZ4hW20GC0CrY3Rou+T7PEY8+OBuMyMZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALim//lq9nf+48+Jl7NLc7ZFO919IwAAAODYJl/NyoNx1f9Yn/9cn/pa95OISCPipbF7Fu8amVmdk5+4Pj+q4V9EmbD7jPf19iEiJvX2+OXavwIAAADcr/ViOa2X+Mvd+NYF0adq0ib99LOjvCQi8vFDR2npbveto7Dy/z2I3x2llRNYw47Cqim3QVdpF8kazfCgSaom7bUcAACgF82RQL+jEAAAAPr06+B4fsM66FkS+6XM/Vpweef984LgqNEDAAAA3qDk1gUAAAAALY3OXlGO/z3/DwAAAO5b9fw/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArmmTr2brxXLaNmdbvML3YfXmoijOxE/a1gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAE/vzjgIwCAZh8I95d8H7HzYsxDOkcKaQDxcLAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBy24glRxuxJp5vb4k9172qjkyJM1Piypy486D/+BsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB42Z+XFAiBIIiCOeN/J33/w0qCnkGECGh4VFGLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4LN+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42Lmf1ziqOADg39lf/SHSNUqgXqwoVBSbbP2F4KUHIXgQPInHNd2U1a1Km4MtOZiLB8H/wIteexECgtRD/4IePNljvVSQHKp48BR5uzPptIk6UTO7iZ8PvHnfvn2d+b4JhHxnXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDbPxakibqZDd3yMRj72w9215dTfeqBP7vSvnUwtxVnNeR80rXSP5qedBQAAAIdds6jvI+J2e2Mp9Y1uxEOlOanmX3t4Ehf1/IN1f9EXtX9q17/76q3tk3Qn12lHxDfd0WCxnuXNuhtbW1uVJp74sw+698Lxs4TJE5rm+MvWeGP90c32+K5nn9+8+XpnHB75LxIHAP6dM0WfByvZJ+Ofj1aGo0FvmokBcHC1/v7jYkpR/ze7NeQFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMGWb6/FcEWcR8XjrXpzcuru2vFt/p3/tZNFOvPPYp+VzplO0I2JlOBocrXEts+zpivMuX7n6fn80GlzaU/DEP/pfAoHgoAT7/A0KAIBDpZ23VNffbm8spbFsLmLry/vr/9OlOCrW/zeG10+Xr1Wu/3u1rXC2Va3/F1YvfrRw+crV54cX+xcGFwYfnO292Htl8dWXei8vpPu5ODnuc7YAAAAcVJ28lev/xtzO9//HS3FUrP+//+ntn8vXaqr/d9j7+/99TggAAOB/7JFTv/2S7TKedTrxcX919VJvctz+99nJcQqp/rVjO4eO5C2Ld7fr/+bcFHIDAAAAare5nt33/v98KY6K7/+/ffb3L8rnbOaPIFaGo8GZ5Q9H5+tbzmxq7jbY3XVqHb9OvN/LBQAAYHqO5a28/7893v/feDLFv0ZEIyKeeWoyP/8zgJXq/9dan50rX6u8//+Fepc5cxrzk/tRZf//eO58RGu+hsQAAAA4lI7mLdX/P7Y3lt77+vibHfv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A/25942YSCM4/DrS6LEbTJCeouPGWioEKwASEiWPAMDsBANFa3FIrACSHCu6QzF8zT/X3HFvQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8PauT198REQRqcsUabr9O39GxFekXdtOvu9Z7C+n5ueRi8NxlvM35v9lRJRR9HEOAEDvqm5zrDf1apB3mHeUd5y3Kpt6+cpPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBjBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKwAA//9piFnI")
r0 = openat(0xffffffffffffff9c, &(0x7f0000003380)='./file1\x00', 0x101842, 0x15)
pwrite64(r0, &(0x7f00000033c0)='2', 0xfdef, 0xc00)
renameat2(0xffffffffffffff9c, &(0x7f0000003900)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000003940)='./file2\x00', 0x4)

22.315763984s ago: executing program 7 (id=6538):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1c\x00'}]}, 0x1c}}, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x70bd28, 0x25dfdc03, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2083, @mcast2, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @private2, 0x8}}}}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x4008004)

21.793310468s ago: executing program 7 (id=6552):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd24, 0x25dfe001, {0x2, 0x490a93895127c614, 0x20, 0x0, 0xfc, 0x0, 0xc8, 0x7, 0xfff5}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_DST={0x8, 0x1, @local}, @RTA_SRC={0x8, 0x2, @rand_addr=0x64010102}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0xea5bc50b6199d77e)

21.759014951s ago: executing program 7 (id=6555):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000300), 0xfe, 0x259, &(0x7f0000000580)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340), 0xd8, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

21.57118785s ago: executing program 7 (id=6559):
r0 = socket(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f000000ae40)={0xa, 0x4e21, 0xffffff8b, @mcast1, 0x2}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f000000ae80)='mountinfo\x00')
sendfile(r0, r1, 0x0, 0x6)

20.632292676s ago: executing program 7 (id=6592):
mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000ac0)='./trace\x00', &(0x7f0000000b00)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace/events/sched/sched_switch/trigger\x00', 0x302, 0x0)
write(r0, &(0x7f0000000b80)="686973743a93", 0x6)

20.619993357s ago: executing program 51 (id=6592):
mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000ac0)='./trace\x00', &(0x7f0000000b00)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace/events/sched/sched_switch/trigger\x00', 0x302, 0x0)
write(r0, &(0x7f0000000b80)="686973743a93", 0x6)

5.380552702s ago: executing program 0 (id=6931):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b00)={r0}, 0xc)

5.355493014s ago: executing program 0 (id=6934):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000ffdbdf256700000008000300", @ANYRES32=0x0, @ANYBLOB="0c008b"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

5.322391877s ago: executing program 0 (id=6935):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
syz_clone3(&(0x7f0000000180)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)

5.016592479s ago: executing program 0 (id=6937):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000001580)={0x7, 0x9dc5, 0x0, 0x0, 0xf})

4.90374502s ago: executing program 0 (id=6938):
syz_mount_image$ext4(&(0x7f0000000580)='ext2\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@errors_continue}, {@quota}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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")
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f00000003c0)={{0x1, @multicast2, 0x4e22, 0x800002, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x8, 0x2000050}}, 0x44)
getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040))

4.846048326s ago: executing program 0 (id=6939):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000300)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040d90455a00000000000010902"], 0x0)
write$UHID_INPUT2(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0c000000151820"], 0xc)

1.613867906s ago: executing program 6 (id=7023):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x9}]})
close(0x3)

1.543122533s ago: executing program 6 (id=7025):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x70bd2e, 0x25dfdbfb, {0x2, 0x0, 0x0, r1, 0x40, 0xa2, 0x7}, [@NDA_DST_MAC={0xa, 0x1, @link_local}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

1.505007317s ago: executing program 6 (id=7028):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0)
sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x40000)

1.4795034s ago: executing program 6 (id=7030):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x4002, &(0x7f0000000600)={[{@test_dummy_encryption_v1}, {@dioread_nolock}]}, 0x1, 0xbe4, &(0x7f0000000640)="$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")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000003f00)='./file1\x00', 0x8a141, 0x59)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

1.318974336s ago: executing program 6 (id=7035):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffca2, 0x0}}, 0x10)

1.27220701s ago: executing program 6 (id=7037):
r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0xde64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x5, 0x12, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x15, 0xf}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

1.207833817s ago: executing program 8 (id=7039):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80841e, &(0x7f0000000240)={[{@nojournal_checksum}, {@inlinecrypt}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000280)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
r0 = openat(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000010c0)={@id={0x2, 0x0, @d}})
removexattr(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)=@known='system.posix_acl_access\x00')

1.094510259s ago: executing program 8 (id=7045):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x804880, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1213, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000017c0)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000001800), 0x208e24b)
ftruncate(r0, 0xc2b)

692.927289ms ago: executing program 8 (id=7061):
syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000400)='./file2\x00', 0x2000000, &(0x7f0000000440)=ANY=[], 0x1, 0x20f, &(0x7f0000000480)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x2000, 0x28)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0)
open(&(0x7f0000000000)='./file1\x00', 0x24842, 0x1a6)

692.82654ms ago: executing program 4 (id=7062):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x20000)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0)

683.251221ms ago: executing program 4 (id=7063):
syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000240)='./bus\x00', 0x4a, &(0x7f0000008a80)=ANY=[@ANYBLOB="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", @ANYBLOB="97665ad9f58d1160a84cd8c589d02673d5bca6a10624466d9494bfab68e195c82a3d4165522669d44bc2eb3b0e93794bf91f7ceeeb2f8fe7f914225983b1caa60c4f605cdfa84ae26cb64d410e189be072e03c3fa5cceaa839b9b13d071065c241cff34560d1800882676f3ed5e13d65fa1efb", @ANYRES16], 0xfd, 0x553e, &(0x7f0000000440)="$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")
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x10)
fallocate(r0, 0x0, 0x0, 0x1000f4)
sendfile(r0, r0, 0x0, 0x40000000800)

473.590322ms ago: executing program 8 (id=7064):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000200)={[{@fat=@nfs_nostale_ro}, {@fat=@dos1xfloppy}, {@fat=@showexec}, {@fat=@discard}, {@dots}, {@nodots}, {@fat=@errors_continue}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@fat=@nfs_stale_rw}, {@fat=@fmask={'fmask', 0x3d, 0x54fcfa75}}, {@fat=@dmask={'dmask', 0x3d, 0x8}}, {@dots}, {@dots}, {@fat=@flush}]}, 0x1, 0x251, &(0x7f0000001300)="$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")
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
openat(0xffffffffffffffff, 0x0, 0x2, 0x82)
sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff)

378.002842ms ago: executing program 2 (id=7066):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0xa84, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0xc4}], 0x1, 0x2000, 0x0)

354.620424ms ago: executing program 2 (id=7067):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000008000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"], 0x5c}}, 0x0)

337.816256ms ago: executing program 8 (id=7068):
mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0)
read$eventfd(r0, 0x0, 0x0)

330.561157ms ago: executing program 2 (id=7069):
r0 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
fcntl$setstatus(r0, 0x4, 0x0)
connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10)

301.64151ms ago: executing program 2 (id=7070):
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x141091, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

296.783ms ago: executing program 8 (id=7071):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x11, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0x361}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0xa, 0x46}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000300)={0x20, 0x15, 0x8a, "ca331ba8260b5b7a1c0b9047a258ebea4ae1373682a37a6e3c72bd7bbfb1da926aed7bbddbdc48ed2f35f48db6f562befaf080fced67bbf03928991b0766584cd3f62bc9e52286a747bc7fe3776e2faede7df04a3d212815dd5e03611e9fa6224a5c615c402956913e0403140c3275efa1bce3fc6e45f2234cbc0df17fabd7c307b50ad24bbf4950c4aa"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0xfffffffffffffe2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x371, {0xfffffffffffffef6, 0x21, 0xfffd}}}, &(0x7f0000000100)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

242.867646ms ago: executing program 2 (id=7072):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f00000003c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000bc0)='!', 0x1, 0x2cf5)
read$FUSE(r0, &(0x7f0000000dc0)={0x2020}, 0x2020)

242.432136ms ago: executing program 4 (id=7073):
r0 = fsopen(&(0x7f00000005c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@cgroup=r1, 0x20, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

164.612913ms ago: executing program 2 (id=7074):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRES32, @ANYRESDEC], 0xf9, 0x1224, &(0x7f0000000200)="$eJzs289rHGUYB/Bn17T5UZONWqvtQV/wIh6WJgdPXoKkIFlQaiO0gjA1E10y7pbMElgRqyev/hni2Zvg1VMu/g3ecumxB3EkM6ZJ2mitmKzo53OZh3mf77wzEALv8r57b3z9ydZm2d3MRtFutaJ9JyLdT5GiHQdeWmuuN2+trfR6q9dTurZyY+n1lNLCyz+8/9l0RFx477uF76djd/GDvXvLP+9e2r289+uNj/tl6pdpMBylLN0eDkfZ7WIhbfTLrW5K7xR5VuapPyjz7SPjedp8LSLGKRtszM/d2c7LMmWDcdrKx2k0TKPtcco+yvqD1O120/xc8IfOPb5l/dv7VVVFVNW5OB9VVVWzMRcX4umYj4X4IiKeiWfjubgYz8eleCFejMt111m8PgAAAAAAAAAAAAAAAAAAAPx//Nn5/06cd/4fAAAAAAAAAAAAAAAAAAAAzsC7N2+trfR6q9dTmokovtpZ31lvrhExG7G431REHlejE79Effq/0dTX3uqtXk21xfiyuPt7/u7O+lP181cO8kvR2X9Yk52qxw7yS00+Hc9Px9x+fjP6dX45OnHx5PmXT8zPxKuvHMl3oxM/fRjDKGKjnvsw//lSSm++3Xsof6XuAwAAgP+CbnrgxPV7t2mYenS8yT9YXz/+94GH1tdTcWVqst9ORDn+dCtrF/l2XRQHxcwjd06viDOc658tIu5VdTF9fKh9SpO2Y+KffKRo/TteQ/H3ix+/ObwzG8d7Jv2fibNw+Pcw6TcBAAAAAAAAAADgSTzxnsHZv7hdt2o1ExzdWdaa3HcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/sQPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCpAAAA//9A78Mg")
r0 = openat(0xffffffffffffff9c, &(0x7f0000001880)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f00000018c0)=""/59, 0x5e)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)

