last executing test programs:

23m55.294251245s ago: executing program 32 (id=242):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r0, 0x0, 0x0, 0x20040804, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "d63bfe84fa5b58ff", "b046f1c17a242e252881d895738d4c7a008817c6cdeff1469b23f51c41fdae17", "f6a82539", "acf760f7d7de25ea"}, 0x38)

23m34.347601975s ago: executing program 33 (id=322):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@nobarrier}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$eJzs3M9vFFUcAPDvTLsFBGxF/MEPtYrGBrWlgMrBgxpNPGBiogeMp6YtBCnU0JoIIQrG4MkYE+/Go/+CJ70YoxcTr3o3JMT0AnhxzezOtLtld8u2225lP59k4L2dmX3f78683TfzdhtAzxrO/kkidkTEHxExWK3WbzBc/e/mwqXJWwuXJpMol9/+O6lsd2Ph0mSxabHf9rwykkaknyWxr0G7cxcunpmYmZk+n9fH5s9+MDZ34eJzp89OnJo+NX3u8LFjR4+Mv/jC4ecbBz7QXp5ZTDf2fjy7f88b73715vEv6vJflkeHDLda+VS53OHmumtnTTnp72IgtKUvIrLDVar0/8Hoi6WDNxivf9rV4IB1VS6Xy9ubr75cBu5iSdTXdXnoFcUHfXb9WyzLBwEvr9/wo+uuv1K9AMryvpkv1TX9kebblJZd33bScEScuPzPN9kSbd+HaPMmCABARPyQjX+ebTT+S+PBmu3uzeeGhiLivojYFRH3R8TuiHggorLtQxHxcGXPWBw7rWT5JMnt45/02poSXEE2/nspn9uqH/8tZjDUl9d2VvIvJSdPz0wfyl+TkShtyerjLdr48bXfv2y2rnb8ly1Z+8VYMI/jWv+W+n2mJuYn1pJzretXIvb2F7nW5p8szgQkEbEnIvauso3TB7/b32zdyvm30IF5pvK3EU9Xj//lWKjPv5C0np8c2xoz04fGirPidr/8dvWtJs1XXvgTB1eZfwdkx/+ehuf/Yv5DSe187Vz7bVz98/Om1zSrPf8Hkncq5eIK6KOJ+fnz4xEDyfFq0LWPH17at6gX22f5jxxo3P93xdIrsS8ispP4kYh4NCIey2N/PCKeiIgDLfL/+dUn32+4Il3j+d8BWf5TbR3/pcJALH+kcaHvzE/f1zU6tFTM87/V+vgfrZRG8kfu5P3vTuJa3dkMAAAA/z9pROyIJB1dLKfp6Gj1+/K7I9KZ2bn5Z07OfnhuqvobgaEopcWdrsGa+6Hj+WV9tX4lIqpfLSjWH8nvG3/dt61SH52cnZnqdvLQ47Y36f+Zv/q6HR2w7vxeC3qX/g+9q1H/39qFOICN5/MfeleD/r+tG3EAG6/R5/8nrXf5d71iATbWsv5v2g96SPvX/7++ty6BABuuaf+/m//yD1Dh/j/0pLltsfKP5FsWimda5e6bpZBEREefMEqbIq+1F8pJw4MbaVYobYYIFdah0N33JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE75LwAA//8YzNth")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000ec0)={0x0, 0x0, "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", "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"})
ioctl$FS_IOC_GETFSMAP(r0, 0x40e8662e, &(0x7f0000000ec0)=ANY=[])

19m38.727901386s ago: executing program 34 (id=1837):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@noblock_validity}, {@nolazytime}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@nouid32}, {@noauto_da_alloc}]}, 0x4, 0x61f, &(0x7f0000000b00)="$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")
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80)

19m25.074635798s ago: executing program 35 (id=1912):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaef}, 0x7, 0x7}, [{0x8, 0xffbff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x80000001, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x219, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x84, 0x3, 0x8, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x13, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x6, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x7fffffff, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xfffffffe, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x7}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x200004, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x0, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x9, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x8}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xa, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x4, 0x8000, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0xed, 0x4, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

16m24.139584426s ago: executing program 36 (id=3167):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94)
r0 = timerfd_create(0x8, 0x0)
pselect6(0x40, &(0x7f00000002c0)={0x0, 0x2400, 0x0, 0x8000, 0x800, 0x10000, 0x0, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x9c52, 0x37e, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x5}, 0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)

15m50.946818555s ago: executing program 37 (id=3361):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x7)
read(r0, &(0x7f0000001140)=""/4096, 0x48)
r1 = landlock_create_ruleset(&(0x7f0000000300)={0x7f2e, 0x0, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0xe)

15m38.874089132s ago: executing program 38 (id=3433):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000340)="0a000300010000", 0x7)
recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0)

14m50.772265968s ago: executing program 39 (id=3685):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x1, r0})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00')
pread64(r2, &(0x7f0000000340)=""/19, 0x13, 0x0)

11m37.368564834s ago: executing program 40 (id=4742):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)

9m44.639571945s ago: executing program 41 (id=5158):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000002d00)={0x2c, &(0x7f0000002a00)={0x0, 0x22, 0x5, {0x5, 0x3a, "d10d4c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4000014)

5m1.420887615s ago: executing program 3 (id=6737):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x600)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000040)={r3})
mmap(&(0x7f0000002000/0x3000)=nil, 0x3020, 0x1000004, 0x13, r0, 0x100000000)

5m0.596757832s ago: executing program 3 (id=6741):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
listen(r0, 0x10040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)

5m0.391573047s ago: executing program 3 (id=6742):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)

4m56.898439608s ago: executing program 3 (id=6767):
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0)
chroot(&(0x7f0000000140)='./file0/../file0\x00')
pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00')

4m56.233796578s ago: executing program 3 (id=6776):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r0)
r1 = socket(0x15, 0x5, 0x0)
connect$unix(r1, &(0x7f00000003c0)=@abs={0xa}, 0x6e)
getsockname$packet(r0, 0x0, &(0x7f0000000940))

4m51.568647574s ago: executing program 3 (id=6809):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="f78d9c63b9dc5e0c00c529e38fff4800bf52163448412ba8", 0x18}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863fff5cfe6cb55b5bb9fa6935849e604fe035bb", 0xffffff9a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4bb3766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721192af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48", 0xbd}], 0x3, 0x0, 0x0, 0x20004000}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

4m50.94456099s ago: executing program 42 (id=6809):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="f78d9c63b9dc5e0c00c529e38fff4800bf52163448412ba8", 0x18}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863fff5cfe6cb55b5bb9fa6935849e604fe035bb", 0xffffff9a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4bb3766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721192af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48", 0xbd}], 0x3, 0x0, 0x0, 0x20004000}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

2m27.377912896s ago: executing program 8 (id=7546):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m27.085787343s ago: executing program 8 (id=7548):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7, 0x4)
listen(r1, 0x7)

2m26.921193827s ago: executing program 8 (id=7549):
r0 = syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

2m23.685695865s ago: executing program 8 (id=7569):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x4810, &(0x7f0000000140)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpquota}, {@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@errors_remount}, {@init_itable}, {@noauto_da_alloc}]}, 0x0, 0x4ec, &(0x7f0000000c40)="$eJzs3ElvHMUeAPB/j5fEL8mzX957QBbIQEBYIOLYWQ8cCAIpFyQkEApHYztRiJOg2EhJZBGzKEgcQPkEAW5IfAJOcEGAOIC4EsERIUXIBxw4oEE10zOMPTPe4iWxfz9pnKru6q6q7q64lmkHsGEV048sYmtE/BgR3ZXozATFyj+3piaG/piaGMqiVHrht6ycbnpq4sNq0upxW/JIbyGi8E4Wu5rkO3bp8pnB0dGRC5Xo2zfGC/mes4OnRk6NnBs4evTgga4jhwcOLUs9U5mmd75xfveO4y9fe27oxLVXvv40lbeU75+emhiaeUTPInNoa9hSjOLMa1nnkUWe/U63rS6ctaefhbUrDAuWntp0uzrK7b872sqxiu549q1aImDdKZVKpU0NW2sNfrJUL8sqBwDrRKZJwwa0ve43/vRUGqlODDWOg9e3m8eiPAJK9b6Vfyp72ssj2GJPZWzUsUL5/y8iTkz+eT19ouk8BADA8vr8WETp5987Ur+j+qnsKcQ9den+na8N9UTEfyIi9R3/m/df/h9RTntvRNxXd0zqUW6eJ//irHhj/+f7rjyQuqxLrmcrqf/3ZL62NbP/V1u/6GnLY9vK9e/ITp4eHdmfX5Pe6NiU4v2Np65Nq33xzA8ftMq/WNf/S5+Uf7UvmJfj1/ZZE3TDg+ODt1vvqptvli/slcb6Z9GeVUMROyJi5xLOn67Z6cc+2d1qf63+bXH9RKpnQ/3fb33y9iUUaJbSRxGPVu7/ZMyqf9KZh/rGz77WN3bp8hOn69cn+48cHjjUtzlGR/b3VZ+KRt98d/X5PNgwjJj//q+sdP//1fT5r61c9mT167Vji8/j6o13W45plvr8d2YvlsOd+baLg+PjF/ojOrPJxu0D/xx7cbBrRvpU/969zdv/9oi/qovbuyIiPcT3R8QDEbEnL/uDEfFQROydo/5fPf3wq62GkHfC/R9e1P1vFXjq24jmu9rOfPlZQ8bvFRdY/3T/D5ZDvfmW4cHx+X6txFwlrQ/c9gUEAACAu8CeiNgaWWFfPse5NQqFffsittRmUMbGHz95/vVzw5V3BHqio1Cd6equmw/tz+eGUzwdNVAXT/sPlOeNS6VSqSvF0/h9dNvaVh02vC0t2n/yi+/9w/q3qHW0Vm+0AXelpa+jL/8XMoDVtQzfowHuUto/bFwLbv8r9RYcsGaatf8rEbfWoCjAKmvW/l9ag3IAq8/4HzYu7R82Lu0fNqQFvSS/hMD247O31OWVta9Mpq0DhZj7rwD0RFS3VL/gOPcJfypELE8J25a1pl0z7mmhaZrNsRx5RWHeNO2L+EMMqxso3BnFqAQ2RcQ8T2/tYbtSDVxe6YKVG8HHa/u/EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO37OwAA//8GPdEz")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14)

2m22.640397102s ago: executing program 8 (id=7575):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x255}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x10002, 0x27e}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x988a, 0x5420, 0x0, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd15, 0x10, 0x1, 0x262}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0x1, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x0, 0x5, 0x0, 0x0}}, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x400000, 0x0, 0x7, 0x0, &(0x7f0000000340)=0x37})

2m18.845304329s ago: executing program 8 (id=7602):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000001340)={{@local, 0x1}, @any, 0x0, 0x500000, 0x6, 0xd})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@local}, @my=0x1, 0x0, 0x0, 0x8001})
close(0x3)

2m18.353929282s ago: executing program 43 (id=7602):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000001340)={{@local, 0x1}, @any, 0x0, 0x500000, 0x6, 0xd})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@local}, @my=0x1, 0x0, 0x0, 0x8001})
close(0x3)

2m12.315244298s ago: executing program 6 (id=7636):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800)

2m11.613091217s ago: executing program 6 (id=7639):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000fec000/0x4000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m11.144425293s ago: executing program 6 (id=7641):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xea, 0x440, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x20000000, @loopback, 0x3}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)

2m10.227486854s ago: executing program 6 (id=7645):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@nodiscard}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@sysvgroups}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f00000003c0)='mnt\x00', 0x486200, 0x0)
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2m9.260809899s ago: executing program 6 (id=7647):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
recvfrom$l2tp(r0, 0x0, 0x0, 0x20, 0x0, 0x0)

2m4.187837122s ago: executing program 6 (id=7670):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000013c0)='./file0\x00', 0x1000a05, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303230303030303030303230303030303030362c6769643d69676e6f72652c12e7090021b0d36853f83b3237931f7bf54d593a4b0e2a94b2208a0318c4095a29b12750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b"], 0x1, 0xc64, &(0x7f0000001400)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020}, 0x2020)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)

2m3.542384606s ago: executing program 44 (id=7670):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000013c0)='./file0\x00', 0x1000a05, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303230303030303030303230303030303030362c6769643d69676e6f72652c12e7090021b0d36853f83b3237931f7bf54d593a4b0e2a94b2208a0318c4095a29b12750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b"], 0x1, 0xc64, &(0x7f0000001400)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020}, 0x2020)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)

59.242594048s ago: executing program 2 (id=7949):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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")
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc2042, 0x150)
kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
fallocate(r0, 0x0, 0xbf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x800000000, 0x0, 0x2, 0xfffffffffdffffff})

58.453468936s ago: executing program 2 (id=7952):
r0 = socket$tipc(0x1e, 0x1, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040)

57.235676063s ago: executing program 2 (id=7958):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "fbd2491438230bd3", "e2bbc41fd7cdaea0acfdba65c0fb1910e4e6e3af84f7654db6bab4a92a5c1834", "7e96b72c", "874be53a5c99bd7e"}, 0x38)

56.59105139s ago: executing program 2 (id=7963):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')

56.139504922s ago: executing program 2 (id=7967):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000002600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x40, 0x8, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1)

51.856763831s ago: executing program 2 (id=7989):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a24, 0xc000, 0x8, 0x337})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @local, 0x0, 0x0, 0x8000000, 0x0, 0x6, 0x7fc})
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

50.594341007s ago: executing program 45 (id=7989):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a24, 0xc000, 0x8, 0x337})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @local, 0x0, 0x0, 0x8000000, 0x0, 0x6, 0x7fc})
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

12.870914453s ago: executing program 4 (id=8143):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20000400000091"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6.564445987s ago: executing program 7 (id=8167):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)

6.265532172s ago: executing program 4 (id=8171):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de)
chdir(&(0x7f0000000300)='./file0\x00')
setxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x3}, [], {}, [], {0x10, 0x6}}, 0x24, 0x0)

5.756478937s ago: executing program 9 (id=8174):
r0 = socket(0x1, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20)
bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0)

5.642691134s ago: executing program 7 (id=8176):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f00000007c0)='./file0\x00', 0x20881a, &(0x7f0000000040)={[{@check_strict}, {@nojoliet}, {@nocompress}, {@nojoliet}], [{@flag='sync'}]}, 0x0, 0x692, &(0x7f0000000100)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
setxattr$trusted_overlay_redirect(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000940), 0x0, 0x0, 0x2)

5.507144747s ago: executing program 9 (id=8177):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$midi(0x4, 0x0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b02, 0x0)