126.106867ms ago: executing program 4 (id=7075):
syz_mount_image$vfat(&(0x7f0000000380), &(0x7f00000003c0)='./file1\x00', 0xa00804, &(0x7f0000000400)={[{@numtail}, {@shortname_winnt}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x2}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@dmask={'dmask', 0x3d, 0xc}}, {@rodir}, {@uni_xlateno}, {@uni_xlate}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@utf8no}, {@rodir}, {@rodir}]}, 0x1, 0x2b9, &(0x7f0000000500)="$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")
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./trace\x00', 0x1ff)

100.08354ms ago: executing program 4 (id=7076):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r1, 0x1}, 0xc)

0s ago: executing program 4 (id=7077):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@usrquota}]}, 0xfd, 0x573, &(0x7f0000000600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file1\x00', 0x42, 0x10c)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
pipe2(&(0x7f00000000c0), 0x0)

kernel console output (not intermixed with test programs):

651'.
[  117.206782][ T7303] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2651'.
[  117.333350][ T7332] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000004,quota,,errors=continue
[  117.347370][ T7332] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.384852][ T7353] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  117.392623][ T7353] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  117.490420][ T7356]  loop7: p1 p2 p3 p4[DM]
[  117.508323][ T7356] loop7: p1 size 835329 extends beyond EOD, truncated
[  117.518507][ T7356] loop7: p2 size 327680 extends beyond EOD, truncated
[  117.526490][ T7356] loop7: p3 start 1052673 is beyond EOD, truncated
[  117.533044][ T7356] loop7: p4 size 262144 extends beyond EOD, truncated
[  117.555434][ T7374] netlink: 'syz.8.2693': attribute type 1 has an invalid length.
[  117.678195][  T389] udevd[389]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  117.688977][  T388] udevd[388]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  117.712780][  T317] udevd[317]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  117.838318][ T7359] F2FS-fs (loop6): Invalid segment/section count (458783, 24 x 150994945)
[  117.848144][ T7359] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  117.857281][ T7359] F2FS-fs (loop6): invalid crc value
[  117.872681][ T7359] F2FS-fs (loop6): Found nat_bits in checkpoint
[  117.893803][ T7359] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  117.900915][ T7359] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  117.992582][ T7410] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  118.000548][ T7410] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  118.008330][ T7412] netlink: 'syz.8.2694': attribute type 2 has an invalid length.
[  118.067194][ T7415] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  118.083002][ T7415] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  118.093581][ T7415] EXT4-fs error (device loop4): ext4_get_journal_inode:5247: inode #5: comm syz.4.2710: unexpected bad inode w/o EXT4_IGET_BAD
[  118.107224][ T7415] EXT4-fs (loop4): no journal found
[  118.112501][ T7415] EXT4-fs (loop4): can't get journal size
[  118.129477][ T7415] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue
[  118.170446][ T7415] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1465: inode #12: block 16: comm syz.4.2710: path /: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0
[  118.193770][ T7427] EXT4-fs (loop6): Ignoring removed oldalloc option
[  118.200387][ T7427] EXT4-fs (loop6): Ignoring removed oldalloc option
[  118.253274][ T7427] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  118.294139][ T7432] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nogrpid,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,nodiscard,journal_dev=0x0000000000000001,init_itable,
[  118.324811][  T282] EXT4-fs error (device loop4): __ext4_iget:5034: inode #15: block 1803188595: comm syz-executor: invalid block
[  118.348154][ T7432] EXT4-fs error (device loop5): ext4_read_inline_dir:1622: inode #12: block 7: comm syz.5.2716: path /473/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  118.370210][ T7432] EXT4-fs (loop5): Remounting filesystem read-only
[  118.382983][  T282] EXT4-fs error (device loop4): __ext4_iget:5034: inode #15: block 1803188595: comm syz-executor: invalid block
[  118.395590][ T7427] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue
[  118.538951][ T7451] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 51, start 0000ffff)
[  118.549729][ T7451] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 51, start 0000ffff)
[  118.559930][ T7451] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 51, start 0000ffff)
[  118.570952][ T7451] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 51, start 0000ffff)
[  118.581066][ T7451] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 51, start 0000ffff)
[  118.591081][ T7451] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 51, start 0000ffff)
[  118.601271][ T7451] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 51, start 0000ffff)
[  118.611307][ T7451] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 51, start 0000ffff)
[  118.621475][ T7451] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 51, start 0000ffff)
[  118.629901][ T7421] F2FS-fs (loop8): Invalid segment/section count (458783, 24 x 150994945)
[  118.634760][ T7451] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 51, start 0000ffff)
[  118.650367][ T7421] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  118.660390][ T7455] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  118.672696][ T7455] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  118.680265][ T7421] F2FS-fs (loop8): invalid crc value
[  118.707880][ T7421] F2FS-fs (loop8): Found nat_bits in checkpoint
[  118.766202][ T7457] EXT4-fs (loop7): orphan cleanup on readonly fs
[  118.783629][ T7421] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  118.793709][ T7457] EXT4-fs warning (device loop7): ext4_enable_quotas:6495: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  118.809990][ T7421] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  118.828368][ T7457] EXT4-fs (loop7): Cannot turn on quotas: error -22
[  118.847005][ T7457] EXT4-fs error (device loop7): ext4_ext_check_inode:500: inode #13: comm syz.7.2714: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  118.883359][ T7457] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.2714: couldn't read orphan inode 13 (err -117)
[  118.914001][ T7457] EXT4-fs (loop7): shut down requested (2)
[  118.948141][ T7467] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.955223][ T7467] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.962642][ T7467] device bridge_slave_0 entered promiscuous mode
[  118.972818][ T7467] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.980221][ T7467] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.992474][ T7467] device bridge_slave_1 entered promiscuous mode
[  119.071724][ T7467] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.078808][ T7467] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.086085][ T7467] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.093110][ T7467] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.160545][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  119.170525][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.178156][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.209616][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  119.218124][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.225177][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.233931][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  119.242173][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.249223][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.256773][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  119.264883][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  119.280584][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  119.291996][ T7467] device veth0_vlan entered promiscuous mode
[  119.298564][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  119.307240][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  119.315257][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  119.331288][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  119.340170][ T7467] device veth1_macvtap entered promiscuous mode
[  119.357671][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  119.379168][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  119.639803][ T7479] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  119.723195][  T568] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  119.734087][ T7479] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  119.752726][ T7479] EXT4-fs error (device loop6): ext4_get_journal_inode:5247: inode #5: comm syz.6.2719: unexpected bad inode w/o EXT4_IGET_BAD
[  119.768805][ T7479] EXT4-fs (loop6): no journal found
[  119.774438][ T7479] EXT4-fs (loop6): can't get journal size
[  119.853085][ T7491] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  119.860496][ T7479] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1465: inode #12: block 16: comm syz.6.2719: path /: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0
[  119.873421][ T7491] 9pnet: p9_fd_create_unix (7491): problem connecting socket: ./file0: -13
[  119.935966][ T2127] EXT4-fs error (device loop6): __ext4_iget:5034: inode #15: block 1803188595: comm syz-executor: invalid block
[  119.956689][ T2127] EXT4-fs error (device loop6): __ext4_iget:5034: inode #15: block 1803188595: comm syz-executor: invalid block
[  119.981706][ T7495] EXT4-fs error (device loop8): ext4_read_inline_dir:1622: inode #12: block 7: comm syz.8.2723: path /210/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  120.003601][  T568] usb 10-1: Using ep0 maxpacket: 8
[  120.015871][ T7495] EXT4-fs (loop8): Remounting filesystem read-only
[  120.048494][ T7503] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2730'.
[  120.123245][  T568] usb 10-1: config index 0 descriptor too short (expected 1307, got 27)
[  120.136771][  T568] usb 10-1: config 0 has an invalid interface number: 0 but max is -1
[  120.166497][  T568] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0
[  120.184296][  T568] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 65535, setting to 1024
[  120.199344][  T568] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  120.302219][ T7523] printk: console [ttyS0] disabled

syzkaller
syzkaller login: 
syzkaller
syzkaller login: [  296.562368][T15859] printk: console [ttyS0] enabled
[  296.629997][T15868] EXT4-fs (loop3): Ignoring removed nobh option
[  296.643149][   T53] usb 7-1: new low-speed USB device number 12 using dummy_hcd
[  296.671639][T15868] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  296.712744][T15868] EXT4-fs error (device loop3): ext4_clear_blocks:880: inode #13: comm syz.3.6095: attempt to clear invalid blocks 1 len 1
[  296.766358][T15868] EXT4-fs (loop3): Remounting filesystem read-only
[  296.786443][T15868] EXT4-fs error (device loop3): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  296.810942][T15862] F2FS-fs (loop5): invalid crc value
[  296.824291][T15862] F2FS-fs (loop5): Found nat_bits in checkpoint
[  296.856551][T15868] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.6095: invalid indirect mapped block 1819239214 (level 0)
[  296.880766][T15862] F2FS-fs (loop5): Start checkpoint disabled!
[  296.892560][T15862] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  296.913597][T15884] EXT4-fs (loop2): 1 truncate cleaned up
[  296.919316][T15884] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,
[  296.931187][T15868] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.6095: invalid indirect mapped block 1819239214 (level 1)
[  296.964930][T15884] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.6101: bg 0: block 465: padding at end of block bitmap is not set
[  296.979349][   T15] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  296.989706][T15868] EXT4-fs (loop3): 1 truncate cleaned up
[  297.005322][T15868] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=..
[  297.028037][T15884] EXT4-fs (loop2): Remounting filesystem read-only
[  297.035145][    T7] attempt to access beyond end of device
[  297.035145][    T7] loop5: rw=2049, want=40976, limit=40427
[  297.063204][   T53] usb 7-1: unable to get BOS descriptor or descriptor too short
[  297.143243][   T53] usb 7-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt
[  297.166760][   T53] usb 7-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt
[  297.194163][T15030] blk_update_request: I/O error, dev loop6, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  297.209813][T14356] blk_update_request: I/O error, dev loop6, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  297.222904][T14024] blk_update_request: I/O error, dev loop6, sector 7944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  297.234543][   T15] usb 8-1: Using ep0 maxpacket: 32
[  297.259952][   T53] usb 7-1: config 1 interface 0 has no altsetting 0
[  297.278904][T14356] blk_update_request: I/O error, dev loop6, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  297.290335][T14024] blk_update_request: I/O error, dev loop6, sector 7944 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  297.303231][T15030] blk_update_request: I/O error, dev loop6, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  297.333201][T14356] Buffer I/O error on dev loop6p2, logical block 1008, async page read
[  297.343322][T14024] Buffer I/O error on dev loop6p4, logical block 992, async page read
[  297.353295][   T15] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  297.364357][T15030] Buffer I/O error on dev loop6p1, logical block 752, async page read
[  297.399299][   T15] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  297.418752][T15904] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda10b903, utbl_chksum : 0xe619d30d)
[  297.443237][   T15] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  297.475539][T15904] exFAT-fs (loop2): error, invalid size(size(80) > aligned(18374686479671623680)
[  297.475539][T15904] 
[  297.487154][   T15] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.509762][   T15] usb 8-1: config 0 descriptor??
[  297.563219][   T53] usb 7-1: string descriptor 0 read error: -22
[  297.569835][   T15] hub 8-1:0.0: USB hub found
[  297.575755][   T53] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  297.605034][   T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.628132][T15902] F2FS-fs (loop5): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  297.653292][T15902] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  297.663329][T15850] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  297.672028][T15902] F2FS-fs (loop5): invalid crc value
[  297.681974][T15850] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  297.692826][T15902] F2FS-fs (loop5): Found nat_bits in checkpoint
[  297.735101][T15902] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  297.743165][T15902] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  297.773296][   T15] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  297.823178][ T3711] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  297.856891][T13565] attempt to access beyond end of device
[  297.856891][T13565] loop5: rw=2049, want=45104, limit=40427
[  297.920827][ T9717] usb 7-1: USB disconnect, device number 12
[  298.086239][T15917] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  298.104518][T15917] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  298.113768][T15917] F2FS-fs (loop3): invalid crc value
[  298.120150][T15917] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  298.141238][T15917] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  298.148649][T15917] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  298.172186][ T7517] attempt to access beyond end of device
[  298.172186][ T7517] loop3: rw=2049, want=45104, limit=40427
[  298.184474][ T3711] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  298.204132][   T15] hid-generic 0003:046D:C31C.0029: item fetching failed at offset 0/1
[  298.213445][ T3711] usb 3-1: config 0 interface 0 has no altsetting 0
[  298.222333][   T15] hid-generic: probe of 0003:046D:C31C.0029 failed with error -22
[  298.233703][ T3711] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00
[  298.247952][ T3711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.258703][ T3711] usb 3-1: config 0 descriptor??
[  298.512590][T15907] EXT4-fs (loop2): Test dummy encryption mode enabled
[  298.523257][   T53] usb 8-1: USB disconnect, device number 11
[  298.547637][T15907] EXT4-fs (loop2): Ignoring removed oldalloc option
[  298.580012][T15907] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue
[  298.632193][   T24] audit: type=1400 audit(70411362.669:995): avc:  denied  { create } for  pid=15906 comm="syz.2.6110" name=2E02 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  298.743169][ T3711] usbhid 3-1:0.0: can't add hid device: -71
[  298.752585][ T3711] usbhid: probe of 3-1:0.0 failed with error -71
[  298.771787][ T3711] usb 3-1: USB disconnect, device number 10
[  299.155757][T15939] F2FS-fs (loop3): invalid crc value
[  299.212231][T15939] F2FS-fs (loop3): Found nat_bits in checkpoint
[  299.287702][T15948] SELinux: failed to load policy
[  299.340123][T15939] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  299.480059][ T7517] attempt to access beyond end of device
[  299.480059][ T7517] loop3: rw=2049, want=45104, limit=40427
[  299.533206][ T3711] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  299.751843][T15967] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  299.783205][   T53] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  299.803193][T15967] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  299.862599][T15967] F2FS-fs (loop5): invalid crc value
[  299.917933][T15967] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  299.929226][ T3711] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  299.956727][ T3711] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  299.993117][ T3711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.027657][ T3711] usb 7-1: config 0 descriptor??
[  300.101035][T15967] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  300.150803][T15967] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  300.173289][   T53] usb 8-1: config 0 interface 0 has no altsetting 0
[  300.193178][   T53] usb 8-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[  300.227853][   T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.264182][   T53] usb 8-1: config 0 descriptor??
[  300.281147][T13565] attempt to access beyond end of device
[  300.281147][T13565] loop5: rw=2049, want=45104, limit=40427
[  300.533651][ T3711] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor
[  300.573286][ T3711] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.002A/input/input69
[  300.695500][ T3711] keytouch 0003:0926:3333.002A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0
[  300.755510][   T53] logitech-hidpp-device 0003:046D:C262.002B: hidraw1: USB HID v0.00 Device [HID 046d:c262] on usb-dummy_hcd.7-1/input0
[  300.903895][    T7] tipc: Disabling bearer <udp:syz2>
[  300.913262][    T7] tipc: Left network mode
[  300.975872][ T3711] usb 8-1: USB disconnect, device number 12
[  301.010157][   T15] usb 7-1: USB disconnect, device number 13
[  301.042100][T16019] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  301.081614][T16019] EXT4-fs error (device loop2): ext4_empty_dir:3077: inode #12: comm syz.2.6147: Directory hole found for htree leaf block 0
[  301.141471][T16023] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.158854][T16023] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.173944][   T24] audit: type=1400 audit(70411365.219:996): avc:  denied  { create } for  pid=16027 comm="syz.3.6159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=icmp_socket permissive=1
[  301.200935][T16023] device bridge_slave_0 entered promiscuous mode
[  301.225973][T16023] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.243818][T16023] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.251131][T16023] device bridge_slave_1 entered promiscuous mode
[  301.257902][   T24] audit: type=1400 audit(70411365.239:997): avc:  denied  { create } for  pid=16027 comm="syz.3.6159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1
[  301.333862][T16023] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.340930][T16023] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.348199][T16023] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.355251][T16023] bridge0: port 1(bridge_slave_0) entered forwarding state
[  301.373330][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  301.417749][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  301.425986][  T112] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.433760][  T112] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.457717][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  301.466020][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.473026][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[  301.533301][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  301.565079][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.572138][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.619111][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  301.664626][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  301.673727][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  301.705617][T16023] device veth0_vlan entered promiscuous mode
[  301.713617][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  301.733858][    T7] device bridge_slave_1 left promiscuous mode
[  301.739965][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.773529][    T7] device bridge_slave_0 left promiscuous mode
[  301.779667][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.813987][    T7] device veth1_macvtap left promiscuous mode
[  301.833159][    T7] device veth0_vlan left promiscuous mode
[  301.988233][T16023] device veth1_macvtap entered promiscuous mode
[  302.014733][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  302.033385][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  302.051051][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  302.078880][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  302.104138][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  302.132933][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  302.161752][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  302.319533][T16039] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945)
[  302.348437][T16039] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  302.367381][T16039] F2FS-fs (loop2): invalid crc value
[  302.378650][T16047] F2FS-fs (loop7): Invalid SB checksum offset: 0
[  302.393949][T16039] F2FS-fs (loop2): Found nat_bits in checkpoint
[  302.410425][T16047] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  302.435471][T16039] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  302.452754][T16039] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  302.461003][T16047] F2FS-fs (loop7): invalid crc value
[  302.473219][   T15] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  302.521917][T16047] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  302.578793][T16032] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix.
[  302.597384][T16032] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix.
[  302.613627][T16047] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  302.651105][T16047] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  302.733663][   T15] usb 1-1: Using ep0 maxpacket: 8
[  302.764035][T12925] attempt to access beyond end of device
[  302.764035][T12925] loop7: rw=2049, want=45104, limit=40427
[  302.853250][   T15] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  302.873181][   T15] usb 1-1: config 179 has no interface number 0
[  302.879476][   T15] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  302.931095][   T15] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  302.962791][   T15] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  302.996050][   T15] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  303.027866][   T15] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  303.071654][   T15] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  303.101942][   T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.143184][T16054] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  303.383927][   T15] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input70
[  303.571439][   T15] usb 1-1: USB disconnect, device number 10
[  303.583128][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  303.591723][   T15] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  304.108417][T16079] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  304.168399][   T24] audit: type=1400 audit(70411368.209:998): avc:  denied  { map } for  pid=16086 comm="syz.2.6162" path="socket:[219684]" dev="sockfs" ino=219684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  304.271780][T16100] device-mapper: verity: sha512 using implementation "sha512-avx2"
[  304.325648][T16100] device-mapper: table: 253:2: verity: Invalid salt
[  304.334448][T16106] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.6176: bg 0: block 5: invalid block bitmap
[  304.361001][T16100] device-mapper: ioctl: error adding target to table
[  304.387783][T16097] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  304.415805][T16106] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5650: Corrupt filesystem
[  304.429037][T16116] sock: sock_set_timeout: `syz.0.6180' (pid 16116) tries to set negative timeout
[  304.468201][T16106] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.6176: invalid indirect mapped block 3 (level 2)
[  304.548547][T16127] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  304.590697][T16106] EXT4-fs (loop3): 1 orphan inode deleted
[  304.621133][   T24] audit: type=1400 audit(70411368.659:999): avc:  denied  { map } for  pid=16135 comm="syz.2.6190" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  304.645364][T16106] EXT4-fs (loop3): 1 truncate cleaned up
[  304.650979][T16106] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,,errors=continue
[  304.662157][T16136] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  304.696637][T16127] exFAT-fs (loop6): hint_cluster is invalid (1)
[  304.717442][T16127] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000)
[  304.760989][T16143] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  304.772040][T16127] exFAT-fs (loop6): Filesystem has been set read-only
[  304.793618][   T24] audit: type=1400 audit(70411368.839:1000): avc:  denied  { mounton } for  pid=16102 comm="syz.3.6176" path="/732/file0/bus" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  304.819353][T16106] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off.
[  304.831494][T16127] exFAT-fs (loop6): error, failed to bmap (inode : ffff88812f9f5db0 iblock : 9, err : -5)
[  304.867944][T16127] attempt to access beyond end of device
[  304.867944][T16127] loop6: rw=2049, want=34359738496, limit=256
[  304.926817][ T7517] EXT4-fs error (device loop3): ext4_lookup:1830: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[  304.943940][   T24] audit: type=1400 audit(70411368.889:1001): avc:  denied  { read } for  pid=16141 comm="syz.2.6193" name=2E02 dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  305.007797][T16157] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,usrquota,noquota,delalloc,grpjquota=,nodioread_nolock,errors=remount-ro,
[  305.041152][ T7517] EXT4-fs error (device loop3): ext4_lookup:1830: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[  305.058191][T16168] kvm [16167]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010000 data 0x1234
[  305.082103][   T24] audit: type=1400 audit(70411368.889:1002): avc:  denied  { rename } for  pid=16141 comm="syz.2.6193" name=2E02 dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  305.110798][T16157] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #15: comm syz.2.6199: lblock 0 mapped to illegal pblock 0 (length 1)