5.346255561s ago: executing program 4 (id=8178):
socket(0x10, 0x3, 0x0)
syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x42502)
syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x181800)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x5, 0x0, &(0x7f0000003100)=[{&(0x7f0000000480)=""/92, 0x5c}], 0x1, 0x0, 0x0, {0x3, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2004, 0xfffffffd, 0x9, 0x0, 0x0)

5.286087768s ago: executing program 7 (id=8180):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
recvmmsg(r0, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0)

4.521767199s ago: executing program 4 (id=8185):
syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

4.251297104s ago: executing program 5 (id=8187):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x101, 0x11, 0x5, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x3f00)

3.961495929s ago: executing program 1 (id=8188):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x1)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8)
listen(r1, 0x0)

3.827498698s ago: executing program 4 (id=8190):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r0, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYBLOB="814c8d", @ANYRES8=r2], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40)

3.588075243s ago: executing program 1 (id=8192):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000280)="89cca9ad7f624c060000850875090000", 0x10}], 0x2)

3.258626397s ago: executing program 5 (id=8193):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008880}, 0x30)

3.106101441s ago: executing program 7 (id=8194):
socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000080), 0x12)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)

3.104547633s ago: executing program 5 (id=8195):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000004c0)={r2, 0x0, 0x3, 0x0, 0x2, [<r3=>0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0xc]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r3, 0x80000})

3.06857338s ago: executing program 0 (id=8196):
r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x8)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e)
connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e)

2.855843091s ago: executing program 5 (id=8197):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r1, 0xa)

2.654457084s ago: executing program 0 (id=8198):
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x8, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000)