[  305.176719][T16157] EXT4-fs (loop2): Remounting filesystem read-only
[  305.222648][T16177] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #15: block 3: comm syz.2.6199: lblock 3 mapped to illegal pblock 3 (length 2)
[  305.329951][T16194] netlink: 'syz.0.6215': attribute type 1 has an invalid length.
[  305.413913][    T7] tipc: Disabling bearer <udp:syz0>
[  305.426821][    T7] tipc: Disabling bearer <udp:syz2>
[  305.462120][    T7] tipc: Left network mode
[  305.573871][T16204] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.598502][T16204] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.618287][T16204] device bridge_slave_0 entered promiscuous mode
[  305.634934][T16218] sch_fq: defrate 0 ignored.
[  305.641906][T16204] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.662256][T16204] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.692438][T16204] device bridge_slave_1 entered promiscuous mode
[  305.830888][T16204] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.837982][T16204] bridge0: port 2(bridge_slave_1) entered forwarding state
[  305.845248][T16204] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.852243][T16204] bridge0: port 1(bridge_slave_0) entered forwarding state
[  305.923192][    T7] device bridge_slave_1 left promiscuous mode
[  305.938023][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.960820][    T7] device bridge_slave_0 left promiscuous mode
[  305.979984][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.003269][    T7] device veth1_macvtap left promiscuous mode
[  306.023188][    T7] device veth0_vlan left promiscuous mode
[  306.172555][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  306.191519][  T393] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.215013][  T393] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.280726][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  306.313418][  T393] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.320535][  T393] bridge0: port 1(bridge_slave_0) entered forwarding state
[  306.395343][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  306.437603][  T393] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.444665][  T393] bridge0: port 2(bridge_slave_1) entered forwarding state
[  306.508469][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  306.553573][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  306.597619][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  306.640547][T16234] F2FS-fs (loop2): invalid crc value
[  306.668474][T16204] device veth0_vlan entered promiscuous mode
[  306.684116][T16234] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  306.735660][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  306.750443][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  306.786708][T16204] device veth1_macvtap entered promiscuous mode
[  306.796446][T16234] F2FS-fs (loop2): Start checkpoint disabled!
[  306.818478][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  306.827697][T16234] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  306.840248][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  306.876704][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  306.900849][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  306.918176][    T7] attempt to access beyond end of device
[  306.918176][    T7] loop2: rw=2049, want=40976, limit=40427
[  306.953597][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  306.995737][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  307.033567][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  307.065495][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  307.097432][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  307.156421][T16259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6242'.
[  307.196046][T16263] kvm [16262]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010005 data 0x4
[  307.255805][T16272] netlink: 'syz.6.6256': attribute type 12 has an invalid length.
[  307.290224][T16272] netlink: 'syz.6.6256': attribute type 29 has an invalid length.
[  307.315653][T16272] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6256'.
[  307.340760][T16272] netlink: 'syz.6.6256': attribute type 1 has an invalid length.
[  307.357320][T16272] netlink: 'syz.6.6256': attribute type 2 has an invalid length.
[  307.598004][T16295] EXT4-fs (loop6): Ignoring removed oldalloc option
[  307.614681][T16293] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,
[  307.669641][T16295] EXT4-fs (loop6): mounted filesystem without journal. Opts: oldalloc,grpquota,noinit_itable,,errors=continue
[  307.700583][T16293] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27
[  307.721401][T16306] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6259'.
[  307.737188][T16293] EXT4-fs (loop2): Remounting filesystem read-only
[  307.758328][T16306] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6259'.
[  307.768664][T16293] EXT4-fs error (device loop2): ext4_dirty_inode:6191: inode #15: comm syz.2.6255: mark_inode_dirty error
[  307.821513][T16293] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27
[  307.871451][T16293] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #15: comm syz.2.6255: mark_inode_dirty error
[  307.929071][T16293] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27
[  307.976094][T16293] EXT4-fs error (device loop2): ext4_truncate:4403: inode #15: comm syz.2.6255: mark_inode_dirty error
[  308.001373][T16324] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  308.052518][T16324] EXT4-fs (loop7): 1 truncate cleaned up
[  308.061648][    T7] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  308.086914][T16324] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[  308.119491][    T7] Quota error (device loop2): write_blk: dquota write failed
[  308.154715][T16324] EXT4-fs warning (device loop7): __ext4fs_dirhash:270: inode #2: comm syz.7.6266: Siphash requires key
[  308.166061][    T7] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries
[  308.200380][    T7] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  308.211110][T16324] EXT4-fs warning (device loop7): __ext4fs_dirhash:270: inode #2: comm syz.7.6266: Siphash requires key
[  308.250509][    T7] Quota error (device loop2): write_blk: dquota write failed
[  308.261218][T16324] EXT4-fs warning (device loop7): __ext4fs_dirhash:270: inode #2: comm syz.7.6266: Siphash requires key
[  308.286274][    T7] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list
[  308.307604][T16324] EXT4-fs warning (device loop7): __ext4fs_dirhash:270: inode #2: comm syz.7.6266: Siphash requires key
[  308.327430][    T7] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  308.353190][T16324] EXT4-fs warning (device loop7): __ext4fs_dirhash:270: inode #2: comm syz.7.6266: Siphash requires key
[  308.373141][    T7] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  308.395302][T16324] EXT4-fs warning (device loop7): __ext4fs_dirhash:270: inode #2: comm syz.7.6266: Siphash requires key
[  308.431129][T16324] EXT4-fs warning (device loop7): __ext4fs_dirhash:270: inode #2: comm syz.7.6266: Siphash requires key
[  308.489052][T16324] EXT4-fs warning (device loop7): __ext4fs_dirhash:270: inode #2: comm syz.7.6266: Siphash requires key
[  308.610506][T16346] MTRR 1 not used
[  308.743227][ T3712] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  308.958439][T15030] blk_update_request: I/O error, dev loop6, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  308.971096][T14356] blk_update_request: I/O error, dev loop6, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  308.986464][T14024] blk_update_request: I/O error, dev loop6, sector 7944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  309.031046][T14356] blk_update_request: I/O error, dev loop6, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  309.042669][T14024] blk_update_request: I/O error, dev loop6, sector 7944 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  309.063193][T15030] blk_update_request: I/O error, dev loop6, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  309.093205][T14356] Buffer I/O error on dev loop6p2, logical block 1008, async page read
[  309.102596][T14024] Buffer I/O error on dev loop6p4, logical block 992, async page read
[  309.110971][T15030] Buffer I/O error on dev loop6p1, logical block 752, async page read
[  309.133293][ T3712] usb 7-1: config 0 interface 0 has no altsetting 0
[  309.158149][ T3712] usb 7-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[  309.180369][ T3712] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.200365][ T3712] usb 7-1: config 0 descriptor??
[  309.318270][T16415] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  309.340220][T16415] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.6308: corrupted xattr block 33
[  309.361984][T16412] EXT4-fs (loop9): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  309.378980][T16415] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[  309.392628][T16412] EXT4-fs (loop9): mounted filesystem with ordered data mode. Opts: ,errors=continue
[  309.402791][T16415] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.6308: corrupted xattr block 33
[  309.423271][T16422] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.6308: corrupted xattr block 33
[  309.440329][T16415] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[  309.451218][T16422] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[  309.513179][   T15] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  309.573481][T16424] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64)
[  309.587747][T16424] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  309.596690][T16424] F2FS-fs (loop9): invalid crc value
[  309.602969][T16424] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  309.623773][T16424] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  309.637686][T16431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6312'.
[  309.653231][T16424] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  309.674387][ T3712] logitech-hidpp-device 0003:046D:C262.002C: hidraw0: USB HID v0.00 Device [HID 046d:c262] on usb-dummy_hcd.6-1/input0
[  309.701904][T16426] attempt to access beyond end of device
[  309.701904][T16426] loop9: rw=2049, want=45104, limit=40427
[  309.880967][  T305] usb 7-1: USB disconnect, device number 14
[  309.887113][   T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  309.917891][   T15] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  309.927677][   T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.939193][   T15] usb 1-1: config 0 descriptor??
[  310.348105][T16486] F2FS-fs (loop7): Invalid segment/section count (458783, 24 x 150994945)
[  310.367552][T16486] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  310.376356][T16486] F2FS-fs (loop7): invalid crc value
[  310.382834][T16486] F2FS-fs (loop7): Found nat_bits in checkpoint
[  310.421892][T16486] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  310.429535][   T15] keytouch 0003:0926:3333.002D: fixing up Keytouch IEC report descriptor
[  310.454513][T16486] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  310.463066][   T15] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.002D/input/input71
[  310.565007][   T15] keytouch 0003:0926:3333.002D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  310.677041][T16479] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix.
[  310.686767][T16479] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix.
[  310.848809][  T400] usb 1-1: USB disconnect, device number 11
[  310.937122][T16522] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.963935][T16522] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.988138][T16522] device bridge_slave_0 entered promiscuous mode
[  310.998847][T16521] F2FS-fs (loop6): Unrecognized mount option "inlinekpoint=enable" or missing value
[  311.022183][T16522] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.037989][T16522] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.054047][T16522] device bridge_slave_1 entered promiscuous mode
[  311.086405][    T9] device bridge_slave_1 left promiscuous mode
[  311.098036][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.121731][    T9] device bridge_slave_0 left promiscuous mode
[  311.140936][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.168087][    T9] device veth1_macvtap left promiscuous mode
[  311.180678][    T9] device veth0_vlan left promiscuous mode
[  311.224969][T16532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6350'.
[  311.351013][T16522] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.358107][T16522] bridge0: port 2(bridge_slave_1) entered forwarding state
[  311.365375][T16522] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.372372][T16522] bridge0: port 1(bridge_slave_0) entered forwarding state
[  311.452419][T16537] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  311.586269][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  311.614279][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.653252][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.759383][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  311.797038][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  311.835000][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.842048][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  311.910358][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  311.949457][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.956524][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.025384][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  312.077695][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  312.112540][T16522] device veth0_vlan entered promiscuous mode
[  312.134094][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  312.155386][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  312.195922][T16522] device veth1_macvtap entered promiscuous mode
[  312.219862][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  312.251105][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  312.280977][T16555] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,
[  312.302329][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  312.326926][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  312.353400][T16555] EXT4-fs error (device loop6): ext4_add_entry:2442: inode #12: comm syz.6.6359: Directory hole found for htree leaf block 0
[  312.372545][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  312.411084][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  312.426155][T16555] EXT4-fs (loop6): Remounting filesystem read-only
[  312.456358][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  312.507424][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  312.537129][T16565] EXT4-fs (loop2): Test dummy encryption mode enabled
[  312.568600][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  312.583201][T16565] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  312.634516][T16570] tipc: Started in network mode
[  312.643851][T16565] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  312.663343][T16570] tipc: Own node identity ac14140f, cluster identity 4711
[  312.682867][T16565] System zones: 0-5
[  312.693588][T16570] tipc: New replicast peer: 255.255.255.255
[  312.699603][T16570] tipc: Enabled bearer <udp:syz2>, priority 10
[  312.713820][T16565] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x00000000000001ff,
[  312.771592][T16560] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  312.810051][T16560] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  312.865255][T16560] F2FS-fs (loop7): invalid crc value
[  312.911419][T16560] F2FS-fs (loop7): Found nat_bits in checkpoint
[  312.993664][T16594] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  313.017538][T16560] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  313.043436][T16560] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  313.075895][T16574] F2FS-fs (loop6): Invalid SB checksum offset: 0
[  313.103933][T16574] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  313.123179][   T24] audit: type=1400 audit(70411377.159:1003): avc:  denied  { link } for  pid=16559 comm="syz.7.6372" name="file1" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  313.184171][T16574] F2FS-fs (loop6): invalid crc value
[  313.231562][T16574] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  313.313584][T16574] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  313.336390][T16574] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  313.350024][T16619] xt_hashlimit: size too large, truncated to 1048576
[  313.401170][   T24] audit: type=1400 audit(70411377.439:1004): avc:  denied  { accept } for  pid=16621 comm="syz.0.6383" path="socket:[222323]" dev="sockfs" ino=222323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  313.661995][    T5] wacom 0003:056A:003F.002E: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0
[  313.724431][T16642] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  313.813197][    T5] tipc: 32-bit node address hash set to f1414ac
[  313.879667][T16661] EXT4-fs (loop4): Ignoring removed nobh option
[  313.914274][T16661] EXT4-fs error (device loop4): ext4_iget_extra_inode:4692: inode #15: comm syz.4.6400: corrupted in-inode xattr
[  313.962865][T16667] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  313.984144][T16661] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.6400: couldn't read orphan inode 15 (err -117)
[  313.999464][T16674] FAT-fs (loop6): Directory bread(block 64) failed
[  314.021101][T16674] FAT-fs (loop6): Directory bread(block 65) failed
[  314.038144][T16661] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,nombcache,quota,noload,nodioread_nolock,noblock_validity,noinit_itable,grpquota,max_dir_size_kb=0x0000000000000009,nobh,,errors=continue
[  314.070592][T16674] FAT-fs (loop6): Directory bread(block 66) failed
[  314.083335][T16674] FAT-fs (loop6): Directory bread(block 67) failed
[  314.093735][    T5] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  314.115856][T16674] FAT-fs (loop6): Directory bread(block 68) failed
[  314.135774][T16674] FAT-fs (loop6): Directory bread(block 69) failed
[  314.152882][T16661] EXT4-fs (loop4): shut down requested (2)
[  314.162823][T16674] FAT-fs (loop6): Directory bread(block 70) failed
[  314.189227][T16674] FAT-fs (loop6): Directory bread(block 71) failed
[  314.211428][T16674] FAT-fs (loop6): Directory bread(block 72) failed
[  314.242465][T16674] FAT-fs (loop6): Directory bread(block 73) failed
[  314.353176][    T5] usb 1-1: Using ep0 maxpacket: 8
[  314.410506][T16685] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[  314.473182][    T5] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  314.494982][    T5] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  314.513159][    T5] usb 1-1: config 1 has no interface number 0
[  314.528626][    T5] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  314.603821][T16696] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  314.703298][    T5] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  314.731197][T16708] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.6415: inode has both inline data and extents flags
[  314.753314][    T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.778488][    T5] usb 1-1: Product: syz
[  314.782880][T16708] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.6415: couldn't read orphan inode 15 (err -117)
[  314.803173][    T5] usb 1-1: Manufacturer: syz
[  314.814466][    T5] usb 1-1: SerialNumber: syz
[  314.829388][T16708] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue
[  314.912880][T16703] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  314.948313][T16703] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  314.984109][T16703] F2FS-fs (loop6): invalid crc value
[  315.006250][T16703] F2FS-fs (loop6): Found nat_bits in checkpoint
[  315.069808][T16703] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  315.087185][T16703] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  315.148108][T16722] F2FS-fs (loop7): fault_injection options not supported
[  315.189046][T16722] F2FS-fs (loop7): fault_type options not supported
[  315.196604][    T9] tipc: Disabling bearer <udp:syz2>
[  315.222164][    T9] tipc: Left network mode
[  315.227249][T16722] F2FS-fs (loop7): invalid crc value
[  315.246012][T16722] F2FS-fs (loop7): Found nat_bits in checkpoint
[  315.314904][T16722] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  315.383648][T12925] attempt to access beyond end of device
[  315.383648][T12925] loop7: rw=2049, want=45104, limit=40427
[  315.399344][T15395] attempt to access beyond end of device
[  315.399344][T15395] loop6: rw=2049, want=40968, limit=40427
[  315.525005][   T15] usb 1-1: USB disconnect, device number 12
[  315.531176][    T9] device bridge_slave_1 left promiscuous mode
[  315.557127][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.594866][    T9] device bridge_slave_0 left promiscuous mode
[  315.624345][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.655707][    T9] device veth1_macvtap left promiscuous mode
[  315.661715][    T9] device veth0_vlan left promiscuous mode
[  315.701127][T16740] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[  316.024131][   T24] audit: type=1400 audit(70411380.069:1005): avc:  denied  { getopt } for  pid=16761 comm="syz.7.6436" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  316.215015][T16776] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  316.245579][T16768] SELinux: failed to load policy
[  316.282976][   T24] audit: type=1400 audit(70411380.319:1006): avc:  denied  { rename } for  pid=16775 comm="syz.7.6442" name="file1" dev="loop7" ino=1049264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  316.491735][T16804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6454'.
[  316.689726][T16823] program syz.4.6461 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  316.716872][T16817] SELinux: failed to load policy
[  316.843963][T16833] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.6465: bg 0: block 5: invalid block bitmap
[  316.861653][T16833] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5650: Corrupt filesystem
[  316.878293][T16837] EXT4-fs (loop7): Test dummy encryption mode enabled
[  316.901884][T16833] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.6465: invalid indirect mapped block 3 (level 2)
[  316.928540][T16837] EXT4-fs (loop7): Test dummy encryption mode enabled
[  316.935584][T16837] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  316.963603][T16833] EXT4-fs (loop4): 1 orphan inode deleted
[  316.976465][T16833] EXT4-fs (loop4): 1 truncate cleaned up
[  316.988986][T16837] EXT4-fs (loop7): 1 truncate cleaned up
[  317.004095][T16833] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,,errors=continue
[  317.026657][T16837] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,nojournal_checksum,journal_ioprio=0x0000000000000002,debug_want_extra_isize=0x0000000000000080,i_version,jqfmt=vfsv1,test_dummy_encryption,nodioread_nolock,,errors=continue
[  317.078354][T16850] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue
[  317.105990][T16856] netlink: 'syz.6.6473': attribute type 1 has an invalid length.
[  317.116546][T16856] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6473'.
[  317.148991][T16837] EXT4-fs error (device loop7): __ext4_expand_extra_isize:5991: inode #15: comm syz.7.6466: bad extra_isize 62 (inode size 256)
[  317.166865][T16858] program syz.4.6474 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  317.218991][T16837] EXT4-fs error (device loop7): __ext4_expand_extra_isize:5991: inode #15: comm syz.7.6466: bad extra_isize 62 (inode size 256)
[  317.499590][T16885] SELinux: failed to load policy
[  317.516233][   T24] audit: type=1400 audit(70411381.559:1007): avc:  denied  { remount } for  pid=16886 comm="syz.0.6485" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  317.596194][   T24] audit: type=1400 audit(70411381.589:1008): avc:  denied  { bind } for  pid=16881 comm="syz.6.6484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  317.658788][   T24] audit: type=1400 audit(70411381.599:1009): avc:  denied  { read } for  pid=16889 comm="syz.0.6487" path="socket:[223310]" dev="sockfs" ino=223310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  317.869930][T16912] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  317.993130][   T15] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  318.248230][T16916] F2FS-fs (loop6): Invalid segment/section count (458783, 24 x 150994945)
[  318.285975][T16916] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  318.307909][T16923] SELinux: failed to load policy
[  318.314795][T16916] F2FS-fs (loop6): invalid crc value
[  318.336895][T16916] F2FS-fs (loop6): Found nat_bits in checkpoint
[  318.363191][   T15] usb 1-1: config 0 interface 0 has no altsetting 0
[  318.380626][   T15] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00
[  318.413371][T16916] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  318.423698][   T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.441843][T16916] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  318.459933][   T15] usb 1-1: config 0 descriptor??
[  318.564658][T16934] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6502'.
[  318.632756][T16914] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix.
[  318.661762][T16914] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix.
[  318.743952][T16941] FAT-fs (loop4): Directory bread(block 64) failed
[  318.768058][T16941] FAT-fs (loop4): Directory bread(block 65) failed
[  318.811551][T16941] FAT-fs (loop4): Directory bread(block 66) failed
[  318.832550][T16941] FAT-fs (loop4): Directory bread(block 67) failed
[  318.869583][T16941] FAT-fs (loop4): Directory bread(block 68) failed
[  318.893389][T16941] FAT-fs (loop4): Directory bread(block 69) failed
[  318.920194][T16941] FAT-fs (loop4): Directory bread(block 70) failed
[  318.947162][T16941] FAT-fs (loop4): Directory bread(block 71) failed
[  318.954125][   T15] hid (null): unknown global tag 0xfd
[  318.960577][   T15] hid (null): bogus close delimiter
[  318.986179][T16941] FAT-fs (loop4): Directory bread(block 72) failed
[  318.992713][T16941] FAT-fs (loop4): Directory bread(block 73) failed
[  319.020083][   T15] waltop 0003:172F:0034.002F: unexpected long global item
[  319.050071][   T15] waltop: probe of 0003:172F:0034.002F failed with error -22
[  319.100838][T16941] attempt to access beyond end of device
[  319.100838][T16941] loop4: rw=0, want=1196, limit=256
[  319.136119][T16949] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  319.159172][   T15] usb 1-1: USB disconnect, device number 13
[  319.182830][T16949] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  319.216464][T16949] F2FS-fs (loop2): invalid crc value
[  319.247148][T16949] F2FS-fs (loop2): Found nat_bits in checkpoint
[  319.304709][T16965] rtc_cmos 00:00: in use; can't configure
[  319.333428][T16949] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  319.356235][T16949] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  319.407540][T16970] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[  319.813997][T16995] EXT4-fs (loop6): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000006,user_xattr,,errors=continue
[  320.033791][T17013] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.6522: bg 0: block 345: padding at end of block bitmap is not set
[  320.054144][T17011] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,noquota,data_err=ignore,jqfmt=vfsv1,noquota,nojournal_checksum,errors=continue,barrier,usrjquota=,bsddf,abort,,errors=continue
[  320.107188][T17013] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 117
[  320.144362][T17019] xt_hashlimit: size too large, truncated to 1048576
[  320.181234][T17013] EXT4-fs (loop6): This should not happen!! Data will be lost
[  320.181234][T17013] 
[  320.214614][T16955] F2FS-fs (loop7): invalid crc value
[  320.233781][    T7] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28
[  320.266929][T16955] F2FS-fs (loop7): Found nat_bits in checkpoint
[  320.282952][    T7] EXT4-fs (loop6): This should not happen!! Data will be lost
[  320.282952][    T7] 
[  320.333290][    T7] EXT4-fs (loop6): Total free blocks count 0
[  320.356562][T16955] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  320.368550][    T7] EXT4-fs (loop6): Free/Dirty block details
[  320.394701][    T7] EXT4-fs (loop6): free_blocks=0
[  320.419532][    T7] EXT4-fs (loop6): dirty_blocks=1648
[  320.428742][   T24] audit: type=1400 audit(70411384.479:1010): avc:  denied  { rename } for  pid=16954 comm="syz.7.6511" name="file1" dev="loop7" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  320.475370][    T7] EXT4-fs (loop6): Block reservation details
[  320.510593][    T7] EXT4-fs (loop6): i_reserved_data_blocks=103
[  320.910417][T17045] netlink: 'syz.7.6538': attribute type 1 has an invalid length.
[  320.954167][T17045] netlink: 'syz.7.6538': attribute type 1 has an invalid length.
[  321.134388][T17062] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[  321.178268][T17068] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.6557: bg 0: block 5: invalid block bitmap
[  321.265547][T17068] EXT4-fs error (device loop6) in ext4_mb_clear_bb:5650: Corrupt filesystem
[  321.285747][T12925] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path /330/file1/lost+found: directory fails checksum at offset 1024
[  321.316942][T17068] EXT4-fs error (device loop6): ext4_free_branches:1026: inode #11: comm syz.6.6557: invalid indirect mapped block 3 (level 2)
[  321.355802][T12925] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path /330/file1/lost+found: directory fails checksum at offset 8192
[  321.398940][T17068] EXT4-fs (loop6): 1 orphan inode deleted
[  321.424964][T17068] EXT4-fs (loop6): 1 truncate cleaned up
[  321.431415][   T24] audit: type=1400 audit(70411385.469:1011): avc:  denied  { accept } for  pid=17081 comm="syz.2.6564" path="socket:[223858]" dev="sockfs" ino=223858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  321.461352][T12925] EXT4-fs error (device loop7): ext4_empty_dir:3104: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  321.475345][T17084] xt_hashlimit: size too large, truncated to 1048576
[  321.486983][T17068] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodiscard,,errors=continue
[  321.527480][T12925] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path /330/file1/lost+found: directory fails checksum at offset 1024
[  321.572377][T17090] binder: 17089:17090 ioctl 40046205 0 returned -22
[  321.625734][T12925] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path /330/file1/lost+found: directory fails checksum at offset 8192
[  321.678311][T12925] EXT4-fs error (device loop7): ext4_empty_dir:3104: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  321.734655][T12925] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path /330/file1/lost+found: directory fails checksum at offset 1024
[  321.798310][T12925] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path /330/file1/lost+found: directory fails checksum at offset 8192
[  321.839530][    T5] kernel write not supported for file /input/event2 (pid: 5 comm: kworker/0:0)
[  321.868962][T12925] EXT4-fs error (device loop7): ext4_empty_dir:3104: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  321.919016][T17124] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  321.930384][T12925] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path /330/file1/lost+found: directory fails checksum at offset 1024
[  321.957408][T17124] EXT4-fs (loop2): resizing filesystem from 512 to 0 blocks
[  321.973747][T17124] EXT4-fs warning (device loop2): ext4_resize_fs:1982: can't shrink FS - resize aborted
[  322.015616][   T24] audit: type=1400 audit(70411386.059:1012): avc:  denied  { mounton } for  pid=17137 comm="syz.4.6589" path="/61/file0" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  322.039903][T17138] incfs: Can't find or create .index dir in ./file0
[  322.070176][T17138] incfs: mount failed -22
[  322.096705][T17140] input: syz0 as /devices/virtual/input/input76
[  322.116493][   T24] audit: type=1400 audit(70411386.149:1013): avc:  denied  { unmount } for  pid=16522 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  322.140825][    T7] tipc: Disabling bearer <udp:syz2>
[  322.160870][    T7] tipc: Left network mode
[  322.187637][T17142] EXT4-fs (loop4): Ignoring removed orlov option
[  322.216684][T17142] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled
[  322.252753][T17142] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,init_itable=0x0000000000000080,debug_want_extra_isize=0x0000000000000004,dioread_lock,lazytime,barrier,noload,orlov,grpjquota=wÅü5ÔTÕÔ)­`)Y�Fæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8/,,errors=continue
[  322.370955][T17149] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.406656][T17149] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.453754][T17149] device bridge_slave_0 entered promiscuous mode
[  322.478008][T17149] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.501196][T17149] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.523717][T17149] device bridge_slave_1 entered promiscuous mode
[  322.628415][    T7] device bridge_slave_1 left promiscuous mode
[  322.643505][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.666020][    T7] device bridge_slave_0 left promiscuous mode
[  322.686509][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.710047][    T7] device veth1_macvtap left promiscuous mode
[  322.743363][    T7] device veth0_vlan left promiscuous mode
[  322.802208][T17166] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,,errors=continue
[  322.951501][T17149] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.958624][T17149] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.965888][T17149] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.972883][T17149] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.063510][T17147] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945)
[  323.095658][T17147] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  323.123117][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  323.141816][T17147] F2FS-fs (loop2): invalid crc value
[  323.149354][    T5] logitech-hidpp-device 0005:046D:B012.0030: Device not connected
[  323.180131][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.197746][T17147] F2FS-fs (loop2): Found nat_bits in checkpoint
[  323.212411][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.262387][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  323.312462][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  323.325212][T17147] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  323.353448][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.360508][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.368083][T17147] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  323.411706][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  323.449820][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  323.482767][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.489845][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.554465][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  323.589208][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  323.613376][    T5] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  323.632412][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  323.663513][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  323.705123][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  323.738119][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  323.777018][T17149] device veth0_vlan entered promiscuous mode