2.452198363s ago: executing program 4 (id=8199):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file0\x00', 0x8000, &(0x7f0000000140)={[{@nolargeio}, {@nolargeio}, {@gqnoenforce}]}, 0x1, 0xb92c, &(0x7f000002e340)="$eJzs3XtsnWUdwPGnXbu1kMEwdFwUGZMBA9nWbVAKwbUd6yiXymVgB0yorMCk4zIKblxLCAmoGMB4IWZRIl6jRHEQiYLTiHJxGGOA+AeRgDFgsuhfoMZQ8/acU9pDaejTPU8z9vkk6+n7nv6eted7nvdky7LT03luRwh1oWQwVHvxza1PfHFd55M//9L92x++6/lHSmfbGsp3t5Vv28u3HWF4seHTtaVTdV/f9mhtcVA7et29Ghtr9gnh0qp1Wko3NzVXvm6oSvn0vMr9tSOHNZ8v/Rqxd/HhD23rekMIc0bN14QQlrzrB91D9bSv7iw/JmFUtxnlu2veuW/4tq70a8WzIazYHt7z+TGtiu9zTufsjx883d/I7qCnfXVXVf+2cuea8n5sq96De6Lq5/lrDy26s/wQDj/fpjHhlPS0d54RJtjHx/3vogVDpetmfQhhZghhVgihYbp7sGu0dywrXrNrK8fl7JX9P2e858WRS1/7TwhhbvEyXrpelF4LgN1Le8eylePs/5kT7f/WO7a9Yf/D7q+rvWNZsder9n/DRPt/Q+vaF0r7vq2lNPX29P4QAAAAAMC4rtty45W9/f19m3ziE5/4ZOST6b4yAam9s+mn+zsBAAAAAAAAAAAA3q8c/5x4un9GAAAAAAAAAAAAAPig6Opu3zmjZsypGaMPDtnRN3y7/K2eK753z9D6ym357tPHWXLM+/wPDQ0Nte5cUXkv9llV75fdUD1crD9Y99bT5cO26vcfrB8+Wx8uuWxDf9+S4rdaWR82FwfNxbqd9eHe4mBpcbC6Pny/OFg2fNAYthcHiy69un99ceLUyEfsg6WrezDMGFMsjHk2jO4/WD9/e+V2giUrq9WFcv/99z9vU9V9FeP3f2f99vd6X3J2jcn1X7S5cjvBku/a/we9vuaX49333v1H1u/QP61xrv9jGlVf96uu//PGWXJkfu6LT19R9H/sybvWlE/VvZ/r/6j1V1b3H1585PpfLHVK5fpfvLasmtKDsQfq6r5950T7f+L+dZXX9dpRsyOrnXHS861F/30Wbvtz+VT9JPufMtH+r5n3rusJk9TV/eBQ1f6fRP9wxDhLjjT52kunPVv0/8nTa5pG3TeZ/quq+y8e2HjN4uu23Hjsho29l/dd3ndVy5LlJxzf3LK8efHwFaH0cWqPyZ5kavt/+P3/R8/UhLBgZH7B8W9fUPSf++3OnvKphkn275xw/18y9ntllPm1YebMsLl3YGBTc+lj5XBp6WPpy8bpP4nX/48dVf6yxvJtTQgHjsy3HNB0YNG/acaqj5RPzZxk/9UT9h8c+X2JNMX9v75qZkz/wece/FnRf/4Pz6/8ncJkX/9Pnah/7bfs/6nq6q76C59drOj/t7qFJ0aOd/nzX1o5+v9q/wXnRo6fpn9aOfrf8OHDBiLHT9c/rRz9G5effHvk+Bn6p5Wj//aTWr8bOX6m/mnl6P+NY477Y+R4t/5p5eh/zuHNr0eOf1L/tHL0//uHtlwYOX6W/mnl6L/4kFtujhw/W/+0cvQfmH1tU+T4OfqnlaP/E7XXL40cP1f/tHL0/82xG34fOb5G/7Ry9N97/sZXIsfP0z+tHP3PWtp7d+T4+fqnlaP/Ayf3PRw5/in908rR/+KDH70scrxH/7Ry9P9q00/bI8fX6p/Wru5f/Q9yiv476p84KnK5C/RPK8f+r9vr8X0jxy/UP60c/W9a8J3/Ro5fpH9aOfo/cvSDL0eOr9M/rRz93zjxx9sixz+tf1o5+s877gdfjhy/WP+0cvS/5rA/vRQ5fon+aeXo//iiF/4VOd6rf1o5+r/6ib88EDn+Gf3TytH/mOaXn4wcv1T/tHL0X/PRX4/3/wS9H+v1TytH/637PdUfOd6nf1o5+v+u5pn6yPHL9E8rR/9999kxP3L8cv3TytH/mYWH/CNy/Ar908rRPxxx0I7I8Q36p5Wj/4XHNz0UOf5Z/dPK0f/+1v3uiBy/Uv+0cvTfOXf2DZHj/fqnlaP/4Qc1nh05vlH/tHL0v62x/oTI8av0TytH/8dm1hwaOX61/mnl6F+7pOtHkePX6J9Wjv7PrTjzC5Hj1+qfVo7+9y5ufzVyfJP+aeXov3beqqcix6/TP60c/Y/Yd23s/8g+oH9aOfr/M6w7IHL8ev3TytF/25yzb40cv0H/tHL0v+XQ89ZGjn/uxTe3zgr6J5Oj/y9OuPO+yPHN9n9aOfpvarn9scjxLfqnlaP/wiPv+Wvk+I36p5Wj/ytH3f3vyPGb9E8rR/9vzvrK7Mjxm/VPK0f/8xvuOzpy/Bb908rRf/aBW1dGjt+qf1o5+v/2gAfWR47fpj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9nBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwt6dwF06Fv4fPzNmxhpS1iLZS3ZZUhg0KC3WJPs+WUNZC1EhWyhKypqtJEtJSLudylJJKdJGWilZ/q8xS4zvSP37NZrv+/16zTxnuefMda7PfZ3nmed+zj0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD85208av3VBoNh464d9Iz7b3/olCuP3GzUVZcdfdzVFxx200Vjb111mnF3r/rERAZPPtiqY+4bOnaTYSddctbQMVeGPvVxp5t22iEzDoZsk0e1/+b/ZNjzjr8wdMLVIUeM/TXB9E/+7TNvdeFgMJj5nzxerY1HrjlqzOSN/TWh21Tj7h53+4TLw8b+WmmLwWClTQeT3D8mv8c2HLXu5B7D/4KNR6659kT9B+M6P9l94vXdauL9fKpDNx0yWcP9h2w8ctQ6Y1pPah3vs/fRT+4Dg8GwUweDYacNBsNOHwyGnTG5e/CfMXK1ZVYb85o//vrY6geN/4Igvb4PeeRNl4z5nDF87OeJYWeO/1wA/G8Zudoyq4f1P2L8/Wn93/voPRtZ//C/b+2Rqy0zeMrX+WNvPWj8v+/j+l957ivumnwjBgAAAP5Vjz9w+VXjjvUNHQzmGUx0vPdJ474vMOTCq2+5ZbIN9PkhHCd75s9M/I8Z03ma8+YdDHbdcHIPhclgijiOzb9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fQvNonj/zOP/3jAVJeuMW7TBW89YacNJv7zY26b5r8+6slmSj3+Pxg9ZGzLMc1HDwaDN49cb4NFBoPBBjudcOt8gwn3rTDmvpVmmWrcCQIWefL310/igce/m/zJkzVMN+ExLnzy8dd+4rSphkw0iKfY9omjzt5x44eXnfjjQpN+HhPOL3HdG+44cfx7WYZOtNGk9tXxjz/+uUzcedzYFxkz9iX22mX3Jfbcd7/FRu+y1Q7b7bDdrssvuewKyy21/LJLLbH96J23W3Ls75Oas7Gnrlj9uczZiInn7IGRT52ziZ/bpOZs3mefsycfccdrbp9t/JwN+xfnbPVnn7N5R48f66rDB1s+OTdj/so1hg/2GXNlqanH7ELjtp1jzLavnWXoYHDsP57omEtTT9gHhxw0+j9w3pJxH0eO+7haPG/JpZM6b8lgm4keZ8WxH/a6cvx2E7/PetzNz/m8JSuPOmThMWtxoj//f+Hf+vz/jF4rDJkwUeNPGjJum7G9/nGeifHTtupTzjOxfDqXzH/SM8Y779AJ+3Ua77j3xQ2ZaP6f7X1xg0Xu3fL8sc9r1eXH/qnH/+0o+bVjnX/MXvC0147Bs792TPWPi/+4dbsb5574teONkx7i09bF+DmaeqKNJvXacc3Dww4a8/jjxzyJ1451Ro97o/E/XjvG/LWrj3/tGDP2UcMHx465svSYK2sOH5wz5soyT16ZdnD1mCuLb7PbztuOuWGtZ+63iwx52g88hv121ET77XM4P84q1w0Gq1ydntekpzNL++2IZxlvfj/34Fnfz73w4Y+uPxgMZhv7WXrMkxw79n9HGu+wZx9vOP/E4NnOPzFYcYXzV/8Pj3fCOntyXxt3uqi1JvFnnrbOZn7GOjt4qqesjOf6dc22Yfuxl+eY8GgXn3b9QePnaPhEj/vPPkePfy6p//iv+Z5q6KmDIc82N2s+l7mZ8dnn5rl+/bLI/GPvn/ZZ5maOWWdffvzcjPgX52bNSczNU78efqohBw2mffrcDHvya+AFxs3NqOcyNzP8Z/ab6cL2Yy8vOOGmTR5fbsHxcxPmIn7+H//4o/7Vudlywn6zwJP3zTd0MGLEYJ+t9tprj6XG/j7+6tJjf3/2NbjGc5nLaf4zcznXuFedoc+cnAk3rXjTSuv8u2twjX91LucdDB3/b+7REy+W/xzf/+mmfzf9u+nfTf9u+nfTv5v+xSZx/H/e8d8XXPTGRW4Z982Y4deev9G2k3u8k9kUffx/XN+nHf/fdqPzrx06mHDfsx6fHbvN8/L47PJjP+y/1PjtJj4+OO7m53x89opjLtv0v3R89t8yfq0+h+8bev3vpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276F5vE8f8lx/8cwOP373X3uAOhw7ceOee//T6rKcQUffx/XN+nHf+/es6RWw8dTLjvWY//j92m4/j/Hnfed8jz+fj/+LXq+D//hP7d9O/29P7TTrZxMHlY/93076Z/N/276d9N/276d9O/m/7d9C82ieP/q47/OYCdH7/twfE/D3DzyavtNrnHO5lNqcf//f//vbz+d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/YuNO/4/mOi/PXyr/SIKx///t02i/7r6Ry3919M/aum/vv5RS/8N9I9a+m+of9TSfyP9o5b+b9M/aum/sf5RS/+36x+19N9E/6il/zv0j1r6b6p/1NJ/M/2jlv6b6x+19N9C/6il/5b6Ry39t9I/aum/tf5RS/9t9I9a+m+rf9TSfzv9o6f3nwJmaBL9t9c/aln/O+gftfTfUf+opf9o/aOW/u/UP2rpv5P+UUv/nfWPWvrvon/U0n9X/aOW/rvpH7X0313/qKX/u/SPWvrvoX/U0n9P/aOW/nvpH7X0f7f+UUv/9+gftfTfW/+opf8++kct/ffVP2rpv5/+UUv//fWPWvofoH/U0v+9+kct/d+nf9TS/0D9o5b+B+kftfQ/WP+opf/79Y9a+h+if9TS/1D9o5b+H9A/aun/Qf2jlv4f0j9q6X+Y/lFL/8P1j1r6H6F/1NL/w/pHLf2P1D9q6X+U/lFL/6P1j1r6H6N/1NL/2Gf0n/a/Oqznq5b+H7H+o5b+x+kftfQ/Xv+opf8J+kct/T+qf9TS/2P6Ry39T9Q/aul/kv5RS/+P6x+19P+E/lFL/5P1j1r6f1L/qKX/KfpHLf0/pX/U0v/T+kct/U/VP2rpf5r+UUv/0/WPWvqfoX/U0v9M/aOW/mfpH7X0/4z+UUv/s/WPWvqfo3/U0v9c/aOW/ufpH7X0P1//qKX/Z/WPWvp/Tv+opf8F+kct/T+vf9TS/0L9o5b+X9A/aul/kf5RS/+L9Y9a+l+if9TS/1L9o5b+X9Q/aun/Jf2jlv6X6R+19P+y/lFL/8v1j1r6f0X/qKX/FfpHLf2v1D9q6X+V/lFL/6/qH7X0v1r/qKX/1/SPWvp/Xf+opf839I9a+n9T/6il/7f0j1r6f1v/qKX/d/SPWvpfo3/U0v9a/aOW/tfpH7X0v17/qKX/DfpHLf1v1D9q6X+T/lFL/5v1j1r636J/1NL/u/pHLf2/p3/U0v/7+kct/W/VP2rpf5v+UUv/2/WPWvrfoX/U0v8H+kct/X+of9TS/0f6Ry3979Q/aun/Y/2jlv536R+19P+J/lFL/5/qH7X0v1v/qKX/z/SPWvr/XP+opf89+kct/e/VP2rp/wv9n0jPv6X/ffpHLf1/qX/U0v9X+kct/X+tf9TS/zf6Ry39f6t/1NL/fv2jlv4P6B+19P+d/lFL/wf1j1r6/17/qKX/H/SPWvr/Uf+opf+f9I9a+v9Z/6il/1/0j1r6P6R/1NL/Yf2jlv5/1T9q6f83/aOW/o/oH7X0/7v+UUv/R/WPWvo/pn/U0v9x/aOW/k/oH5X0HzLQP2rpP0T/qKX/UP2jlv5T6R+19B+mf9TSf7j+UUv/EfpHLf2n1j9q6T+N/lFL/2n1j1r6T6d/1NJ/ev2jlv4z6B+19H+B/lFL/xn1j1r6z6R/1NJ/Zv2jlv4v1D9q6T+L/lFL/xfpH7X0f7H+UUv/WfWPWvrPpn/U0n92/aOW/nPoH7X0n1P/qKX/XPpHLf1fon/U0v+l+kct/efWP2rpP4/+UUv/l+kftfSfV/+opf/L9Y9a+s+nf9TSf379o5b+C+gftfRfUP+opf9C+kct/RfWP2rpv4j+UUv/V+gftfR/pf5RS/9F9Y9a+r9K/6il/2L6Ry39F9c/aum/hP5RS/8l9Y9a+i+lf9TSf2n9o5b+y+gftfRfVv+opf+r9Y9a+i+nf9TSf3n9o5b+K+gftfRfUf+opf9r9I9a+q+kf9TS/7X6Ry39X6d/1NJ/Zf2jlv6r6B+19F9V/6il/0j9o5b+q+kftfRfXf+opf8a+kct/V+vf9TSf5T+UUv/NfWPWvqvpX/U0n9t/aOW/m/QP2rp/0b9o5b+6+gftfR/k/5RS/836x+19H+L/lFL/7fqH7X0X1f/qKX/evpHLf3X1z9q6b+B/lFL/w31j1r6b6R/1NL/bfpHLf031j9q6f92/aOW/pvoH7X0f4f+UUv/TfWPWvpvpn/U0n9z/aOW/lvoH7X031L/qKX/VvpHLf231j9q6b+N/lFL/231j1r6b6d/1NJ/e/2jlv476B+19N9R/6il/2j9o5b+79Q/aum/k/5RS/+d9Y9a+u+if9TSf1f9o5b+u+kftfTfXf+opf+79I+m3P5DntZ/D/2jKbf/09f/nvpHLf330j9q6f9u/aOW/u/RP2rpv7f+UUv/ffSPWvrvq3/U0n8//aOW/vvrH7X0P0D/qKX/e/WPWvq/T/+opf+B+kct/Q/SP2rpf7D+UUv/9+sftfQ/RP+opf+hNf2fGOvA57Z1S/8P1PT/17T0/6D+UUv/D+kftfQ/TP+opf/h+kct/Y/