[  323.799207][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  323.826646][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  323.861230][T17149] device veth1_macvtap entered promiscuous mode
[  323.881638][T17196] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  323.903684][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  323.922203][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  323.942944][T17196] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.6611: invalid indirect mapped block 9 (level 0)
[  323.961035][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  323.983475][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  323.993264][    T5] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.004484][T17196] EXT4-fs (loop2): 1 truncate cleaned up
[  324.010102][T17196] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue
[  324.039817][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  324.047551][    T5] usb 1-1: config 0 interface 0 has no altsetting 0
[  324.073199][    T5] usb 1-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.00
[  324.107138][T17196] EXT4-fs warning (device loop2): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed
[  324.120273][    T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.145762][    T5] usb 1-1: config 0 descriptor??
[  324.164560][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  324.194083][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  324.223454][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  324.241842][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  324.273208][T17189] F2FS-fs (loop6): invalid crc value
[  324.316709][T17189] F2FS-fs (loop6): Found nat_bits in checkpoint
[  324.383965][T17210] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  324.409910][T17189] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  324.644306][    T5] input: HID 046d:c101 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C101.0031/input/input77
[  324.705308][    T5] logitech 0003:046D:C101.0031: input,hidraw0: USB HID v36.2c Joystick [HID 046d:c101] on usb-dummy_hcd.0-1/input0
[  324.814605][T17238] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  324.855086][  T305] usb 1-1: USB disconnect, device number 14
[  324.863660][T17243] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6628'.
[  324.893441][T17238] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  324.923964][T17238] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  325.154142][T17265] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  325.232024][T17265] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842c018, mo2=0003]
[  325.260739][T17265] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000001,nodelalloc,acl,debug,delalloc,nogrpid,noblock_validity,dioread_nolock,,errors=continue
[  325.370814][   T24] audit: type=1400 audit(70411389.409:1014): avc:  denied  { setopt } for  pid=17281 comm="syz.8.6643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  325.573987][T17296] device-mapper: ioctl: Target type does not support messages
[  325.658442][T17220] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0)
[  325.725846][T17220] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  325.777636][T17220] F2FS-fs (loop4): invalid crc value
[  325.798357][T17299] EXT4-fs (loop8): mounted filesystem with ordered data mode. Opts: usrquota,grpquota,prjquota,,errors=continue
[  325.838366][T17220] F2FS-fs (loop4): Found nat_bits in checkpoint
[  325.935620][T17220] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  325.953181][  T400] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  325.971340][T17220] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  326.019693][T17314] ip_tables: iptables: counters copy to user failed while replacing table
[  326.080529][T17220] F2FS-fs (loop4): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix.
[  326.114135][T17220] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, min: 6, max: 903
[  326.171781][T17286] syz.0.6645 (17286): drop_caches: 3
[  326.213174][  T400] usb 7-1: Using ep0 maxpacket: 16
[  326.343242][  T400] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  326.374858][  T400] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  326.403333][  T400] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  326.430604][  T400] usb 7-1: config 0 interface 0 has no altsetting 0
[  326.443416][  T400] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  326.462035][  T400] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.482885][  T400] usb 7-1: config 0 descriptor??
[  326.588855][T17358] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  326.681894][    T5] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[  326.712463][    T5] hid-generic 0000:0000:0000.0032: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  326.802205][   T24] audit: type=1400 audit(70411390.839:1015): avc:  denied  { write } for  pid=17370 comm="syz.8.6681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  326.830881][T14356] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  326.889452][T14356] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1135: comm udevd: checksumming directory block 0
[  326.961399][T14356] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  326.981751][  T400] hid (null): global environment stack underflow
[  327.019013][  T400] hid (null): unknown global tag 0x66
[  327.035658][  T400] hid (null): unknown global tag 0xc
[  327.045716][T14356] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1135: comm udevd: checksumming directory block 0
[  327.065725][  T400] hid (null): invalid report_size 47208
[  327.076175][   T24] audit: type=1400 audit(70411391.119:1016): avc:  denied  { ioctl } for  pid=17387 comm="syz.0.6690" path="socket:[225085]" dev="sockfs" ino=225085 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  327.109224][  T400] hid (null): unknown global tag 0xe
[  327.122020][T14356] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  327.143185][  T400] hid (null): report_id 0 is invalid
[  327.149395][    T7] EXT4-fs error (device sda1): ext4_find_extent:928: inode #2022: comm kworker/u4:0: pblk 34879 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  327.176385][  T400] hid (null): unknown global tag 0x84
[  327.191724][  T400] usb 7-1: USB disconnect, device number 15
[  327.200211][T14356] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1135: comm udevd: checksumming directory block 0
[  327.212171][   T24] audit: type=1400 audit(70411391.219:1017): avc:  denied  { ioctl } for  pid=17391 comm="syz.0.6692" path="socket:[225103]" dev="sockfs" ino=225103 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  327.240432][    T7] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 114 with max blocks 1 with error 117
[  327.307711][T15030] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  327.336448][    T7] EXT4-fs (sda1): This should not happen!! Data will be lost
[  327.336448][    T7] 
[  327.367044][T14356] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1222: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  327.433429][T15030] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1135: comm udevd: checksumming directory block 0
[  327.455502][T14356] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1222: comm udevd: checksumming directory block 0
[  327.478982][T15030] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  327.553173][T15030] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1135: comm udevd: checksumming directory block 0
[  327.593426][T14356] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  327.614701][T15030] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  327.660122][T14356] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1642: comm udevd: checksumming directory block 0
[  327.688110][   T24] audit: type=1400 audit(70411391.729:1018): avc:  denied  { read write } for  pid=17406 comm="syz.8.6707" name="cpu_dma_latency" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[  327.719695][T15030] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1135: comm udevd: checksumming directory block 0
[  327.769340][T17404] F2FS-fs (loop2): invalid crc value
[  327.789160][T17417] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1222: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  327.816218][T15030] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  327.848626][T17404] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  327.912202][T17425] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  327.921506][   T24] audit: type=1400 audit(70411391.759:1019): avc:  denied  { open } for  pid=17406 comm="syz.8.6707" path="/28/dev/cpu_dma_latency" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1
[  327.955756][T17417] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1222: comm udevd: checksumming directory block 0
[  328.013520][T17404] F2FS-fs (loop2): Start checkpoint disabled!
[  328.043969][T17412] EXT4-fs (loop4): mounted filesystem with ordered data mode. Opts: usrquota,grpquota,prjquota,,errors=continue
[  328.067093][T17417] udevd[17417]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message
[  328.079400][T17404] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  328.089680][    T9] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  328.251221][T17433] EXT4-fs (loop6): mounted filesystem with ordered data mode. Opts: ,errors=continue
[  328.264768][T17454] device veth0 entered promiscuous mode
[  328.293944][T17454] device veth0 left promiscuous mode
[  328.394049][   T24] audit: type=1400 audit(70411392.439:1020): avc:  denied  { bind } for  pid=17465 comm="syz.8.6722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  328.435116][T17472] binder: 17471:17472 ioctl c018620c 200000000040 returned -22
[  328.463597][T17472] binder: 17471:17472 ioctl c0306201 200000000300 returned -22
[  328.540172][T17478] device-mapper: ioctl: Invalid target message parameters.
[  328.554534][   T24] audit: type=1326 audit(70411392.599:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.8.6725" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d32d24d9 code=0x7ffc0000
[  328.593239][ T3712] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  328.647756][   T24] audit: type=1326 audit(70411392.629:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.8.6725" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d32d24d9 code=0x7ffc0000
[  328.708825][   T24] audit: type=1326 audit(70411392.629:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.8.6725" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d32d24d9 code=0x7ffc0000
[  328.764478][   T24] audit: type=1326 audit(70411392.629:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.8.6725" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd2d32d24d9 code=0x7ffc0000
[  328.883142][    T5] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  328.899071][T17521] udevd[17521]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Bad message
[  328.993470][ T3712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  329.004554][ T3712] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  329.018887][ T3712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.038675][T17534] MTRR 1 not used
[  329.046500][ T3712] usb 5-1: config 0 descriptor??
[  329.058785][T17535] udevd[17535]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Bad message
[  329.133273][    T5] usb 3-1: Using ep0 maxpacket: 8
[  329.253367][    T5] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  329.275521][    T5] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  329.331633][T17547] FAT-fs (loop6): Directory bread(block 64) failed
[  329.345842][T17547] FAT-fs (loop6): Directory bread(block 65) failed
[  329.358865][T17547] FAT-fs (loop6): Directory bread(block 66) failed
[  329.372952][T17547] FAT-fs (loop6): Directory bread(block 67) failed
[  329.386228][T17547] FAT-fs (loop6): Directory bread(block 68) failed
[  329.400331][T17547] FAT-fs (loop6): Directory bread(block 69) failed
[  329.413261][T17547] FAT-fs (loop6): Directory bread(block 70) failed
[  329.427348][T17547] FAT-fs (loop6): Directory bread(block 71) failed
[  329.440408][T17547] FAT-fs (loop6): Directory bread(block 72) failed
[  329.449646][T17547] FAT-fs (loop6): Directory bread(block 73) failed
[  329.463426][    T5] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  329.488299][    T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.513167][    T5] usb 3-1: Product: syz
[  329.527505][    T5] usb 3-1: Manufacturer: syz
[  329.534953][ T3712] keytouch 0003:0926:3333.0034: fixing up Keytouch IEC report descriptor
[  329.553142][    T5] usb 3-1: SerialNumber: syz
[  329.561013][ T3712] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0034/input/input78
[  329.655036][ T3712] keytouch 0003:0926:3333.0034: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  329.723586][T17555] udevd[17555]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message
[  329.913250][    T5] usb 3-1: unit 6 not found!
[  329.927447][    T5] usb 3-1: USB disconnect, device number 11
[  329.967538][  T400] usb 5-1: USB disconnect, device number 11
[  330.147049][T17571] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  330.183178][T17571] EXT4-fs (loop8): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  330.222954][T17571] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  330.254323][T17571] EXT4-fs (loop8): mounted filesystem with journalled data mode. Opts: dioread_nolock,stripe=0x0000000000000006,data=journal,nombcache,,errors=continue
[  330.415508][T17580] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  330.793129][  T400] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  330.923149][    T5] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  331.126375][T17637] page:ffffea0004600000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000
[  331.139220][T17626] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[  331.158920][T17626] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  331.169624][T17637] head:ffffea0004600000 order:3 compound_mapcount:0 compound_pincount:0
[  331.178252][  T400] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  331.189646][T17637] flags: 0x4000000000010200(slab|head)
[  331.195453][  T400] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.205725][T17637] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00
[  331.214642][T17637] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  331.223770][  T400] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  331.232986][T17637] page dumped because: unmovable page
[  331.238743][  T400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.247092][T17637] page_owner tracks the page as allocated
[  331.255992][T17637] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1342, ts 46016000187, free_ts 46006175568
[  331.277135][T17637]  prep_new_page+0x176/0x190
[  331.281911][T17637]  get_page_from_freelist+0x225f/0x23f0
[  331.287876][T17637]  __alloc_pages_nodemask+0x29a/0x640
[  331.294030][  T400] hub 5-1:4.0: USB hub found
[  331.299692][T17637]  new_slab+0x84/0x3f0
[  331.304162][T17637]  ___slab_alloc+0x2f8/0x4c0
[  331.308945][T17637]  __slab_alloc+0x63/0xa0
[  331.313533][    T5] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.324682][T17637]  __kmalloc_track_caller+0x1e4/0x310
[  331.330270][T17637]  __alloc_skb+0xdc/0x520
[  331.335058][    T5] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  331.344500][T17637]  alloc_uevent_skb+0x85/0x240
[  331.349503][T17637]  kobject_uevent_net_broadcast+0x1a6/0x5a0
[  331.355554][    T5] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.363831][T17637]  kobject_uevent_env+0x52b/0x700
[  331.371428][    T5] usb 9-1: config 0 descriptor??
[  331.376767][T17637]  kobject_uevent+0x1d/0x30
[  331.381512][T17637]  device_add+0x7d2/0xc00
[  331.386157][T17637]  netdev_register_kobject+0x18e/0x330
[  331.391954][T17637]  register_netdevice+0xdae/0x13a0
[  331.397411][T17637]  veth_newlink+0x696/0xb60
[  331.402171][T17637] page last free stack trace:
[  331.407169][T17637]  __free_pages_ok+0x80b/0x830
[  331.412125][T17637]  __free_pages+0xd8/0x390
[  331.416762][T17637]  __free_slab+0xcf/0x190
[  331.421237][T17637]  unfreeze_partials+0x150/0x180
Mar 25 22:43:16 [  331.427901][T17637]  put_cpu_partial+0xc1/0x180
syzkaller kern.a[  331.433609][T17637]  __slab_free+0x2c9/0x3a0
lert kernel: [  [  331.439464][T17637]  ___cache_free+0x10e/0x130
331.247092][T176[  331.446004][T17637]  qlink_free+0x50/0x90
37] page_owner t[  331.451005][T17637]  qlist_free_all+0x5f/0xb0
racks the page a[  331.457710][T17637]  kasan_quarantine_reduce+0x14a/0x160
s allocated
Mar[  331.463873][T17637]  __kasan_slab_alloc+0x2f/0xe0
 25 22:43:16 syz[  331.469909][T17637]  slab_post_alloc_hook+0x5d/0x2f0
kaller kern.aler[  331.476683][T17637]  __kmalloc_track_caller+0x176/0x310
t kernel: [  331[  331.483335][T17637]  kvasprintf+0xe3/0x1a0
.255992][T17637][  331.488908][T17637]  kvasprintf_const+0xf2/0x240
 page last alloc[  331.495753][T17637]  kobject_set_name_vargs+0x61/0x110
ated via order 3[  331.502051][T17626] F2FS-fs (loop2): invalid crc value
, migratetype Un[  331.508286][  T400] hub 5-1:4.0: 2 ports detected
movable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWA[  331.523376][  T400] usb 5-1: selecting invalid altsetting 1