QP2rp/2H9o5b+R+oftfQ/Sv+opf/R+kct/Y/RP2rpf6z+UUv/j+gftfQ/Tv+opf/x+kct/U/QP2rp/1H9o5b+H9M/aul/ov7RlNt/6FNvHXKS/tGU2//p6//j+kct/T+hf9TS/2T9o5b+n9Q/aul/iv5RS/9P6R+19P+0/lFL/1P1j1r6n6Z/1NL/dP2jlv5n6B+19D9T/6il/1n6Ry39P6N/1NL/bP2jlv7n6B+19D9X/6il/3n6Ry39z9c/aun/Wf2jlv6f0z9q6X+B/lFL/8/rH7X0v1D/qKX/F/SPWvpfpH/U0v9i/aOW/pfoH7X0v1T/qKX/F/WPWvp/6Tn0H/c/pzzxfzm855uW/pdZ/1FL/y/rH7X0v1z/qKX/V/SPWvpfoX/U0v9K/aOW/lfpH7X0/6r+UUv/q/WPWvp/Tf+opf/X9Y9a+n9D/6il/zf1j1r6f0v/qKX/t/WPWvp/R/+opf81+kct/a/VP2rpf53+UUv/6/WPWvrf0Nf/Of0ga0v/G/v6Pyct/W/SP2rpf7P+UUv/W/SPWvp/V/+opf/39I9a+n9f/6il/636Ry39b9M/aul/u/5RS/879I9a+v9A/6il/w/1j1r6/0j/qKX/nfpHLf1/rH/U0v8u/aOW/j/RP2rp/1P9o5b+d+sftfT/mf5RS/+f6x+19L9H/6il/736Ry39f6F/1NL/Pv2jlv6/1D9q6f8r/aOW/r/WP2rp/xv9o5b+v9U/aul/v/5RS/8H9I9a+v9O/6il/4P6Ry39f69/1NL/D/pHLf3/qH/U0v9P+kct/f+sf9TS/y/6Ry39H9I/aun/sP5RS/+/6h+19P+b/lFL/0f0j1r6/13/qKX/o/pHLf0f0z9q6f+4/lFL/yf0j0r6P3lR/2dq6T9E/6il/1D9o5b+U+kftfQfpn/U0n+4/lFL/xH6Ry39p9Y/auk/jf5RS/9p9Y9a+k+nf9TSf3r9o5b+M+gftfR/gf5RS/8Z9Y9a+s+kf9TSf2b9o5b+L9Q/auk/i/5RS/8X6R+19H+x/lFL/1n1j1r6z6Z/1NJ/dv2jlv5z6B+19J9T/6il/1z6Ry39X6J/1NL/pfpHLf3n1j9q6T+P/lFL/5fpH7X0n1f/qKX/y/WPWvrPp3/U0n9+/aOW/gvoH7X0X1D/qKX/QvpHLf0X1j9q6b+I/lFL/1foH7X0f6X+UUv/RfWPWvq/Sv+opf9i+kct/RfXP2rpv4T+UUv/JfWPWvovpX/U0n9p/aOW/svoH7X0X1b/qKX/q/WPWvovp3/U0n95/aOW/ivoH7X0X7G9/9B8c0v/17T3n4SW/ivpH7X0f63+UUv/1+kftfRfWf+opf8q+kct/VfVP2rpP1L/qKX/avpHLf1X1z9q6b+G/lFL/9frH7X0H6V/1NJ/Tf2jlv5r6R+19F9b/6il/xv0j1r6v1H/qKX/OvpHLf3fpH/U0v/N+kct/d+if9TS/636Ry3919U/aum/nv5RS//19Y9a+m+gf9TSf0P9o5b+G+kftfR/m/5RS/+N9Y9a+r9d/6ih//DBYOgm+kcN/cdcfIf+UUv/TfWPWvpvpn/U0n9z/aOW/lvoH7X031L/qKX/VvpHLf231j9q6b+N/lFL/231j6b0/iPGXd5O/2hK7z/+4vb6Ry39d9A/aum/o/5RS//R+kct/d+p/xjHT3xDS/+d9I9a+u+sf9TSfxf9o5b+u+ofjes/fNzVKbb/bvpHLet/d/2jlv7v0j9q6b+H/lFL/z31j1r676V/1NL/3fpHLf3fo3/U0n9v/aOW/vvoH7X031f/qKX/fvpHLf331z9q6X+A/lFL//fqH7X0f5/+UUv/A/WPWvofpH/U0v9g/aOW/u/XP2rpf4j+UUv/Q/WPWvp/QP+opf8H9Y9a+n9I/6il/2H6Ry39D9c/aul/hP5RS/8P6x+19D9S/6il/1H6Ry39j9Y/aul/jP5RS/9j9Y9a+n9E/6il/3H6Ry39j9c/aul/gv5RS/+P6h+19P+Y/lFL/xP1j1r6n6R/1NL/4/pHLf0/oX/U0v9k/aOW/p/UP2rpf4r+UUv/T+kftfT/tP5RS/9T9Y9a+p+mf9TS/3T9o5b+Z+gftfQ/U/+opf9Z+kct/T+jf9TS/2z9o5b+5+gftfQ/V/+opf95+kct/c/XP2rp/1n9o5b+n9M/aul/gf5RS//P6x9Nef2nnXDxqf0v1D+a8vrn9f8F/aOW/hfpH7X0v1j/qKX/JfpHLf0v1T9q6f9F/aOW/l/SP2rpf5n+UUv/L+sftfS/XP+opf9X9I9a+l+hf9TS/0r9o5b+V+kftfT/qv5RS/+r9Y9a+n9N/6il/9f1j1r6f0P/qKX/N/WPWvp/S/+opf+39Y9a+n9H/6il/zX6Ry39r9U/aul/nf5RS//r9Y9a+t+gf9TS/0b9o5b+N+kftfS/Wf+opf8t+kct/b+rf9TS/3v6Ry39v69/1NL/Vv2jlv636R+19L9d/6il/x36Ry39f6B/1NL/h/pHLf1/pH/U0v9O/aOW/j/WP2rpf5f+UUv/n+gftfT/qf5RS/+79Y9a+v9M/6il/8/1j1r636N/1NL/Xv2jlv6/0D9q6X+f/lFL/1/qH7X0/5X+UUv/X+sftfT/jf5RS//f6h+19L9f/6il/wP6Ry39f6d/1NL/Qf2jlv6/1z9q6f8H/aOW/n/UP2rp/yf9o5b+f9Y/aun/F/2jlv4P6R+19H9Y/6il/1/1j1r6/03/qKX/I/pHLf3/rn/U0v9R/aOW/o/pH7X0f1z/qKX/E/pHJf2nGugftfQfon/U0n+o/lFL/6n0j1r6D9M/auk/XP+opf8I/aOW/lPrH7X0n0b/qKX/tPpHLf2n0z9q6T+9/lFL/xn0j1r6v0D/qKX/jPpHLf1n0j9q6T+z/lFL/xfqH7X0n0X/qKX/i/SPWvq/WP+opf+s+kct/WfTP2rpP7v+UUv/OfSPWvrPqX/U0n8u/aOW/i/RP2rp/1L9o5b+c+sftfSfR/+opf/L9I9a+s+rf9TS/+X6Ry3959M/auk/v/5RS/8F9I9a+i+of9TSfyH9o5b+C+sftfRfRP+opf8r9I9a+r9S/6il/6L6Ry39X6V/1NJ/Mf2jlv6L6x+19F9C/6il/5L6Ry39lxrbf+rJNaznq5b+S1v/UUv/ZfSPWvovq3/U0v/V+kct/ZfTP2rpv7z+UUv/FfSPWvqvqH/U0v81+kct/VfSP2rp/1r9o5b+r9M/aum/sv5RS/9V9I9a+q+qf9TSf6T+UUv/1fSPWvqvrn/U0n8N/aOW/q/XP2rpP0r/qKX/mvpHLf3X0j9q6b+2/lFL/zfoH7X0f6P+UUv/dfSPWvq/Sf+opf+b9Y9a+r9F/6il/1v1j1r6r6t/1NJ/Pf2jlv7r6x+19N9A/6il/4b6Ry39N9I/aun/Nv2jlv4b6x+19H+7/lFL/030j1r6v0P/qKX/pvpHLf030z9q6b+5/lFL/y30j1r6b6l/1NJ/K/2jlv5b6x+19N9G/6il/7b6Ry39t9M/aum/vf5RS/8d9I9a+u+of9TSf7T+UUv/d+oftfTfSf+opf/O+kct/XfRP2rpv6v+UUv/3fSPWvrvrn/U0v9d+kct/ffQP2rpv6f+UUv/vfSPWvq/W/+opf979I9a+u+tf9TSfx/9o5b+++oftfTfT/+opf/++kct/Q/QP2rp/179o5b+79M/aul/oP5RS/+D9I9a+h+sf9TS//36Ry39D9E/aul/qP5RS/8P6B+19P+g/lFL/w/pH7X0P0z/qKX/4fpHE/VfdXKP5//bJPofoX/Usv4/rH/U0v9I/aOW/kfpH7X0P1r/qKX/MfpHLf2P1T9q6f8R/aOW/sfpH7X0P17/qKX/CfpHLf0/qn/U0v9j+kct/U/UP2rpf5L+UUv/j+sftfT/hP5RS/+T9Y9a+n9S/6il/yn6Ry39P6V/1NL/0/pHLf1P1T9q6X+a/lFL/9P1j1r6n6F/1NL/TP2jlv5n6R+19P+M/lFL/7P1j1r6n6N/1NL/XP2jlv7n6R+19D9f/6il/2f1j1r6f07/qKX/BfpHLf0/r3/U0v9C/aOW/l/QP2rpf5H+UUv/i/WPWvpfon/U0v9S/aOW/l/UP2rp/yX9o5b+l+kftfT/sv5RS//L9Y9a+n9F/6il/xX6Ry39r9Q/aul/lf5RS/+v6h+19L9a/6il/9f0j1r6f13/qKX/N/SPWvp/U/+opf+39I9a+n9b/6il/3f0j1r6X6N/1NL/Wv2jlv7X6f8MI4r6X69/1NL/Bv2jlv436h+19L9J/6il/836Ry39b9E/aun/Xf2jlv7f0z9q6f99/aOW/rfqH7X0v03/qKX/7fpHLf3v0D9q6f8D/aOW/j/UP2rp/yP9o5b+d+oftfT/sf5RS/+79I9a+v9E/6il/0/1j1r6361/1NL/Z/pHLf1/rn/U0v8e/aOW/vfqH7X0/4X+UUv/+/SPWvr/Uv+opf+v9I9a+v9a/6il/2/0j1r6/3Zyjed5rqX//dZ/1NL/Af2jlv6/0z9q6f+g/lFL/9/rH7X0/4P+UUv/P+oftfT/k/5RS/8/6x+19P+L/lFL/4f0j1r6P6x/1NL/r/pHLf3/pn/U0v8R/aOW/n/XP2rp/6j+UUv/x/SPWvo/rn/U0v8J/aOS/sMG+kct/YfoH7X0H6p/1NJ/Kv2jlv7D9I9a+g8fDKaeXEN6Pll6oust/UdY/1FL/6n1j1r6T6N/1NJ/Wv2jlv7T6R+19J9e/6il/wz6Ry39X6B/1NJ/Rv2jlv4z6R+19J9Z/6il/wv1j1r6z6J/1NL/RfpHLf1frH/U0n9W/aOW/rPpH7X0n13/qKX/HPpHLf3n1D9q6T+X/lFL/5foH7X0f6n+UUv/ufWf2JPT0dJ/Hv2jlv4v0z9q6T+v/lFL/5frH7X0n0//qKX//PpHLf0X0D9q6b+g/lFL/4X0j1r6L6x/1NJ/Ef2jlv6v0D9q6f9K/aOW/ovqH7X0f5X+UUv/xfSPWvovrn/U0n8J/aOW/kvqH7X0X0r/qKX/0vpHLf2X0T9q6b+s/lFL/1frH7X0X07/qKX/8vpHLf1X0D9q6b+i/lFL/9foH7X0X0n/qKX/a/WPWvq/Tv+opf/K+kct/VfRP2rpv6r+UUv/kfpHLf1X0z9q6b+6/lFL/zX0j1r6v17/qKX/KP2jlv5r6h+19F9L/6il/9r6Ry3936B/1NL/jfpHLf3X0T9q6f8m/aOW/m/WP2rp/xb9o5b+b9U/aum/rv5RS//19I9a+q+vf9TSfwP9o5b+G+oftfTfSP+opf/b9I9a+m+sf9TS/+36Ry39N9E/aun/Dv2jlv6b6h+19N9M/6il/+b6Ry39t9A/aum/pf5RS/+t9I9a+m+tf9TSfxv9o5b+2+oftfTfTv+opf/2+kct/XfQP2rpv6P+UUv/0fpHLf3fqX/U0n8n/aOW/jvrH7X030X/qKX/rvpHLf130z9q6b+7/lFL/3fpH7X030P/qKX/nvpHLf330j9q6f9u/aOW/u/RP2rpv7f+UUv/ffSPWvrvq3/U0n8//aOW/vvrH7X0P0D/qKX/e/WPWvq/T/+opf+B+kct/Q/SP2rpf7D+UUv/9+sftfQ/RP+opf+h+kct/T+gf9TS/4P6Ry39P6R/1NL/MP2jlv6HT6L/kPKdoqX/EdZ/1NL/w/pHLf2P1D9q6X+U/lFL/6P1j1r6H6N/1NL/WP2jlv4f0T9q6X+c/lFL/+P1j1r6n6B/1NL/o/pHLf0/pn/U0v9E/aOW/ifpH7X0/7j+UUv/T+gftfQ/Wf+opf8n9Y9a+p+if9TS/1P6Ry39P61/1NL/VP2jlv6n6R+19D9d/6il/xn6Ry39z9Q/aul/lv5RS//P6B+19D9b/6il/zn6Ry39z9U/aul/nv5RS//z9Y9a+n9W/6il/+f0j1r6X6B/1NL/8/pHLf0v1D9q6f8F/aOW/hfpH7X0v1j/qKX/JfpHLf0v1T9q6f9F/aOW/l/SP2rpf5n+UUv/L+sftfS/XP+opf9X9I9a+l+hf9TS/0r9o5b+V+kftfT/qv5RS/+r9Y9a+n9N/6il/9f1j1r6f0P/qKX/N/WPWvp/S/+opf+39Y9a+n9H/6il/zX6Ry39r9U/aul/nf5RS//r9Y9a+t+gf9TS/0b9o5b+N+kftfS/Wf+opf8t+kct/b+rf9TS/3v6Ry39v69/1NL/Vv2jlv636R+19L9d/6il/x36Ry39f6B/1NL/h/pHLf1/pH/U0v9O/aOW/j/WP2rpf5f+UUv/n+gftfT/qf5RS/+79Y9a+v9M/6il/8/1j1r636N/1NL/Xv2jlv6/0D9q6X+f/lFL/1/qH7X0/5X+UUv/X+sftfT/jf5RS//f6h+19L9f/6il/wP6J+e29P+d/lFL/wf1j1r6/17/qKX/H/SPWvr/Uf+opf+f9I9a+v9Z/6il/1/0j1r6P6R/1NL/Yf2jlv5/1T9q6f+31v6bPvvdLf0fae3/T7T0/7v+UUv/R/WPWvo/pn/U0v9x/aOW/k/oH5X0Hz7QP2rpP0T/qKX/UP2jlv5T6R+19B+mf9TSf7j+UUv/EfpHLf2n1j9q6T+N/lFL/2n1j1r6T6d/1NJ/ev2jlv4z6B+19H+B/lFL/xn1j1r6z6R/1NJ/Zv2jlv4v1D9q6T+L/lFL/xfpH7X0f7H+UUv/WfWPWvrPpn/U0n92/aOW/nPoH7X0n1P/qKX/XPpHLf1fon/U0v+l+kct/efWP2rpP4/+UUv/l+kftfSfV/+opf/L9Y9a+s+nf9TSf379o5b+C+gftfRfUP+opf9C+kct/RfWP2rpv4j+UUv/V+gftfR/pf5RS/9F9Y9a+r9K/6il/2L6Ry39F9c/aum/hP5RS/8l9Y9a+i+lf9TSf2n9o5b+y+gftfRfVv+opf+r9Y9a+i+nf9TSf3n9o5b+K+gftfRfUf+opf9r9I9a+q+kf9TS/7X6Ry39X6d/1NJ/Zf2jlv6r6B+19F9V/6il/0j9o5b+q+kftfRfXf+opf8a+kct/V+vf9TSf5T+UUv/NfWPWvqvpX/U0n9t/aOW/m/QP2rp/0b9o5b+6+gftfR/k/5RS/836x+19H+L/lFL/7fqH7X0X1f/aMrs/8RMg4n6r6d/NGX2H+up/dfXP2rpv4H+UUv/DfWPWvpvpH/U0v9t+kct/TfWP2rp/3b9o5b+m+gftfR/h/5RS/9N9Y9a+m+mf9TSf3P9o5b+W+gftfTfUv+opf9W+kct/bfWP2rpv43+UUv/bfWPWvpvp3/U0n97/aOW/jvoH7X031H/qKX/aP2jlv7v1D9q6b+T/lFL/531j1r676J/1NJ/V/2jlv676R+19N9d/6il/7v0j1r676F/1NJ/z8r+Q//pFi3996rs/8+19H+3/lFL//foH7X031v/qKX/PvpHLf331T9q6b+f/lFL//31j1r6H6B/1NL/vfpHLf3fp3/U0v9A/aOW/gfpH7X0P1j/qKX/+/WPWvofon/U0v9Q/aOW/h/QP2rp/0H9o5b+H9I/aul/mP5RS//D9Y9a+h+hf9TS/8P6Ry39j9Q/aul/lP5RS/+j9Y9a+h+jf9TS/1j9o5b+H9E/aul/nP5RS//j9Y9a+p+gf9TS/6P6Ry39P6Z/1NL/RP2jlv4n6R+19P+4/lFL/0/oH7X0P1n/qKX/J/WPWvqfon/U0v9T+kct/T+tf9TS/1T9o5b+p+kftfQ/Xf+opf8Z+kct/c/UP2rpf5b+UUv/z+gftfQ/W/+opf85+kct/c/VP2rpf57+UUv/8/WPWvp/Vv+opf/n9I9a+l+gf9TS//P6Ry39L9Q/aun/Bf2jlv4X6R+19L9Y/6il/yX6Ry39L9U/aun/Rf2jlv5f0j9q6X+Z/lFL/y/rH7X0v1z/qKX/V/SPWvpfoX/U0v9K/aOW/lfpH7X0/6r+UUv/q/WPWvp/Tf+opf/X9Y9a+n9D/6il/zf1j1r6f0v/qKX/t/WPWvp/R/+opf81+kct/a/VP2rpf53+UUv/6/WPWvrfoH/U0v9G/aOW/jfpH7X0v1n/qKX/LfpHLf2/G/uPXvqwof+9oT0ftfT/nvUftfT/vv5RS/9b9Y9a+t+mf9TS/3b9oym4/8xP7X+H/tEU3P9p6/8H+kct/X+of9TS/0f6Ry3979Q/aun/Y/2jlv536R+19P+J/lFL/5/qH7X0v1v/qKX/z/SPWvr/XP+opf89+kct/e/VP2rp/wv9o5b+9+kftfT/pf5RS/9f6R+19P+1/lFL/9/oH7X0/63+UUv/+/WPWvo/oH/U0v93+kct/R/UP2rp/3v9o5b+f9A/aun/R/2jlv5/0j9q6f9n/aOW/n/RP2rp/5D+UUv/h/WPWvr/Vf+opf/f9I9a+j+if9TS/+/6Ry39H9U/aun/mP5RS//H9Y9a+j+hf1TSf8RA/6il/xD9o5b+Q/WPWvpPpX/U0n+Y/lFL/+H6Ry39R+gftfSfWv+opf80+kct/afVP2rpP53+UUv/6fWPWvrPoH/U0v8F+kct/WfUP2rpP5P+UUv/mfWPWvq/UP+opf8s+kct/V+kf9TS/8X6Ry39Z9U/auk/m/5RS//Z9Y9a+s+hf9TSf079o5b+c+kftfR/if5RS/+X6h+19J9b/6il/zz6Ry39X6Z/1NJ/Xv2jlv4v1z9q6T+f/lFL//n1j1r6L6B/1NJ/Qf2jlv4L6R+19F9Y/6il/yL6Ry39X6F/1NL/lfpHLf0X1T9q6f8q/aOW/ovpH7X0X1z/qKX/EvpHLf2X1D9q6b+U/lFL/6X1j1r6L6N/1NJ/Wf2jlv6v1j9q6b+c/lFL/+X1j1r6r6B/1NJ/Rf2jlv6v0T9q6b+S/lFL/9fqH7X0f53+UUv/lfWPWvqvon/U0n9V/aOW/iP1j1r6r6Z/1NJ/df2jlv5r6B+19H+9/lFL/1H6Ry3919Q/aum/lv5RS/+19Y9a+r9B/6il/xv1j1r6r6N/1NL/TfpHLf3frH/U0v8t+kct/d+qf9TSf139o5b+6+kftfRfX/+opf8G+kct/TfUP2rpv5H+UUv/t+kftfTfWP+opf/b9Y9a+m+if9TS/x36Ry39N9U/aum/mf5RS//N9Y9a+m+hf9TSf0v9o5b+W+kftfTfWv+opf82+kct/bfVP2rpv53+UUv/7fWPWvrvoH/U0n9H/aMpuP9UT7l1xGj9oym4/9PW/zv1j1r676R/1NJ/Z/2jlv676B+19N9V/6il/276Ry39d9c/aun/Lv2jlv576B+19N9T/6il/176Ry39361/1NL/PfpHLf331j9q6b+P/lFL/331j1r676d/1NJ/f/2jlv4H6B+19H+v/lFL//fpH7X0P1D/qKX/QfpHLf0P1j9q6f9+/aOW/ofoH7X0P1T/qKX/B/SPWvp/UP+opf+H9I9a+h+mf9TS/3D9o5b+R+gftfT/sP5RS/8j9Y9a+h+lf9TS/2j9o5b+x+gftfQ/Vv+opf9H9I9a+h+nf9TS/3j9o5b+J+gftfT/qP5RS/+P6R+19D9R/6il/0n6Ry39P65/1NL/E/pHLf1P1j9q6f9J/aOW/qfoH7X0/5T+UUv/T+sftfQ/Vf+opf9p+kct/U/XP2rpf4b+UUv/M/WPWvqfpX/U0v8z+kct/c/WP2rpf47+UUv/c/WPWvqfp3/U0v98/aOW/p/VP2rp/zn9o5b+F+gftfT/vP5RS/8L9Y9a+n9B/6il/0X6Ry39L9Y/aul/if5RS/9L9Y9a+n9R/6il/5f0j1r6X6Z/1NL/y/pHLf0v1z9q6f8V/aOW/lfoH7X0v1L/qKX/VfpHLf2/qn/U0v9q/aOW/l/TP2rp/3X9o5b+39A/aun/Tf2jlv7f0j9q6f9t/aOW/t/RP2rpf43+UUv/a/WPWvpfp3/U0v96/aOW/jfoH7X0v1H/qKX/TfpHLf1v1j9q6X+L/lFL/+/qH7X0/57+UUv/7+sftfS/Vf+opf9t+kct/W/XP2rpf4f+UUv/H+gftfT/of5RS/8f6R+19L9T/6il/4/1j1r636V/1NL/J/pHLf1/qn/U0v9u/aOW/j/TP2rp/3P9o5b+9+gftfS/V/+opf8v9I9a+t+nf9TS/5f6Ry39f6V/1NL/1/pHLf1/o3/U0v+3+kct/e/XP2rp/4D+UUv/3+kftfR/UP+opf/v9Y9a+v9B/6il/x/1j1r6/0n/qKX/n/WPWvr/Rf+opf9D+kct/R/WP2rp/1f9o5b+f9M/aun/iP5RS/+/6x+19H9U/6il/2P6Ry39H9c/aun/hP5RSf+pB/pHLf2H6B+19B+qf9TSfyr9o5b+w/SPWvoP1z9q6T9C/6il/9T6Ry39p9E/auk/rf5RS//p9I9a+k+vf9TSfwb9o5b+L9A/auk/o/5RS/+Z9I9a+s+sf9TS/4X6Ry39Z9E/aun/Iv2jlv4v1j9q6T+r/lFL/9n0j1r6z65/1NJ/Dv2jlv5z6h+19J9L/6il/0v0j1r6v1T/qKX/3PpHLf3n0T9q6f8y/aOW/vPqH7X0f7n+UUv/+fSPWvrPr3/U0n8B/aOW/gvqH7X0X0j/qKX/wvpHLf0X0T9q6f8K/aOW/q/UP2rpv6j+UUv/V+kftfRfTP+opf/i+kct/ZfQP2rpv6T+UUv/pfSPWvovrX/U0n8Z/aOW/svqH7X0f7X+UUv/5fSPWvovr3/U0n8F/aOW/ivqH7X0f43+0ZTc/ym9p15J/2hK7v/U9f/a6v5DDprkPSX9X1fdf9Ja+q+sf9TSfxX9o5b+q+oftfQfqX/U0n81/aOW/qvrH7X0X0P/qKX/6/WPWvqP0j9q6b+m/lFL/7X0j1r6r61/1NL/DfpHLf3fqH/U0n8d/aOW/m/SP2rp/2b9o5b+b9E/aun/Vv2jlv7r6h+19F9P/6il//r6Ry39N9A/aum/of5RS/+N9I9a+r9N/6il/8b6Ry39365/1NJ/E/2jlv7v0D9q6b+p/lFL/830j1r6b65/1NJ/C/2jlv5b6h+19N9K/6il/9b6Ry39t9E/aum/rf5RS//t9I9a+m+vf9TSfwf9o5b+O+oftfQfrX/U0v+d+kct/XfSP2rpv7P+UUv/XfSPWvrvqn/U0n83/aOW/rvr/0zTjPtY0P9d+kct638P/aOW/nvqH7X030v/qKX/u/WPWvq/R/+opf/e+kct/ffRP2rpv6/+UUv//fSPWvrvr3/U0v8A/aOW/u/VP2rp/z79o5b+B+oftfQ/SP+opf/B+kct/d+vf9TS/xD9o5b+h+oftfT/gP5RS/8P6h+19P+Q/lFL/8P0j1r6H65/1NL/CP2jlv4f1j9q6X+k/lFL/6P0j1r6H61/1NL/GP2jlv7H6h+19P+I/lFL/+P0j1r6H69/1NL/BP2jlv4f1T9q6f8x/aOW/ifqH7X0P0n/qKX/x/WPWvp/Qv+opf/J+kct/T+pf9TS/xT9o5b+n9I/aun/af2jlv6n6h+19D9N/6il/+n6Ry39z9A/aul/pv5RS/+z9I9a+n9G/6il/9n6Ry39z9E/aul/rv5RS//z9I9a+p+vf9TS/7P6Ry39P6d/1NL/Av2jlv6f1z9q6X+h/lFL/y/oH7X0v0j/qKX/xfpHLf0v0T9q6X+p/lFL/y/qH7X0/5L+UUv/y/SPWvp/Wf+opf/l+kct/b+if9TS/wr9o5b+V+oftfS/Sv+opf9X9Y9a+l+tf9TS/2v6Ry39v65/1NL/G/pHLf2/qX/U0v9b+kct/b+tf9TS/zv6Ry39r9E/aul/rf5RS//r9I9a+l+vf9TS/wb9o5b+N+oftfS/Sf+opf/N+kct/W/RP2rp/139o5b+39M/aun/ff2jlv636h+19L9N/6il/+36Ry3979A/aun/A/2jlv4/fI79hzz6xJP+r4b3fNPS/0fWf9TS/079o5b+P9Y/aul/l/5RS/+f6B+19P+p/lFL/7v1j1r6/0z/qKX/z/WPWvrfo3/U0v9e/aOW/r/QP2rpf5/+UUv/X+oftfT/lf5RS/9f6x+19P+N/lFL/9/qH7X0v1//qKX/A/pHLf1/p3/U0v9B/aOW/r/XP2rp/wf9o5b+f9Q/aun/J/2jlv5/1j9q6f8X/aOW/g/pH7X0f1j/qKX/X/WPWvr/Tf+opf8j+kct/f+uf9TS/1H9o5b+j+kftfR/XP+opf8T+kcl/acZ6B+19B+if9TSf6j+UUv/qfSPWvoP0z9q6T9c/6il/wj9o5b+U+sftfSfRv+opf+0+kct/afTP2rpP73+UUv/GfSPWvq/QP+opf+M+kct/WfSP2rpP7P+UUv/F+oftfSfRf+opf+L9I9a+r9Y/6il/6z6Ry39Z9M/auk/u/5RS/859I9a+s+pf9TSfy79o5b+L9E/aun/Uv2jlv5z6x+19J9H/6il/8v0j1r6z6t/1NL/5fpHLf3n0z9q6T+//lFL/wX0j1r6L6h/1NJ/If2jlv4L6x+19F9E/6il/yv0j1r6v1L/qKX/ovpHLf1fpX/U0n8x/aOW/ovrH7X0X0L/qKX/kvpHLf2X0j9q6b+0/lFL/2X0j1r6L6t/1NL/1fpHLf2X0z9q6b+8/lFL/xX0j1r6r6h/1NL/NfpHLf1X0j9q6f9a/aOW/q/TP2rpv7L+UUv/VfSPWvqvqn/U0n+k/lFL/9X0j1r6r65/1NJ/Df2jlv6v1z9q6T9K/6il/5r6Ry3919I/aum/tv5RS/836B+19H+j/lFL/3X0j1r6v0n/qKX/m/WPWvq/Rf+opf9b9Y9a+q+rf9TSfz39o5b+6+sftfTfQP+opf+G+kct/TfSP2rp/zb9o5b+G+sftfR/u/5RS/9N9I9a+r9D/6il/6b6Ry39N9M/aum/uf5RS/8t9I9a+m+pf9TSfyv9o5b+W+sftfTfRv+opf+2+kct/bfTP2rpv73+UUv/HfSPWvrvqH/U0n+0/lFL/3fqH7X030n/qKX/zvpHLf130T9q6b+r/lFL/930j1r6765/1NL/XfpHLf330D9q6b+n/lFL/730j1r6v1v/qKX/e/SPWvrvrX/U0n8f/aOW/vvqH7X030//qKX//vpHLf0P0D9q6f9e/aOW/u/TP2rpf6D+UUv/g/SPWvofrH/U0v/9+kct/Q/RP2rpf6j+UUv/D+gftfT/oP5RS/8P6R+19D9M/6il/+H6Ry39j9A/aun/Yf2jlv5H6h+19D9K/6il/9H6Ry39j9E/aul/rP5RS/+P6B+19D9O/6il//H6Ry39T9A/aun/Uf2jlv4f0z9q6X+i/lFD/xsGg2lO0j9q6D9m/X9c/6il/yf0j1r6n6x/1NL/k/pHLf1P0T9q6f8p/aOW/p/WP2rpf6r+UUv/0/SPWvqfrn/U0v8M/aOW/mfqH7X0P0v/qKX/Z/SPWvqfrX/U0v8c/aOW/ufqH7X0P0//qKX/+fpHLf0/q3/U0v9z+kct/S/QP2rp/3n9o5b+F+oftfT/gv5RS/+L9I9a+l+sf9TS/xL9o5b+l+oftfT/ov5RS/8v6R+19L9M/6il/5f1j1r6X65/1NL/K/pHLf2v0D9q6X+l/lFL/6v0j1r6f1X/qKX/1fpHLf2/pn/U0v/r+kct/b+hf9TS/5v6Ry39v6V/1NL/2/pHLf2/o3/U0v8a/aOW/tfqH7X0v07/qKX/9fpHLf1v0D9q6X+j/lFL/5v0j1r636x/1NL/Fv2jlv7f1T9q6f89/aOW/t/XP2rpf6v+UUv/2/SPWvrfrn/U0v8O/aOW/j/QP2rp/8NJ9R/6XxrX81RL/x9Z/1FL/zv1j1r6/1j/qKX/XfpHLf1/on/U0v+n+kct/e/WP2rp/zP9o5b+P9c/aul/j/5RS/979Y9a+v9C/6il/336Ry39f6l/1NL/V/pHLf1/rX/U0v83+kct/X+rf9TS/379o5b+D+gftfT/nf5RS/8H9Y9a+v9e/6il/x/0j1r6/1H/qKX/n/SPWvr/Wf+opf9f9I9a+j+kf9TS/2H9o5b+f9U/aun/N/2jlv6P6B+19P+7/lFL/0f1j1r6P6Z/1NL/cf2jlv5P6B+V9J92oH/U0n+I/lFL/6H6Ry39p9I/auk/TP+opf9w/aOW/iP0j1r6T61/1NJ/Gv2jlv7T6h+19J9O/6il//T6Ry39Z9A/aun/Av2jlv4z6h+19J9J/6il/8z6Ry39X6h/1NJ/Fv2jlv4v0j9q6f9i/aOW/rPqH7X0n03/qKX/7PpHLf3n0D9q6T+n/lFL/7n0j1r6v0T/qKX/S/WPWvrPrX/U0n8e/aOW/i/TP2rpP6/+UUv/l+sftfSfT/+opf/8+kct/RfQP2rpv6D+UUv/hfSPWvovrH/U0n8R/aOW/q/QP2rp/0r9o5b+i+oftfR/lf5RS//F9I9a+i+uf9TSfwn9oymuPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPw/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAAQkAAACAoP+v2xEoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3BQAAP//KTc12w==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000380), 0xfffffe8e)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xfffffffffffffff1, 0x2})