LL), pid 1342, ts 46016000187, free_ts 4600617
Mar 25 22:43:16 syzkaller kern.alert kernel: [  331.402171][T17637] page last fr[  331.539992][T17626] F2FS-fs (loop2): Found nat_bits in checkpoint
ee stack trace:
[  331.550308][  T400] hub 5-1:4.0: Using single TT (err -22)
[  331.610782][T17626] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  331.630776][T17626] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  331.718625][T14888] F2FS-fs (loop2): inconsistent node block, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361]
[  331.863743][    T5] keytouch 0003:0926:3333.0035: fixing up Keytouch IEC report descriptor
[  331.872364][   T94] EXT4-fs warning: 34 callbacks suppressed
[  331.872373][   T94] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1222: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  331.923737][    T5] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0035/input/input79
[  331.965442][   T94] EXT4-fs error: 854 callbacks suppressed
[  331.965451][   T94] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1222: comm udevd: checksumming directory block 0
[  331.985186][  T400] usb 5-1: USB disconnect, device number 12
[  332.043606][   T94] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1222: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  332.060278][    T5] keytouch 0003:0926:3333.0035: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0
[  332.114515][T14356] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  332.142142][   T94] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1222: comm udevd: checksumming directory block 0
[  332.154391][   T79] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #2001: comm acpid: No space for directory leaf checksum. Please run e2fsck -D.
[  332.193249][T14356] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1135: comm udevd: checksumming directory block 0
[  332.225380][   T79] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #2001: comm acpid: checksumming directory block 0
[  332.237621][   T94] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1222: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  332.280519][    T5] usb 9-1: USB disconnect, device number 7
[  332.287538][T14356] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  332.303707][   T24] kauditd_printk_skb: 6 callbacks suppressed
[  332.303715][   T24] audit: type=1326 audit(70411397.356:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17651 comm="syz.2.6801" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eee5844d9 code=0x7ffc0000
[  332.352180][   T94] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1222: comm udevd: checksumming directory block 0
[  332.393302][T14356] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1135: comm udevd: checksumming directory block 0
[  332.416259][   T94] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  332.451445][T14356] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  332.470595][   T24] audit: type=1326 audit(70411397.396:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17651 comm="syz.2.6801" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eee5844d9 code=0x7ffc0000
[  332.509166][   T94] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1642: comm udevd: checksumming directory block 0
[  332.553534][T14356] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1135: comm udevd: checksumming directory block 0
[  332.574301][   T94] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  332.613258][   T24] audit: type=1326 audit(70411397.396:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17651 comm="syz.2.6801" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eee5844d9 code=0x7ffc0000
[  332.664221][   T94] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1480: comm udevd: checksumming directory block 0
[  332.676268][  T400] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  332.705442][T15030] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  332.721396][T17666] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  332.747481][   T24] audit: type=1326 audit(70411397.396:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17651 comm="syz.2.6801" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eee5844d9 code=0x7ffc0000
[  332.777956][T17648] F2FS-fs (loop6): Invalid log sectorsize (67108873)
[  332.805869][T17666] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  332.828827][T17648] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  332.837848][T15030] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1135: comm udevd: checksumming directory block 0
[  332.867681][T17648] F2FS-fs (loop6): invalid crc value
[  332.928958][   T24] audit: type=1326 audit(70411397.396:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17651 comm="syz.2.6801" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eee5844d9 code=0x7ffc0000
[  332.963639][T17673] udevd[17673]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message
[  332.973388][T17648] F2FS-fs (loop6): Found nat_bits in checkpoint
[  332.993529][T17676] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d)
[  333.056862][T17648] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  333.073230][  T400] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  333.086547][   T24] audit: type=1326 audit(70411397.396:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17651 comm="syz.2.6801" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f2eee5844d9 code=0x7ffc0000
[  333.118918][T17648] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  333.133759][T17682] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.6811: bg 0: block 5: invalid block bitmap
[  333.146116][  T400] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  333.173259][  T400] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  333.184543][T17682] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5650: Corrupt filesystem
[  333.213198][  T400] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[  333.223572][T17682] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.6811: invalid indirect mapped block 3 (level 2)
[  333.243020][   T24] audit: type=1326 audit(70411397.396:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17651 comm="syz.2.6801" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eee5844d9 code=0x7ffc0000
[  333.278142][  T400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.289991][T17682] EXT4-fs (loop4): 1 orphan inode deleted
[  333.302073][T15395] F2FS-fs (loop6): inconsistent node block, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361]
[  333.317087][T17682] EXT4-fs (loop4): 1 truncate cleaned up
[  333.322892][T17682] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  333.334060][  T400] uvcvideo: Found UVC 71.01 device <unnamed> (0000:0000)
[  333.341228][  T400] uvcvideo: No streaming interface found for terminal 2.
[  333.358190][   T24] audit: type=1326 audit(70411397.396:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17651 comm="syz.2.6801" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eee5844d9 code=0x7ffc0000
[  333.539105][  T400] usb 3-1: USB disconnect, device number 12
[  333.550841][   T24] audit: type=1326 audit(70411397.396:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17651 comm="syz.2.6801" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eee5844d9 code=0x7ffc0000
[  333.621485][T17709] exfat: Deprecated parameter 'namecase'
[  333.647486][T17709] exfat: Deprecated parameter 'namecase'
[  333.669322][T17709] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  333.693284][   T24] audit: type=1326 audit(70411397.396:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17651 comm="syz.2.6801" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2eee5844d9 code=0x7ffc0000
[  333.931486][T17735] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[  334.017554][T17750] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.024626][T17750] bridge0: port 2(bridge_slave_1) entered forwarding state
[  334.095120][T17758] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #15: comm syz.8.6843: iget: bad i_size value: 38620345925642
[  334.134862][T17758] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.6843: couldn't read orphan inode 15 (err -117)
[  334.153895][T17768] EXT4-fs (loop6): Invalid want_extra_isize 7
[  334.178535][T17758] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue
[  334.278306][T17765] F2FS-fs (loop4): invalid crc value
[  334.296841][T17765] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  334.320377][T17771] EXT4-fs (loop6): invalid journal inode
[  334.355008][T17771] EXT4-fs (loop6): can't get journal size
[  334.373882][T17765] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  334.403325][T17771] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.6848: iget: bad extended attribute block 1
[  334.449180][T17785] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue
[  334.460560][T17771] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.6848: couldn't read orphan inode 15 (err -117)
[  334.485208][T16522] attempt to access beyond end of device
[  334.485208][T16522] loop4: rw=2049, want=45104, limit=40427
[  334.509958][T17771] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,,errors=continue
[  334.547518][T17792] xt_hashlimit: size too large, truncated to 1048576
[  334.825537][T17800] F2FS-fs (loop6): invalid crc value
[  334.858299][T17800] F2FS-fs (loop6): Found nat_bits in checkpoint
[  334.890481][T17813] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  334.953149][    T5] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  334.973216][T17800] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  334.980802][T17813] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  335.016348][T17813] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  335.037403][T15395] attempt to access beyond end of device
[  335.037403][T15395] loop6: rw=2049, want=45104, limit=40427
[  335.069859][T17813] EXT4-fs (loop4): mounted filesystem with journalled data mode. Opts: dioread_nolock,stripe=0x0000000000000006,data=journal,nombcache,,errors=continue
[  335.333212][    T5] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  335.366384][    T5] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  335.513245][    T5] usb 9-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[  335.544629][    T5] usb 9-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[  335.591622][    T5] usb 9-1: Product: syz
[  335.613347][    T5] usb 9-1: Manufacturer: syz
[  335.866581][T17846] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  335.893248][    T5] uvcvideo: Found UVC 1.00 device syz (225a:e1d4)
[  335.920147][T17846] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  335.928551][    T5] uvcvideo: No streaming interface found for terminal 2.
[  335.966362][T17846] F2FS-fs (loop4): invalid crc value
[  336.040166][T17846] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597)
[  336.097525][   T15] usb 9-1: USB disconnect, device number 8
[  336.134556][T17846] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  336.164636][T17846] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  336.190349][T17876] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,,errors=continue
[  336.231584][T17876] SELinux:  Context system_u:object_r:mtrr_device_t:s0 is not valid (left unmapped).
[  336.246880][T17846] fscrypt (loop4, inode 3): Error -61 getting encryption context
[  336.256642][T17837] F2FS-fs (loop6): Segment count (31) mismatch with total segments from devices (0)
[  336.286794][T17837] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  336.321905][T17892] device-mapper: table: 253:19: crypt: Error allocating crypto tfm
[  336.337382][T17837] F2FS-fs (loop6): invalid crc value
[  336.345637][T17897] input: syz1 as /devices/virtual/input/input80
[  336.353007][T17892] device-mapper: ioctl: error adding target to table
[  336.366854][T17837] F2FS-fs (loop6): Found nat_bits in checkpoint
[  336.458074][T17837] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  336.482058][T17837] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  336.570043][T17837] F2FS-fs (loop6): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, min: 6, max: 903
[  336.691402][T17932] netlink: 'syz.8.6902': attribute type 1 has an invalid length.
[  336.709603][T17934] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  336.964286][T17962] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  337.028059][T17965] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x85aaa8f8, utbl_chksum : 0xe619d30d)
[  337.085763][    T9] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  337.194246][T17971] FAT-fs (loop2): Unrecognized mount option "shortname=mixed=winnt" or missing value
[  337.225124][   T15] input: syz0 as /devices/virtual/misc/uhid/8805:057E:0306.0036/input/input81
[  337.250956][   T15] hid-generic 8805:057E:0306.0036: input,hidraw0: <UNKNOWN> HID v0.03 Gamepad [syz0] on syz0
[  337.263750][T15030] EXT4-fs warning: 25 callbacks suppressed
[  337.263759][T15030] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  337.353147][T15030] EXT4-fs error: 25 callbacks suppressed
[  337.353156][T15030] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1135: comm udevd: checksumming directory block 0
[  337.412146][T15030] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  337.468550][T18006] tmpfs: Bad value for 'uid'
[  337.476601][T15030] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1135: comm udevd: checksumming directory block 0
[  337.529012][T15030] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  337.553277][   T15] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  337.560919][ T3712] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  337.600728][T17995] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  337.618711][T15030] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1135: comm udevd: checksumming directory block 0
[  337.650804][T17995] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  337.671863][T14356] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1222: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  337.688688][T15030] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  337.713687][T17995] F2FS-fs (loop2): invalid crc value
[  337.730278][T17995] F2FS-fs (loop2): Found nat_bits in checkpoint
[  337.746873][T14356] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1222: comm udevd: checksumming directory block 0
[  337.763163][T15030] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1135: comm udevd: checksumming directory block 0
[  337.808851][T14356] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  337.824186][ T3712] usb 7-1: Using ep0 maxpacket: 16
[  337.839724][T15030] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  337.865745][T17995] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  337.880962][T17995] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  337.890884][T18012] F2FS-fs (loop8): fault_injection options not supported
[  337.918155][T14356] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1642: comm udevd: checksumming directory block 0
[  337.933920][T18012] F2FS-fs (loop8): fault_type options not supported
[  337.943286][T15030] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1135: comm udevd: checksumming directory block 0
[  337.955224][   T15] usb 5-1: unable to get BOS descriptor or descriptor too short
[  337.962886][ T3712] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.989856][T17995] F2FS-fs (loop2): Unrecognized mount option "xœìÜÏOU" or missing value
[  337.999101][T18012] F2FS-fs (loop8): invalid crc value
[  338.004957][ T3712] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.015951][T18012] F2FS-fs (loop8): Found nat_bits in checkpoint
[  338.024551][T15030] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  338.040223][T18029] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1222: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  338.057940][ T3712] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  338.073165][   T15] usb 5-1: unable to read config index 0 descriptor/start: -71
[  338.080708][   T15] usb 5-1: can't read configurations, error -71
[  338.097187][T15030] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1135: comm udevd: checksumming directory block 0
[  338.110662][T18029] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1222: comm udevd: checksumming directory block 0
[  338.122623][ T3712] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  338.133879][T18012] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  338.141659][ T3712] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.154545][T18029] udevd[18029]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message
[  338.175723][ T3712] usb 7-1: config 0 descriptor??
[  338.184518][T16055] wiimote 0005:057E:0306.0037: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz1
[  338.206125][T16055] wiimote 0005:057E:0306.0037: New device registered
[  338.225331][T15030] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  338.245365][T17149] attempt to access beyond end of device
[  338.245365][T17149] loop8: rw=2049, want=45104, limit=40427
[  338.283253][T15030] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1135: comm udevd: checksumming directory block 0
[  338.296835][T18032] sch_tbf: burst 2464 is lower than device lo mtu (65550) !
[  338.320286][T18033] udevd[18033]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message
[  338.344785][T18035] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6942'.
[  338.421853][T18049] ip_tables: iptables: counters copy to user failed while replacing table