2.238516831s ago: executing program 9 (id=8200):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x80002, 0x0)
inotify_init1(0x800)
r0 = syz_io_uring_setup(0x3d, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x50}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4106, 0x100a}, {0x0}], 0x2, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x7211, 0x3a1a, 0x1, 0x0, 0x0)

2.153219927s ago: executing program 7 (id=8201):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r0, 0x0, 0x0, 0x2004c080, 0x0, 0x0)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xc4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp6\x00')
preadv(r2, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/253, 0xfd}], 0x1, 0xffff8001, 0xfffffffd)

1.926325817s ago: executing program 5 (id=8202):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe)
listen(r0, 0x0)
accept4(r0, 0x0, 0x0, 0x80800)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x9)

1.769345365s ago: executing program 1 (id=8203):
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}], 0x20}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x40, 0x7, 0x97be, 0x7e06, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local}}}})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248)

1.34123166s ago: executing program 0 (id=8204):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x8, 0x1, 0x8, 0x0, 0xffffffffffffffff, 0x9}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc)

1.280440497s ago: executing program 1 (id=8205):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

1.279362525s ago: executing program 9 (id=8206):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000895000/0x2000)=nil, 0x800000})

1.206615724s ago: executing program 7 (id=8207):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000076c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a)

939.10101ms ago: executing program 1 (id=8208):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000)

710.153598ms ago: executing program 5 (id=8209):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff}, 0x800)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
clock_adjtime(0x0, &(0x7f0000000280)={0xc979, 0x1, 0xbf, 0x8, 0x8, 0x1, 0x0, 0x4, 0xf27, 0x80000000, 0x6, 0x3ff, 0x8a8, 0x6, 0x5, 0x413, 0x69, 0x2, 0x6, 0x100000006, 0x10000, 0x168, 0x2cbf, 0x7, 0xe, 0x5})

696.085064ms ago: executing program 0 (id=8210):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

409.476411ms ago: executing program 0 (id=8211):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0x54}], 0x2}], 0x1, 0x40800)
recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x2f}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2, 0x0, 0xff8d}, 0x10150)

326.246963ms ago: executing program 9 (id=8212):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0xfffffffd, 0x4)
sendto$inet(r0, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x2042, 0x0, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))

153.94163ms ago: executing program 1 (id=8213):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x439, 0x0, 0x40000000, {0x0, 0x0, 0xe403, r2, 0x24092}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x200080d0)

132.748145ms ago: executing program 0 (id=8214):
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$packet(0x11, 0x2, 0x300)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x3}}, 0x20)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

0s ago: executing program 9 (id=8215):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x18)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x62000, 0xc1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc"], 0x44}, 0x1, 0x0, 0x0, 0x6cb3fe8b19b50fba}, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0089364, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

t_from_fork+0x72b/0xd50
[ 1411.648630][T26780]  ? __pfx_ret_from_fork+0x10/0x10
[ 1411.648677][T26780]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1411.648723][T26780]  ? rcu_is_watching+0x12/0xc0
[ 1411.648775][T26780]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1411.648822][T26780]  ? __switch_to+0x800/0x10f0
[ 1411.648880][T26780]  ? __switch_to_asm+0x39/0x70
[ 1411.648934][T26780]  ? __pfx_kthread+0x10/0x10
[ 1411.648995][T26780]  ret_from_fork_asm+0x1a/0x30
[ 1411.649074][T26780]  </TASK>
[ 1411.649089][T26780] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[ 1412.088588][T29365] loop7: detected capacity change from 0 to 2048
[ 1412.245629][   T29] loop6: lost filesystem error report for type 5 error -108
[ 1412.584580][T29365] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[ 1412.604207][T29365] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1412.609837][T16338] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1413.899614][   T29] usb 9-1: new full-speed USB device number 17 using dummy_hcd
[ 1414.951414][T29390] loop6: detected capacity change from 0 to 32768
[ 1415.145890][T29390] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.7437 (29390)
[ 1415.172508][T29390] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1415.227638][T29390] BTRFS info (device loop6): using crc32c checksum algorithm
[ 1415.352099][T29414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7446'.
[ 1415.432017][   T29] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1416.089568][   T29] usb 9-1: unable to read config index 0 descriptor/start: -71
[ 1416.097712][   T29] usb 9-1: can't read configurations, error -71
[ 1416.266939][T29390] BTRFS info (device loop6): enabling ssd optimizations
[ 1416.273926][T29390] BTRFS info (device loop6): turning on flush-on-commit
[ 1416.356763][T29390] BTRFS info (device loop6): enabling free space tree
[ 1416.363612][T29390] BTRFS info (device loop6): enabling auto defrag
[ 1416.364568][ T5785] kernel read not supported for file /video9 (pid: 5785 comm: kworker/0:7)
[ 1416.370160][T29390] BTRFS info (device loop6): use lzo compression, level 1
[ 1416.385829][T29390] BTRFS info (device loop6): max_inline set to 4096
[ 1416.641173][  T802] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[ 1416.922173][T22565] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1417.339046][T29468] loop9: detected capacity change from 0 to 2640
[ 1417.430384][T18388] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1417.443921][T29469] Buffer I/O error on dev loop9, logical block 0, lost async page write
[ 1417.453055][T18388] Buffer I/O error on dev loop9, logical block 3, async page read
[ 1417.467910][T29469] Buffer I/O error on dev loop9, logical block 0, lost async page write
[ 1417.476851][T29469] Buffer I/O error on dev loop9, logical block 1, lost async page write
[ 1417.485343][T29469] Buffer I/O error on dev loop9, logical block 2, lost async page write
[ 1417.493834][T29469] Buffer I/O error on dev loop9, logical block 3, lost async page write
[ 1417.502299][T29469] Buffer I/O error on dev loop9, logical block 4, lost async page write
[ 1417.558838][T29469] Buffer I/O error on dev loop9, logical block 5, lost async page write
[ 1417.567327][T29469] Buffer I/O error on dev loop9, logical block 6, lost async page write
[ 1417.771684][T29468] ldm_validate_partition_table(): Disk read failed.
[ 1417.778760][T29468] Dev loop9: unable to read RDB block 0
[ 1417.876502][T29468]  loop9: unable to read partition table
[ 1417.882983][T29468] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[ 1418.001814][ T4986] ldm_validate_partition_table(): Disk read failed.
[ 1418.009024][ T4986] Dev loop9: unable to read RDB block 0
[ 1418.015130][ T4986]  loop9: unable to read partition table
[ 1418.231913][  T802] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[ 1418.240375][  T802] usb 2-1: config 0 has no interface number 0
[ 1418.246484][  T802] usb 2-1: config 0 interface 64 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1418.257563][  T802] usb 2-1: config 0 interface 64 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 64
[ 1418.268373][  T802] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1418.369306][  T802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1418.384284][  T802] usb 2-1: config 0 descriptor??
[ 1418.460329][T29482] loop6: detected capacity change from 0 to 1024
[ 1418.534145][T29443] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1418.592287][T29482] EXT4-fs: Ignoring removed bh option
[ 1418.651980][  T802] iowarrior 2-1:0.64: IOWarrior product=0x1512, serial= interface=64 now attached to iowarrior0
[ 1419.231350][T29482] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1419.342061][ T5757] usb 2-1: USB disconnect, device number 43
[ 1419.653583][T29499] loop5: detected capacity change from 0 to 4096
[ 1419.794084][T29499] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1419.823140][T22565] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1419.927258][   T30] audit: type=1800 audit(1784038137.651:351): pid=29499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7470" name="file1" dev="loop5" ino=15 res=0 errno=0
[ 1420.144512][T18854] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 1420.695433][T16338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1420.988976][T18854] usb 3-1: Using ep0 maxpacket: 16
[ 1421.317951][T27752] hid-generic 0000:0000:0000.004F: unknown main item tag 0x0
[ 1421.327540][T27752] hid-generic 0000:0000:0000.004F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1421.805858][T18854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1421.816778][T18854] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1421.829591][T18854] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1421.838670][T18854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1421.881415][T18854] usb 3-1: config 0 descriptor??
[ 1422.434656][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[ 1422.441002][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[ 1422.447820][ T1312] aoe: packet could not be sent on lowpan0.  consider increasing tx_queue_len
[ 1422.572370][T29553] binder: 29550:29553 ioctl c0306201 2000000003c0 returned -14
[ 1423.021962][T18854] HID 045e:07da: Invalid code 65791 type 1
[ 1423.036992][T18854] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0050/input/input69
[ 1423.051669][T27752] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 1423.064224][T18854] microsoft 0003:045E:07DA.0050: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[ 1423.147646][  T802] usb 8-1: new high-speed USB device number 55 using dummy_hcd
[ 1423.155543][ T5785] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 1423.796422][T27752] usb 6-1: Using ep0 maxpacket: 32
[ 1423.928123][ T5785] usb 9-1: Using ep0 maxpacket: 8
[ 1423.942415][ T5757] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[ 1424.159765][   T29] usb 3-1: USB disconnect, device number 24
[ 1424.375553][T29565] loop6: detected capacity change from 0 to 1024
[ 1424.383220][T29565] EXT4-fs: Ignoring removed nobh option
[ 1424.388860][T29565] EXT4-fs: Ignoring removed nobh option
[ 1424.394456][T29565] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1424.579889][T27752] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1424.591422][T27752] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1424.602295][T27752] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1424.612031][T27752] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[ 1424.623077][T27752] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[ 1424.672094][T29565] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8042c098, mo2=0002]
[ 1424.721420][ T5785] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 1424.729648][ T5785] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1424.739391][ T5785] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1424.749134][ T5785] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1424.759053][ T5785] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1424.772036][ T5785] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1424.781166][ T5785] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1424.791098][  T802] usb 8-1: config 220 has an invalid interface number: 76 but max is 2
[ 1424.799363][  T802] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1424.809620][  T802] usb 8-1: config 220 has no interface number 2
[ 1424.852970][  T802] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1424.866132][  T802] usb 8-1: config 220 interface 0 has no altsetting 0
[ 1424.868036][T29565] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1424.872906][  T802] usb 8-1: config 220 interface 76 has no altsetting 0
[ 1424.898270][  T802] usb 8-1: config 220 interface 1 has no altsetting 0
[ 1424.982233][T29565] EXT4-fs (loop6): shut down requested (1)
[ 1425.038677][T22565] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1425.171110][T29574] input: syz0 as /devices/virtual/input/input70
[ 1425.531505][ T5785] usb 9-1: usb_control_msg returned -32
[ 1425.537136][ T5785] usbtmc 9-1:16.0: can't read capabilities
[ 1425.562048][ T5757] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1425.569645][ T5757] usb 2-1: can't read configurations, error -71
[ 1425.821474][T27752] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1425.830579][T27752] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1425.838574][T27752] usb 6-1: Product: syz
[ 1425.842720][T27752] usb 6-1: Manufacturer: syz
[ 1425.983101][T27752] usb 6-1: config 0 descriptor??
[ 1426.080531][T27752] usb 6-1: can't set config #0, error -71
[ 1426.118685][T27752] usb 6-1: USB disconnect, device number 46
[ 1426.213725][  T802] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1426.222814][  T802] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1426.230810][  T802] usb 8-1: Product: syz
[ 1426.234977][  T802] usb 8-1: Manufacturer: syz
[ 1426.349240][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880528c1400: rx timeout, send abort
[ 1426.358644][  T802] usb 8-1: can't set config #220, error -71
[ 1426.364796][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880528c1400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1426.430062][  T802] usb 8-1: USB disconnect, device number 55
[ 1426.684230][T29596] loop1: detected capacity change from 0 to 32768
[ 1426.696504][T29596] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7508 (29596)
[ 1426.813263][T29596] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1426.823399][T29596] BTRFS info (device loop1): using sha256 checksum algorithm
[ 1426.940636][T29606] loop2: detected capacity change from 0 to 1024
[ 1427.131037][T29615] netlink: 'syz.5.7514': attribute type 5 has an invalid length.
[ 1427.455223][T18854] Bluetooth: hci6: Opcode 0x0c1a failed: -110
[ 1427.461374][T18854] Bluetooth: hci6: Error when powering off device on rfkill (-110)
[ 1427.468217][T29603] ceph: No mds server is up or the cluster is laggy
[ 1427.493919][T24344] Bluetooth: hci6: command 0x0405 tx timeout
[ 1427.599210][T29606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1427.611856][T29606] ext4 filesystem being mounted at /718/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1427.728849][T29615] netlink: 'syz.5.7514': attribute type 5 has an invalid length.
[ 1427.812748][T29596] BTRFS info (device loop1): enabling ssd optimizations
[ 1427.819735][T29596] BTRFS info (device loop1): turning on sync discard
[ 1427.826423][T29596] BTRFS info (device loop1): enabling free space tree
[ 1427.833194][T29596] BTRFS info (device loop1): use zlib compression, level 3
[ 1427.898918][ T5606] usb 9-1: USB disconnect, device number 19
[ 1428.040488][   T30] audit: type=1804 audit(1784038145.671:352): pid=29606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7512" name="/newroot/718/file1/file1" dev="loop2" ino=15 res=1 errno=0
[ 1428.296517][   T30] audit: type=1800 audit(1784038146.021:353): pid=29596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7508" name="file1" dev="loop1" ino=260 res=0 errno=0
[ 1428.753505][T16079] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1429.174377][ T5628] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1429.848941][T29660] loop7: detected capacity change from 0 to 512
[ 1429.955712][T29660] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1429.965740][T29660] EXT4-fs (loop7): bad geometry: first data block is 0 with a 1k block and cluster size
[ 1430.576470][T24344] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1430.591637][T18854] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 1430.597730][T18854] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[ 1431.072540][T29676] ªªªªªª: renamed from vlan0 (while UP)
[ 1434.086538][ T5774] usb 9-1: new full-speed USB device number 20 using dummy_hcd
[ 1434.705536][T29773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7559'.
[ 1435.074115][T24344] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1435.172923][T29778] loop7: detected capacity change from 0 to 32768
[ 1435.571540][T29778] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1435.751504][T29778] XFS (loop7): Ending clean mount
[ 1435.824905][ T5774] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1435.833551][ T5774] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1435.843714][ T5774] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1435.852697][ T5774] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64
[ 1436.010014][T29793] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[ 1436.648978][T29806] loop8: detected capacity change from 0 to 512
[ 1436.668942][ T6918] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1436.698971][T29806] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a857e02c, mo2=0102]
[ 1436.707029][T29806] System zones: 1-12
[ 1436.760994][ T5774] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1436.770085][ T5774] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1436.800310][T29806] EXT4-fs error (device loop8): ext4_free_branches:1020: inode #11: comm syz.8.7569: invalid indirect mapped block 8 (level 2)
[ 1436.813478][T29806] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1436.848770][T29806] EXT4-fs (loop8): Remounting filesystem read-only
[ 1436.907188][    C0] EXT4-fs (loop8): error count since last fsck: 1
[ 1436.907226][    C0] EXT4-fs (loop8): initial error at time 1784038154: ext4_free_branches:1020: inode 11
[ 1436.907285][    C0] EXT4-fs (loop8): last error at time 1784038154: ext4_free_branches:1020: inode 11
[ 1436.933162][ T5774] usb 9-1: can't set config #1, error -71
[ 1436.943343][ T5774] usb 9-1: USB disconnect, device number 20
[ 1437.055374][T29806] EXT4-fs (loop8): 1 truncate cleaned up
[ 1437.069499][T29806] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1438.354366][   T29] usb 8-1: new high-speed USB device number 56 using dummy_hcd
[ 1438.495339][T27351] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1438.776884][T29828] netlink: 'syz.6.7582': attribute type 4 has an invalid length.
[ 1438.784650][T29828] netlink: 17 bytes leftover after parsing attributes in process `syz.6.7582'.
[ 1438.915730][T29834] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.7582'.
[ 1439.630502][   T29] usb 8-1: config 0 has an invalid interface number: 50 but max is 0
[ 1439.638654][   T29] usb 8-1: config 0 has no interface number 0
[ 1439.644780][   T29] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1439.912764][T29853] loop2: detected capacity change from 0 to 128
[ 1440.017143][T29853] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1440.029553][T29853] ext4 filesystem being mounted at /736/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1440.254614][T16079] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1440.547218][   T29] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1440.556300][   T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1440.564301][   T29] usb 8-1: Product: syz
[ 1440.568483][   T29] usb 8-1: Manufacturer: syz
[ 1440.574175][   T29] usb 8-1: SerialNumber: syz
[ 1440.588207][   T29] usb 8-1: config 0 descriptor??
[ 1440.797175][   T29] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0
[ 1440.920382][   T29] usb 8-1: USB disconnect, device number 56
[ 1441.045796][   T29] yurex 8-1:0.50: USB YUREX #0 now disconnected
[ 1441.358893][T29748] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1442.001432][T29885] 9pnet: p9_errstr2errno: server reported unknown error p
[ 1442.227246][T29748] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1442.493184][T29705] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1442.557258][T29705] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1442.581953][T29705] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1442.596219][T29705] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1442.610010][T29705] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1442.761367][T24344] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1442.842805][T24344] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1442.881672][T24344] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1442.901279][T24344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1442.910005][T24344] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1443.427945][T29910] loop5: detected capacity change from 0 to 40427
[ 1443.479356][T29910] F2FS-fs (loop5): Image doesn't support compression
[ 1443.486081][T29910] F2FS-fs (loop5): build fault injection rate: 690
[ 1443.493702][T29910] F2FS-fs (loop5): invalid crc value
[ 1443.799168][T29910] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1443.824512][T29910] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1443.928500][   T30] audit: type=1800 audit(1784038161.641:354): pid=29910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7613" name="file1" dev="loop5" ino=10 res=0 errno=0
[ 1444.218626][T29748] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1444.334159][T16338] syz-executor: attempt to access beyond end of device
[ 1444.334159][T16338] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1444.351336][T16338] CPU: 1 UID: 0 PID: 16338 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1444.351393][T16338] Tainted: [L]=SOFTLOCKUP
[ 1444.351407][T16338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[ 1444.351431][T16338] Call Trace:
[ 1444.351444][T16338]  <TASK>
[ 1444.351458][T16338]  dump_stack_lvl+0x100/0x190
[ 1444.351508][T16338]  f2fs_stop_checkpoint+0x5e6/0xb30
[ 1444.351567][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.351615][T16338]  ? errseq_set+0xe3/0x150
[ 1444.351667][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.351721][T16338]  f2fs_write_end_bio+0xf53/0x1340
[ 1444.351786][T16338]  ? __pfx_f2fs_write_end_bio+0x10/0x10
[ 1444.351852][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.351908][T16338]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1444.351968][T16338]  bio_endio+0x778/0x8e0
[ 1444.352010][T16338]  submit_bio_noacct+0x64c/0x1ff0
[ 1444.352075][T16338]  f2fs_submit_write_bio+0x133/0x330
[ 1444.352127][T16338]  __submit_merged_bio+0x330/0x7b0
[ 1444.352190][T16338]  ? rcu_is_watching+0x12/0xc0
[ 1444.352243][T16338]  __submit_merged_write_cond+0x3fe/0x510
[ 1444.352309][T16338]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1444.352381][T16338]  ? __pfx___might_resched+0x10/0x10
[ 1444.352418][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.352461][T16338]  ? folio_clear_dirty_for_io+0x178/0x960
[ 1444.352523][T16338]  f2fs_write_cache_pages+0x20e9/0x2630
[ 1444.352583][T16338]  ? __bfs+0xef/0x2a0
[ 1444.352637][T16338]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[ 1444.352678][T16338]  ? is_bpf_text_address+0x8a/0x1a0
[ 1444.352717][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.352763][T16338]  ? __kasan_check_byte+0x13/0x50
[ 1444.352825][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.352870][T16338]  ? unwind_next_frame+0x3be/0x2090
[ 1444.352922][T16338]  ? rcu_is_watching+0x12/0xc0
[ 1444.352968][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.353014][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.353056][T16338]  ? __kasan_check_byte+0x13/0x50
[ 1444.353115][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.353180][T16338]  ? is_bpf_text_address+0x94/0x1a0
[ 1444.353214][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.353258][T16338]  ? kernel_text_address+0x8d/0x100
[ 1444.353382][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.353427][T16338]  ? check_prev_add+0x354/0xe60
[ 1444.353463][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.353509][T16338]  ? rcu_is_watching+0x12/0xc0
[ 1444.353564][T16338]  f2fs_write_data_pages+0x799/0x16d0
[ 1444.353620][T16338]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1444.353669][T16338]  ? do_writepages+0x4b5/0x600
[ 1444.353725][T16338]  ? do_writepages+0x4b5/0x600
[ 1444.353779][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.353829][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.353874][T16338]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1444.353921][T16338]  do_writepages+0x278/0x600
[ 1444.353983][T16338]  ? __pfx_do_writepages+0x10/0x10
[ 1444.354041][T16338]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1444.354087][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.354130][T16338]  ? _raw_spin_unlock+0x28/0x50
[ 1444.354193][T16338]  filemap_writeback+0x22d/0x2e0
[ 1444.354253][T16338]  ? __pfx_filemap_writeback+0x10/0x10
[ 1444.354307][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.354401][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.354444][T16338]  ? find_held_lock+0x2b/0x80
[ 1444.354493][T16338]  ? f2fs_sync_dirty_inodes+0x3a7/0x970
[ 1444.354534][T16338]  ? f2fs_sync_dirty_inodes+0x3a7/0x970
[ 1444.354573][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.354628][T16338]  f2fs_sync_dirty_inodes+0x46a/0x970
[ 1444.354687][T16338]  block_operations+0x2a6/0xfc0
[ 1444.354738][T16338]  ? __pfx_block_operations+0x10/0x10
[ 1444.354829][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.354876][T16338]  ? ktime_get+0x22c/0x320
[ 1444.354912][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.354955][T16338]  ? rcu_is_watching+0x12/0xc0
[ 1444.355009][T16338]  f2fs_write_checkpoint+0x58b/0x53d0
[ 1444.355082][T16338]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1444.355135][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.355184][T16338]  ? rcu_is_watching+0x12/0xc0
[ 1444.355231][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.355274][T16338]  ? kthread_stop+0x280/0x630
[ 1444.355330][T16338]  kill_f2fs_super+0x3f1/0x4a0
[ 1444.355370][T16338]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1444.355430][T16338]  ? lockdep_hardirqs_on+0x78/0x100
[ 1444.355489][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.355533][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.355591][T16338]  deactivate_locked_super+0xc1/0x1b0
[ 1444.355633][T16338]  deactivate_super+0xe7/0x110
[ 1444.355674][T16338]  cleanup_mnt+0x21f/0x450
[ 1444.355724][T16338]  task_work_run+0x150/0x240
[ 1444.355783][T16338]  ? __pfx_task_work_run+0x10/0x10
[ 1444.355844][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.355896][T16338]  exit_to_user_mode_loop+0x1d8/0x6f0
[ 1444.355936][T16338]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1444.355979][T16338]  ? rcu_is_watching+0x12/0xc0
[ 1444.356031][T16338]  do_syscall_64+0x666/0x870
[ 1444.356071][T16338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1444.356108][T16338] RIP: 0033:0x7ffbaaf9f097
[ 1444.356137][T16338] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1444.356177][T16338] RSP: 002b:00007ffcdf74b628 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1444.356211][T16338] RAX: 0000000000000000 RBX: 00007ffbab0332ca RCX: 00007ffbaaf9f097
[ 1444.356234][T16338] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdf74b6e0
[ 1444.356257][T16338] RBP: 00007ffcdf74b6e0 R08: 00007ffcdf74c6e0 R09: 00000000ffffffff
[ 1444.356281][T16338] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdf74c770
[ 1444.356304][T16338] R13: 00007ffbab0332ca R14: 000000000016091b R15: 00007ffcdf74c7b0
[ 1444.356351][T16338]  </TASK>
[ 1444.356376][T16338] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[ 1445.262143][T29930] loop2: detected capacity change from 0 to 8192
[ 1445.272113][T29930] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1445.413041][T29705] Bluetooth: hci0: command tx timeout
[ 1445.916360][T29944] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1445.934174][T29944] bond2: (slave lo): Enslaving as an active interface with an up link
[ 1445.944934][T29944] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 1446.491280][T29958] loop7: detected capacity change from 0 to 2048
[ 1446.602124][T29962] loop6: detected capacity change from 0 to 256
[ 1446.609950][T29962] exfat: Deprecated parameter 'namecase'
[ 1446.624085][T29962] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[ 1446.700593][T29961] loop1: detected capacity change from 0 to 1024
[ 1446.738208][T29748] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1446.859151][   T30] audit: type=1800 audit(1784038164.571:355): pid=29961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7630" name=0A7E0C7DA330F643194C1893FCD6489FAC605EEAD61B53DFF18CAF526ECCCC9BBD9146BC3C3BB67677695E6FDDAAB081786E9084014E60F5C03AE5A9087726B05E17402CD2FBB80D773B8A41470B1F901A8C2B2D57450181F4FC5BC53C7CB3DC032B84567492607CB08832ECA9F79DA9210D197863E5DB5A74A9823DC0CC8BD9F3A9B6FF5A7D15D4747A9B26E088F4FAD96D81CD1214226B1C4585D418D593220FCBB9AD949266CC48163E3498B46EBCDF7B2B5ECFE67539A61ED9E39B02D5B35AC0D0E7FA83 dev="loop1" ino=25 res=0 errno=0
[ 1446.990563][T29958] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1447.002767][T29958] ext4 filesystem being mounted at /1223/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1447.036455][   T30] audit: type=1804 audit(1784038164.691:356): pid=29961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7630" name=2F6E6577726F6F742F313332362F66696C65302F0A7E0C7DA330F643194C1893FCD6489FAC605EEAD61B53DFF18CAF526ECCCC9BBD9146BC3C3BB67677695E6FDDAAB081786E9084014E60F5C03AE5A9087726B05E17402CD2FBB80D773B8A41470B1F901A8C2B2D57450181F4FC5BC53C7CB3DC032B84567492607CB08832ECA9F79DA9210D197863E5DB5A74A9823DC0CC8BD9F3A9B6FF5A7D15D4747A9B26E088F4FAD96D81CD1214226B1C4585D418D593220FCBB9AD949266CC48163E3498B46EBCDF7B2B5ECFE67539A61ED9E39B02D5B35AC0D0E7FA83 dev="loop1" ino=25 res=1 errno=0
[ 1447.110982][T29958] fs-verity (loop7, inode 13): ext4_end_enable_verity() failed with err -28
[ 1447.180665][ T6918] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1447.477303][T29705] Bluetooth: hci0: command tx timeout
[ 1447.538837][T29975] Bluetooth: MGMT ver 1.23
[ 1447.642533][ T5606] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1448.467610][ T5606] usb 6-1: Using ep0 maxpacket: 8
[ 1448.528698][T29984] loop1: detected capacity change from 0 to 32768
[ 1448.618700][T29984] (syz.1.7637,29984,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1448.643467][T29984] (syz.1.7637,29984,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1448.766613][T29984] JBD2: Ignoring recovery information on journal
[ 1448.783581][T29993] netlink: 'syz.2.7640': attribute type 39 has an invalid length.
[ 1449.140245][T29984] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1449.287763][ T5606] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1449.298797][ T5606] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1449.307852][ T5606] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1449.319344][ T5606] usb 6-1: config 0 descriptor??
[ 1449.513329][T29748] bridge_slave_1: left allmulticast mode
[ 1449.519021][T29748] bridge_slave_1: left promiscuous mode
[ 1449.524821][T29748] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1449.534867][ T5628] ocfs2: Unmounting device (7,1) on (node local)
[ 1449.620763][T29705] Bluetooth: hci0: command tx timeout
[ 1449.737590][T29748] bridge_slave_0: left allmulticast mode
[ 1449.743276][T29748] bridge_slave_0: left promiscuous mode
[ 1449.751736][T29748] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1449.791217][T30004] loop6: detected capacity change from 0 to 1024
[ 1449.934104][T30004] EXT4-fs: Ignoring removed bh option
[ 1450.037185][T30006] loop5: detected capacity change from 0 to 7
[ 1450.086941][T30006] Dev loop5: unable to read RDB block 7
[ 1450.092544][T30006]  loop5: AHDI p1 p3 p4
[ 1450.134722][ T5606] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1450.176210][T30006] loop5: partition table partially beyond EOD, truncated
[ 1450.201733][T30004] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1450.202283][T30006] loop5: p1 size 100663296 extends beyond EOD, truncated
[ 1450.297998][T30006] loop5: p3 size 4261412863 extends beyond EOD, truncated
[ 1450.464075][T30004] EXT4-fs error (device loop6): ext4_check_all_de:658: inode #12: block 7: comm syz.6.7645: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[ 1450.566391][T30009] Dev loop5: unable to read RDB block 7