[  338.443155][    T5] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  338.620199][T18058] F2FS-fs (loop2): invalid crc value
[  338.634922][T18058] F2FS-fs (loop2): Found nat_bits in checkpoint
[  338.655717][ T3712] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0038/input/input82
[  338.670756][T18058] F2FS-fs (loop2): Start checkpoint disabled!
[  338.677585][T18058] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  338.686607][ T3712] microsoft 0003:045E:07DA.0038: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  338.726011][T18082] udevd[18082]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message
[  338.769081][  T393] attempt to access beyond end of device
[  338.769081][  T393] loop2: rw=2049, want=40984, limit=40427
[  338.790984][T18088] netlink: 'syz.4.6964': attribute type 23 has an invalid length.
[  338.809346][T18088] IPv6: NLM_F_CREATE should be specified when creating new route
[  338.817721][    T5] usb 1-1: config 0 has no interfaces?
[  338.823480][    T5] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  338.832636][T18088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  338.839839][T18088] IPv6: NLM_F_CREATE should be set when creating new route
[  338.847576][    T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.867616][    T5] usb 1-1: config 0 descriptor??
[  338.891973][ T3712] usb 7-1: USB disconnect, device number 16
[  338.918322][T18090] netlink: 'syz.4.6965': attribute type 1 has an invalid length.
[  338.968127][T18097] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  339.076862][T18119] incfs: iterate_incfs_dir / -22
[  339.127450][T18025] wiimote 0005:057E:0306.0037: Device removed
[  339.133832][T16055] wiimote 0005:057E:0306.0037: detected device: Nintendo Wii Remote (Gen 1)
[  339.149840][T16055] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0037/input/input84
[  339.166911][T16055] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0037/input/input85
[  339.182429][T16055] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0037/input/input83
[  339.196309][ T3712] usb 1-1: USB disconnect, device number 15
[  339.369446][T18123] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  339.438074][T18131] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue
[  339.452258][    T7] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  339.489681][T18131] fscrypt (loop6, inode 12): Mutually exclusive encryption flags (0x18)
[  339.663136][   T15] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  339.692960][T18154] tap0: tun_chr_ioctl cmd 1074025677
[  339.705023][T18154] tap0: linktype set to 1
[  340.083451][   T15] usb 3-1: unable to get BOS descriptor or descriptor too short
[  340.133209][   T15] usb 3-1: not running at top speed; connect to a high speed hub
[  340.182621][T18177] EXT4-fs (loop6): mounted filesystem with ordered data mode. Opts: ,errors=continue
[  340.260624][T18182] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7004'.
[  340.282900][T18182] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.297955][T18182] device bridge_slave_1 left promiscuous mode
[  340.310762][T18182] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.357388][   T24] kauditd_printk_skb: 9 callbacks suppressed
[  340.357396][   T24] audit: type=1400 audit(70411661.398:1050): avc:  denied  { setopt } for  pid=18183 comm="syz.4.7005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  340.463253][   T24] audit: type=1326 audit(70411661.498:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18191 comm="syz.4.7009" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ce9304d9 code=0x7ffc0000
[  340.489041][   T15] usb 3-1: string descriptor 0 read error: -22
[  340.499385][   T15] usb 3-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40
[  340.537382][   T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.585885][   T24] audit: type=1326 audit(70411661.548:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18191 comm="syz.4.7009" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f51ce9304d9 code=0x7ffc0000
[  340.656016][T18166] F2FS-fs (loop8): Invalid segment/section count (458783, 24 x 150994945)
[  340.673515][T18202] 9p: Unknown uid 18446744073709551615
[  340.690012][T18185] F2FS-fs (loop6): invalid crc value
[  340.706724][T18166] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  340.719486][T18185] F2FS-fs (loop6): Found nat_bits in checkpoint
[  340.726190][   T24] audit: type=1326 audit(70411661.548:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18191 comm="syz.4.7009" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ce9304d9 code=0x7ffc0000
[  340.757389][T18166] F2FS-fs (loop8): invalid crc value
[  340.781096][T18166] F2FS-fs (loop8): Found nat_bits in checkpoint
[  340.805672][T18185] F2FS-fs (loop6): Start checkpoint disabled!
[  340.824454][   T24] audit: type=1326 audit(70411661.548:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18191 comm="syz.4.7009" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ce9304d9 code=0x7ffc0000
[  340.857579][T18185] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  340.888544][T18166] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  340.909302][T18166] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  340.925017][T18222] erofs: (device loop4): mounted with root inode @ nid 36.
[  340.944282][T18222] attempt to access beyond end of device
[  340.944282][T18222] loop4: rw=524288, want=1342177528, limit=16
[  340.966124][   T24] audit: type=1326 audit(70411661.548:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18191 comm="syz.4.7009" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f51ce9304d9 code=0x7ffc0000
[  341.003746][    T7] attempt to access beyond end of device
[  341.003746][    T7] loop6: rw=2049, want=45104, limit=40427
[  341.016297][T18222] attempt to access beyond end of device
[  341.016297][T18222] loop4: rw=0, want=1342177280, limit=16
[  341.052880][T18222] attempt to access beyond end of device
[  341.052880][T18222] loop4: rw=0, want=1342177280, limit=16
[  341.077090][   T24] audit: type=1326 audit(70411661.548:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18191 comm="syz.4.7009" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ce9304d9 code=0x7ffc0000
[  341.102754][T18222] attempt to access beyond end of device
[  341.102754][T18222] loop4: rw=0, want=1342177280, limit=16
[  341.123320][T18222] attempt to access beyond end of device
[  341.123320][T18222] loop4: rw=0, want=1342177280, limit=16
[  341.137791][   T24] audit: type=1326 audit(70411661.548:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18191 comm="syz.4.7009" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ce9304d9 code=0x7ffc0000
[  341.237409][   T24] audit: type=1326 audit(70411661.548:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18191 comm="syz.4.7009" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f51ce9304d9 code=0x7ffc0000
[  341.281432][T18233] netlink: 'syz.6.7025': attribute type 1 has an invalid length.
[  341.342039][   T24] audit: type=1326 audit(70411661.548:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18191 comm="syz.4.7009" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ce9304d9 code=0x7ffc0000
[  341.412967][T18245] EXT4-fs (loop6): Test dummy encryption mode enabled
[  341.444083][T18245] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,dioread_nolock,,errors=continue
[  341.589140][T18268] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  341.617148][T18268] EXT4-fs (loop8): 1 truncate cleaned up
[  341.628428][T18268] EXT4-fs (loop8): mounted filesystem without journal. Opts: nojournal_checksum,inlinecrypt,lazytime,usrquota,usrquota,,errors=continue
[  341.664384][T18268] EXT4-fs (loop8): shut down requested (2)
[  341.678324][T18268] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=12
Mar 25 22:47:42 syzkaller kern.alert kernel: [  341.664384][T18268] EXT4-fs (loop8): shut down requested (2)
[  341.699775][T18268] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=12
[  341.795720][T18282] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  341.823235][   T15] usb 7-1: new low-speed USB device number 17 using dummy_hcd
[  341.957134][T18304] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers
[  342.002468][T18308] futex_wake_op: syz.4.7056 tries to shift op by 144; fix this program
[  342.026092][T18308] futex_wake_op: syz.4.7056 tries to shift op by 144; fix this program
[  342.164789][T18322] erofs: (device loop8): mounted with root inode @ nid 36.
[  342.184084][T18322] attempt to access beyond end of device
[  342.184084][T18322] loop8: rw=524288, want=1342177528, limit=16
[  342.195852][   T15] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  342.215422][   T15] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  342.230430][T18322] attempt to access beyond end of device
[  342.230430][T18322] loop8: rw=0, want=1342177280, limit=16
[  342.249165][   T15] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  342.266459][T18322] attempt to access beyond end of device
[  342.266459][T18322] loop8: rw=0, want=1342177280, limit=16
[  342.286275][   T15] usb 7-1: config 0 interface 0 has no altsetting 0
[  342.296225][T18322] attempt to access beyond end of device
[  342.296225][T18322] loop8: rw=0, want=1342177280, limit=16
[  342.311726][   T15] usb 7-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00
[  342.332606][   T15] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.353565][T18320] F2FS-fs (loop4): invalid crc value
[  342.365149][   T15] usb 7-1: config 0 descriptor??
[  342.376173][T18320] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  342.393177][T18264] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  342.404114][ T3712] usb 3-1: USB disconnect, device number 13
[  342.421666][T18328] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  342.470058][T18320] F2FS-fs (loop4): Start checkpoint disabled!
[  342.490989][T18320] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  342.528290][ T9717] kernel write not supported for file /vcsa (pid: 9717 comm: kworker/0:8)
[  342.578804][T18345] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,,errors=continue
[  342.607287][    T7] EXT4-fs error (device loop2): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  342.622350][    T7] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  342.645228][    T7] EXT4-fs (loop2): This should not happen!! Data will be lost
[  342.645228][    T7] 
[  342.663601][    T7] EXT4-fs (loop2): Total free blocks count 0
[  342.677991][    T7] EXT4-fs (loop2): Free/Dirty block details
[  342.688059][    T7] EXT4-fs (loop2): free_blocks=2415919504
[  342.698704][    T7] EXT4-fs (loop2): dirty_blocks=16
[  342.714101][    T7] EXT4-fs (loop2): Block reservation details
[  342.722041][    T7] EXT4-fs (loop2): i_reserved_data_blocks=1
[  342.728938][    T7] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28
[  342.747962][    T7] EXT4-fs (loop2): This should not happen!! Data will be lost
[  342.747962][    T7] 
[  342.801139][T18357] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  342.813378][ T9717] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  342.821227][  T271] EXT4-fs error: 46 callbacks suppressed
[  342.821240][  T271] EXT4-fs error (device sda1): ext4_find_extent:928: inode #2022: comm syz-executor: pblk 34879 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  342.884261][   T15] input: HID 04b4:de64 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:04B4:DE64.0039/input/input86
[  342.897875][T18360] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
SYZFAIL: SIGBUS
pc-offset:0xfffffffffffd5eff pc:0x7fe2fc92a811 addr:0x7fe2fa91e71e code=2 (errno 11: Resource temporarily unavailable)
[  342.913245][T18357] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000
[  342.949987][    T1] EXT4-fs warning: 46 callbacks suppressed
[  342.949998][    T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #2001: comm init: No space for directory leaf checksum. Please run e2fsck -D.
[  343.004857][   T15] cypress 0003:04B4:DE64.0039: input,hiddev96,hidraw1: USB HID v0.00 Device [HID 04b4:de64] on usb-dummy_hcd.6-1/input0
[  343.035129][T15030] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  343.080452][    T1] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #2001: comm init: checksumming directory block 0
[  343.101415][T15030] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1135: comm udevd: checksumming directory block 0
[  343.123006][    T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #2001: comm init: No space for directory leaf checksum. Please run e2fsck -D.
[  343.138678][    T1] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #2001: comm init: checksumming directory block 0
[  343.152323][T15030] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  343.175288][   T15] usb 7-1: USB disconnect, device number 17
[  343.182586][    T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #2001: comm init: No space for directory leaf checksum. Please run e2fsck -D.
[  343.222273][T15030] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1135: comm udevd: checksumming directory block 0
[  343.234293][    T1] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #2001: comm init: checksumming directory block 0
[  343.249229][T15030] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  343.264500][ T9717] usb 9-1: device descriptor read/all, error -71
[  343.271280][T15030] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1135: comm udevd: checksumming directory block 0
[  343.284573][    T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #2001: comm init: No space for directory leaf checksum. Please run e2fsck -D.
[  343.300029][    T1] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #2001: comm init: checksumming directory block 0
[  343.313410][T15030] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  343.330410][T15030] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1135: comm udevd: checksumming directory block 0
[  343.342484][    T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #2001: comm init: No space for directory leaf checksum. Please run e2fsck -D.
[  343.359483][    T1] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #2001: comm init: checksumming directory block 0
[  343.371474][T15030] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1135: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  343.439135][T18364] udevd[18364]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message
[  343.513726][    T7] device bridge_slave_0 left promiscuous mode
[  343.519854][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.527754][    T7] device veth1_macvtap left promiscuous mode
[  343.533953][    T7] device veth0_vlan left promiscuous mode
[  343.724257][    T7] tipc: Disabling bearer <udp:syz2>
[  343.729575][    T7] tipc: Left network mode
[  344.073779][    T7] device bridge_slave_1 left promiscuous mode
[  344.079892][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.087439][    T7] device bridge_slave_0 left promiscuous mode
[  344.097636][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.105688][    T7] device bridge_slave_1 left promiscuous mode
[  344.111780][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.119324][    T7] device bridge_slave_0 left promiscuous mode
[  344.125503][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.133926][    T7] device veth1_macvtap left promiscuous mode
[  344.139914][    T7] device veth0_vlan left promiscuous mode
[  344.145968][    T7] device veth1_macvtap left promiscuous mode
[  344.151939][    T7] device veth0_vlan left promiscuous mode
[  344.903664][    T7] device bridge_slave_1 left promiscuous mode
[  344.909804][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.917431][    T7] device bridge_slave_0 left promiscuous mode
[  344.923651][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.931376][    T7] device veth1_macvtap left promiscuous mode
[  344.937818][    T7] device veth0_vlan left promiscuous mode
[  345.873681][  T393] device bridge_slave_1 left promiscuous mode
[  345.879816][  T393] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.887403][  T393] device bridge_slave_0 left promiscuous mode
[  345.893627][  T393] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.901307][  T393] device veth1_macvtap left promiscuous mode
[  345.907550][  T393] device veth0_vlan left promiscuous mode
[  348.503389][   T94] EXT4-fs warning: 67 callbacks suppressed
[  348.503399][   T94] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1222: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  348.543798][   T94] EXT4-fs error: 70 callbacks suppressed
[  348.543807][   T94] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1222: comm udevd: checksumming directory block 0
[  348.562952][   T94] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1222: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  348.578595][   T94] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1222: comm udevd: checksumming directory block 0
[  348.591948][   T94] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1222: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  348.607226][   T94] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1222: comm udevd: checksumming directory block 0
[  348.620413][   T94] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  348.635719][   T94] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1642: comm udevd: checksumming directory block 0
[  348.649303][   T94] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:404: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D.
[  348.664605][   T94] EXT4-fs error (device sda1): __ext4_find_entry:1668: inode #1480: comm udevd: checksumming directory block 0