[ 1450.571998][T30009]  loop5: AHDI p1 p3 p4
[ 1450.576171][T30009] loop5: partition table partially beyond EOD, truncated
[ 1450.584166][T30009] loop5: p1 size 100663296 extends beyond EOD, truncated
[ 1450.596266][T30009] loop5: p3 size 4261412863 extends beyond EOD, truncated
[ 1450.751441][T22565] EXT4-fs error (device loop6): ext4_read_inline_dir:1493: inode #12: block 7: comm syz-executor: path /370/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[ 1450.839004][T20261] udevd[20261]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[ 1450.844733][T22565] EXT4-fs error (device loop6): ext4_read_inline_dir:1493: inode #12: block 7: comm syz-executor: path /370/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[ 1450.875886][T18388] udevd[18388]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[ 1450.892393][T22565] EXT4-fs error (device loop6): empty_inline_dir:1776: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[ 1450.992025][T30016] input: syz0 as /devices/virtual/input/input71
[ 1451.092066][T22565] EXT4-fs warning (device loop6): empty_inline_dir:1779: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[ 1451.106720][T22565] EXT4-fs error (device loop6): ext4_read_inline_dir:1493: inode #12: block 7: comm syz-executor: path /370/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[ 1451.129276][T22565] EXT4-fs error (device loop6): ext4_read_inline_dir:1493: inode #12: block 7: comm syz-executor: path /370/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[ 1451.152901][T22565] EXT4-fs error (device loop6): empty_inline_dir:1776: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[ 1451.181949][T22565] EXT4-fs warning (device loop6): empty_inline_dir:1779: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[ 1451.289035][T29748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1451.301796][T29748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1451.310770][T22565] EXT4-fs error (device loop6): ext4_read_inline_dir:1493: inode #12: block 7: comm syz-executor: path /370/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[ 1451.335029][T29748] bond0 (unregistering): Released all slaves
[ 1451.425371][T29902] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1451.432537][T29902] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1451.439748][T29902] bridge_slave_0: entered allmulticast mode
[ 1451.447870][T29902] bridge_slave_0: entered promiscuous mode
[ 1451.518074][T22565] EXT4-fs error (device loop6): ext4_read_inline_dir:1493: inode #12: block 7: comm syz-executor: path /370/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[ 1451.545833][T29902] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1451.552976][T29902] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1451.560180][T29902] bridge_slave_1: entered allmulticast mode
[ 1451.568023][T29902] bridge_slave_1: entered promiscuous mode
[ 1451.618179][T22565] EXT4-fs error (device loop6): empty_inline_dir:1776: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[ 1451.638265][T22565] EXT4-fs warning (device loop6): empty_inline_dir:1779: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[ 1451.658412][T29705] Bluetooth: hci0: command tx timeout
[ 1451.676237][T22565] EXT4-fs warning (device loop6): empty_inline_dir:1779: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[ 1451.691921][T22565] EXT4-fs warning (device loop6): empty_inline_dir:1779: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[ 1451.707806][T22565] EXT4-fs warning (device loop6): empty_inline_dir:1779: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[ 1451.743682][T29902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1451.756446][T29902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1451.846545][T22565] EXT4-fs warning (device loop6): empty_inline_dir:1779: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[ 1451.874423][T22565] EXT4-fs warning (device loop6): empty_inline_dir:1779: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[ 1451.991320][T22565] EXT4-fs warning (device loop6): empty_inline_dir:1779: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[ 1452.059677][T29902] team0: Port device team_slave_0 added
[ 1452.098399][T22565] EXT4-fs warning (device loop6): empty_inline_dir:1779: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[ 1452.276278][ T5606] usb 6-1: USB disconnect, device number 47
[ 1452.395268][T29902] team0: Port device team_slave_1 added
[ 1452.432384][T29902] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1452.439352][T29902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1452.465422][T29902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1452.478530][T29902] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1452.566620][T29902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1452.592550][T29902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1452.863992][T29902] hsr_slave_0: entered promiscuous mode
[ 1452.870749][T29902] hsr_slave_1: entered promiscuous mode
[ 1452.877126][T29902] debugfs: 'hsr0' already exists in 'hsr'
[ 1452.882856][T29902] Cannot create hsr debugfs directory
[ 1453.408067][T24723] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1454.394732][T24723] syz_tun (unregistering): left allmulticast mode
[ 1454.820914][T30068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7663'.
[ 1454.908793][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1454.944967][T30071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7663'.
[ 1455.769939][T30086] loop1: detected capacity change from 0 to 2048
[ 1456.046819][T29705] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1456.265304][T30086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1456.277437][T30086] ext4 filesystem being mounted at /1337/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1456.806772][T30097] loop5: detected capacity change from 0 to 512
[ 1456.814315][T30097] EXT4-fs: Invalid want_extra_isize 1969
[ 1457.374993][T24344] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1457.389121][T24344] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1457.404075][T24344] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1457.415804][T24344] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1457.423817][T24344] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1457.494878][T30105] loop5: detected capacity change from 0 to 8192
[ 1457.791649][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1458.216409][T30116] loop1: detected capacity change from 0 to 256
[ 1458.360613][   T30] audit: type=1800 audit(1784038176.101:357): pid=30116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7675" name="file1" dev="loop1" ino=1048959 res=0 errno=0
[ 1459.408892][T29748] hsr_slave_0: left promiscuous mode
[ 1459.415095][T29748] hsr_slave_1: left promiscuous mode
[ 1459.426950][T29748] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1459.484174][  T803] usb 8-1: new high-speed USB device number 57 using dummy_hcd
[ 1459.495812][T29748] batadv0: mtu less than device minimum
[ 1459.503103][T29748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1459.516465][T29748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1459.528443][T29748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1459.540426][T29748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1459.589576][T29748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1459.601570][T29748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1459.613534][T29748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1459.625505][T29748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1459.637489][T29748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1459.704781][T29705] Bluetooth: hci1: command tx timeout
[ 1459.729838][T29748] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1459.737864][T29748] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1459.768334][T29748] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1459.822839][T29748] batman_adv: batadv0: Interface deactivated: dummy0
[ 1459.829552][T29748] batman_adv: batadv0: Removing interface: dummy0
[ 1459.840017][T29748] veth1_macvtap: left promiscuous mode
[ 1459.845502][T29748] veth0_macvtap: left promiscuous mode
[ 1459.851032][T29748] veth1_vlan: left promiscuous mode
[ 1459.856289][T29748] veth0_vlan: left promiscuous mode
[ 1460.144128][  T803] usb 8-1: Using ep0 maxpacket: 32
[ 1460.291350][T29748] team0 (unregistering): Port device team_slave_1 removed
[ 1460.358060][T29748] team0 (unregistering): Port device team_slave_0 removed
[ 1460.579152][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1460.816109][  T803] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1460.827038][  T803] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1460.836818][  T803] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1460.933745][  T803] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1460.962715][  T803] usb 8-1: config 0 descriptor??
[ 1461.121102][  T803] hub 8-1:0.0: USB hub found
[ 1461.582882][  T803] hub 8-1:0.0: 1 port detected
[ 1461.840569][T29705] Bluetooth: hci1: command tx timeout
[ 1462.114343][T30174] loop2: detected capacity change from 0 to 32768
[ 1462.122123][T30174] btrfs: Deprecated parameter 'usebackuproot'
[ 1462.128208][T30174] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1462.150005][T30174] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7691 (30174)
[ 1462.190588][T30174] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1462.200713][T30174] BTRFS info (device loop2): using crc32c checksum algorithm
[ 1462.714218][T29747] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[ 1462.734549][T30174] BTRFS error (device loop2): failed to load root extent
[ 1462.741617][T30174] BTRFS warning (device loop2): try to load backup roots slot 1
[ 1462.749619][T29744] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[ 1462.762754][T30174] BTRFS warning (device loop2): couldn't read tree root
[ 1462.810407][T30174] BTRFS warning (device loop2): try to load backup roots slot 2
[ 1462.829143][T29747] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[ 1462.839538][T30174] BTRFS warning (device loop2): couldn't read tree root
[ 1462.846488][T30174] BTRFS warning (device loop2): try to load backup roots slot 3
[ 1462.887665][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1462.937230][   T29] hub 8-1:0.0: activate --> -90
[ 1463.172016][T30174] BTRFS info (device loop2): rebuilding free space tree
[ 1463.413559][T30174] BTRFS info (device loop2): checking UUID tree
[ 1463.436103][T30174] BTRFS info (device loop2): enabling ssd optimizations
[ 1463.443070][T30174] BTRFS info (device loop2): turning on async discard
[ 1463.449844][T30174] BTRFS info (device loop2): enabling free space tree
[ 1463.495604][T30174] BTRFS info (device loop2): force clearing of disk cache
[ 1463.502939][T30174] BTRFS info (device loop2): enabling auto defrag
[ 1463.509370][T30174] BTRFS info (device loop2): trying to use backup root at mount time
[ 1463.517454][T30174] BTRFS info (device loop2): use zstd compression, level 3
[ 1463.728072][  T803] usb 8-1: USB disconnect, device number 57
[ 1463.832168][T30224] netlink: 'syz.5.7699': attribute type 1 has an invalid length.
[ 1463.963846][T24344] Bluetooth: hci1: command tx timeout
[ 1463.987372][T30107] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1463.994574][T30107] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1464.001775][T30107] bridge_slave_0: entered allmulticast mode
[ 1464.165527][T30107] bridge_slave_0: entered promiscuous mode
[ 1464.348375][T30224] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1464.370823][T30225] bond4: (slave gretap2): making interface the new active one
[ 1464.389163][T30225] bond4: (slave gretap2): Enslaving as an active interface with an up link
[ 1464.515345][T30107] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1464.522514][T30107] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1464.529782][T30107] bridge_slave_1: entered allmulticast mode
[ 1464.555903][T30107] bridge_slave_1: entered promiscuous mode
[ 1464.641617][T16079] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1464.842083][T30107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1464.854893][T30107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1464.978315][T30107] team0: Port device team_slave_0 added
[ 1464.991755][T30107] team0: Port device team_slave_1 added
[ 1465.177734][T29902] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1465.201648][T29902] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1465.210044][T29902] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1465.418894][T29902] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1465.778933][T30107] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1465.785904][T30107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1465.812472][T30107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1465.826846][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4
[ 1465.833880][T29902] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1466.158114][T24344] Bluetooth: hci1: command tx timeout
[ 1466.177241][T30257] input: syz0 as /devices/virtual/input/input72
[ 1466.180269][T29902] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1466.284141][T30107] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1466.291131][T30107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1466.317145][T30107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1466.328354][T29902] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1466.433843][T29902] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1466.864491][T29748] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1466.875351][T29748] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1467.507087][T30107] hsr_slave_0: entered promiscuous mode
[ 1467.514049][T30107] hsr_slave_1: entered promiscuous mode
[ 1467.520559][T30107] debugfs: 'hsr0' already exists in 'hsr'
[ 1467.526286][T30107] Cannot create hsr debugfs directory
[ 1467.842829][T29902] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1468.060742][T29902] 8021q: adding VLAN 0 to HW filter on device team0
[ 1468.109864][T29902] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1468.120240][T29902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1468.206401][T30292] netlink: 'syz.1.7716': attribute type 1 has an invalid length.
[ 1468.501721][T30300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7719'.
[ 1468.508198][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1468.517860][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1468.527464][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1468.534608][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1468.918536][T30296] loop7: detected capacity change from 0 to 512
[ 1468.926068][T30296] EXT4-fs: Ignoring removed bh option
[ 1469.038549][T30296] EXT4-fs (loop7): 1 truncate cleaned up
[ 1469.084788][T30296] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1469.166095][T30292] bond3: entered promiscuous mode
[ 1469.171577][T30292] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1469.310745][T30297] bond3: (slave veth3): making interface the new active one
[ 1469.322119][T30297] veth3: entered promiscuous mode
[ 1469.328662][T30297] bond3: (slave veth3): Enslaving as an active interface with an up link
[ 1469.348794][ T6918] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1469.820686][T29748] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1469.830999][T29748] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1470.280731][T30327] loop2: detected capacity change from 0 to 512
[ 1470.361563][T30327] EXT4-fs: Ignoring removed orlov option
[ 1470.408220][T30327] EXT4-fs error (device loop2): ext4_validate_block_bitmap:431: comm syz.2.7726: bg 0: block 5: invalid block bitmap
[ 1470.420536][T30327] loop2: lost filesystem error report for type 5 error -117
[ 1470.430689][T30327] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[ 1470.446655][T30327] loop2: lost filesystem error report for type 5 error -117
[ 1470.488661][    C0] EXT4-fs (loop2): error count since last fsck: 2
[ 1470.502385][    C0] EXT4-fs (loop2): initial error at time 1784038188: ext4_validate_block_bitmap:431
[ 1470.511786][    C0] EXT4-fs (loop2): last error at time 1784038188: ext4_mb_clear_bb:6679
[ 1470.550069][T30327] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.7726: invalid indirect mapped block 3 (level 2)
[ 1470.657746][T30327] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1470.714091][T30327] EXT4-fs (loop2): 2 truncates cleaned up
[ 1470.783698][T30339] overlayfs: upper fs does not support file handles, falling back to index=off.
[ 1470.907559][T30327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1470.955980][T30327] EXT4-fs (loop2): shut down requested (2)
[ 1471.387466][T16079] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1471.569106][T29748] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1471.579418][T29748] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1471.785286][T30355] batman_adv: batadv0: Interface deactivated: dummy0
[ 1471.792005][T30355] batman_adv: batadv0: Removing interface: dummy0
[ 1471.839023][ T5760] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1472.008520][T30355] bridge_slave_0: left allmulticast mode
[ 1472.014226][T30355] bridge_slave_0: left promiscuous mode
[ 1472.020022][T30355] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1472.168075][T30355] bridge_slave_1: left allmulticast mode
[ 1472.173771][T30355] bridge_slave_1: left promiscuous mode
[ 1472.179552][T30355] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1472.273301][T30355] bond0: (slave bond_slave_0): Releasing backup interface
[ 1472.296688][T30355] bond0: (slave bond_slave_1): Releasing backup interface
[ 1472.428786][T30355] team0: Port device team_slave_0 removed
[ 1472.546786][T30355] team0: Port device team_slave_1 removed
[ 1472.553808][T30355] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1472.561208][T30355] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1472.630941][T30355] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1472.711648][T30355] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1472.773346][T30355] batman_adv: batadv0: Interface deactivated: ip6gretap1
[ 1472.830265][T30355] batman_adv: batadv0: Removing interface: ip6gretap1
[ 1473.423000][ T5760] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1473.434154][ T5760] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 1473.443379][ T5760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1473.454626][ T5760] usb 6-1: config 0 descriptor??
[ 1473.555104][T30348] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1473.580682][T30383] loop1: detected capacity change from 0 to 16
[ 1473.593410][T30383] erofs (device loop1): algorithm 1 isn't enabled on this kernel
[ 1473.610320][T30383] futex_wake_op: syz.1.7739 tries to shift op by 32; fix this program
[ 1473.864644][T29902] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1474.141118][T29902] veth0_vlan: entered promiscuous mode
[ 1474.270020][T29748] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode
[ 1474.280967][T29748] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1474.291254][T29748] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1474.488072][ T5760] logitech-djreceiver 0003:046D:C71F.0051: unknown main item tag 0x0
[ 1474.496229][ T5760] logitech-djreceiver 0003:046D:C71F.0051: unknown main item tag 0x0
[ 1474.504356][ T5760] logitech-djreceiver 0003:046D:C71F.0051: unknown main item tag 0x0
[ 1474.512447][ T5760] logitech-djreceiver 0003:046D:C71F.0051: unknown main item tag 0x0
[ 1474.520546][ T5760] logitech-djreceiver 0003:046D:C71F.0051: unknown main item tag 0x0
[ 1474.528654][ T5760] logitech-djreceiver 0003:046D:C71F.0051: unknown main item tag 0x0
[ 1474.555330][ T5760] logitech-djreceiver 0003:046D:C71F.0051: unknown main item tag 0x0
[ 1474.561559][T29902] veth1_vlan: entered promiscuous mode
[ 1474.594834][T29902] veth0_macvtap: entered promiscuous mode
[ 1474.663095][T30396] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1474.784846][ T5760] logitech-djreceiver 0003:046D:C71F.0051: unknown main item tag 0x0
[ 1474.798670][ T5760] logitech-djreceiver 0003:046D:C71F.0051: unknown main item tag 0x0
[ 1474.806778][ T5760] logitech-djreceiver 0003:046D:C71F.0051: unknown main item tag 0x0
[ 1474.816962][ T5760] logitech-djreceiver 0003:046D:C71F.0051: unbalanced collection at end of report description
[ 1474.833379][ T5760] logitech-djreceiver 0003:046D:C71F.0051: logi_dj_probe: parse failed
[ 1474.912503][ T5760] logitech-djreceiver 0003:046D:C71F.0051: probe with driver logitech-djreceiver failed with error -22
[ 1474.927143][ T5760] usb 6-1: USB disconnect, device number 48
[ 1475.095544][T29902] veth1_macvtap: entered promiscuous mode
[ 1475.116750][T29902] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1475.128521][T29902] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1475.190416][T29744] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1475.210272][T29744] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1475.219961][T29744] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1475.337910][T29744] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1475.469275][ T5785] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1476.148541][T29735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1476.156394][T29735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1476.166256][T29735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1476.174078][T29735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1476.638833][T30418] loop7: detected capacity change from 0 to 32768
[ 1476.648410][T30418] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.7747 (30418)
[ 1476.783488][ T5760] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1476.850406][T30418] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1476.860532][T30418] BTRFS info (device loop7): using sha256 checksum algorithm
[ 1477.274155][T29748] bridge_slave_1: left allmulticast mode
[ 1477.279853][T29748] bridge_slave_1: left promiscuous mode
[ 1477.285646][T29748] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1477.315628][T29748] bridge_slave_0: left allmulticast mode
[ 1477.321413][T29748] bridge_slave_0: left promiscuous mode
[ 1477.417409][T29748] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1477.494386][T29748] ip6tnl0: left allmulticast mode
[ 1477.762696][ T5760] usb 3-1: Using ep0 maxpacket: 8
[ 1478.584512][T30457] loop5: detected capacity change from 0 to 4096
[ 1478.592134][T30457] EXT4-fs: quotafile must be on filesystem root
[ 1478.642303][ T5785] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1478.651379][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1478.676317][ T5785] usb 2-1: config 0 descriptor??
[ 1478.736573][T30453] loop1: detected capacity change from 0 to 32768
[ 1478.776810][ T5785] usb 2-1: can't set config #0, error -71
[ 1478.784378][ T5785] usb 2-1: USB disconnect, device number 46
[ 1478.854064][T30453] (syz.1.7754,30453,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1478.854900][T30418] BTRFS info (device loop7): enabling ssd optimizations
[ 1478.874775][T30418] BTRFS info (device loop7): turning on async discard
[ 1478.931519][T30418] BTRFS info (device loop7): enabling free space tree
[ 1478.997627][T30453] (syz.1.7754,30453,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1479.019513][ T5760] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1479.028307][ T5760] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1479.038272][ T5760] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1479.049051][ T5760] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1479.059413][ T5760] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1479.073286][ T5760] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1479.223477][T30453] JBD2: Ignoring recovery information on journal
[ 1479.362740][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1479.365436][ T6918] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1479.456211][ T5760] usb 3-1: can't set config #16, error -71
[ 1479.463936][ T5760] usb 3-1: USB disconnect, device number 25
[ 1479.497241][T30453] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1479.725734][   T30] audit: type=1800 audit(1784038197.371:358): pid=30453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7754" name="file1" dev="loop1" ino=16978 res=0 errno=0
[ 1480.539130][T29748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1480.578646][ T5628] ocfs2: Unmounting device (7,1) on (node local)
[ 1480.763094][T29748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1480.894375][T30482] coredump: 2918(syz.7.7756): Core dump to core aborted: cannot preserve file permissions
[ 1480.999092][T29748] bond0 (unregistering): Released all slaves
[ 1481.156221][T30484] syz_tun: refused to change device tx_queue_len
[ 1481.162598][T30484] net_ratelimit: 30 callbacks suppressed
[ 1481.162622][T30484] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 1481.321705][T30488] loop7: detected capacity change from 0 to 512
[ 1481.707860][T30447] mac80211_hwsim hwsim53 »»»»»»: renamed from wlan0 (while UP)
[ 1482.008732][T30488] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1482.021281][T30488] ext4 filesystem being mounted at /1259/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1482.144862][T30488] EXT4-fs (loop7): Online defrag not supported for non-extent files
[ 1482.259917][T30483] syz_tun: refused to change device tx_queue_len
[ 1482.266282][T30483] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 1482.441289][T29748] tipc: Disabling bearer <udp:s>
[ 1482.465220][T29748] tipc: Left network mode
[ 1482.561694][ T6918] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1483.144039][T30107] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1483.483879][T30107] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1483.492021][T30107] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1483.523428][T30107] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1483.533637][T30519] overlayfs: invalid redirect (./file0/file1/file0)
[ 1483.764957][T30107] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1483.792832][T30107] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1483.800963][T30107] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1483.811335][T30107] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1483.811873][T30523] loop5: detected capacity change from 0 to 1024
[ 1483.825873][T30523] EXT4-fs: inline encryption not supported
[ 1484.079291][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.085634][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.092471][ T1312] aoe: packet could not be sent on lowpan0.  consider increasing tx_queue_len
[ 1484.253944][T30532] netlink: 'syz.0.7772': attribute type 1 has an invalid length.
[ 1484.261709][T30532] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7772'.
[ 1484.440647][T30107] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1484.460618][T30107] 8021q: adding VLAN 0 to HW filter on device team0
[ 1484.583839][T30107] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1484.594312][T30107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1484.761917][T30523] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1484.919381][T29743] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1484.926556][T29743] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1484.936765][T29743] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1484.943903][T29743] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1485.043774][T30523] EXT4-fs error (device loop5): ext4_read_inline_dir:1493: inode #12: block 7: comm syz.5.7770: path /718/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0
[ 1485.218835][T16338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1488.044686][T30600] pim6reg1: entered promiscuous mode
[ 1488.050024][T30600] pim6reg1: entered allmulticast mode
[ 1488.183948][   T30] audit: type=1326 audit(1784038205.921:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30611 comm="syz.2.7789" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1363d9de59 code=0x7ffc0000
[ 1488.209509][   T30] audit: type=1326 audit(1784038205.981:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30611 comm="syz.2.7789" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1363d9de59 code=0x7ffc0000
[ 1488.237176][   T30] audit: type=1326 audit(1784038205.981:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30611 comm="syz.2.7789" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1363d9de59 code=0x7ffc0000
[ 1488.347348][   T30] audit: type=1326 audit(1784038205.981:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30611 comm="syz.2.7789" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1363d9de59 code=0x7ffc0000
[ 1488.529957][   T30] audit: type=1326 audit(1784038206.241:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30611 comm="syz.2.7789" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1363d9de59 code=0x7ffc0000
[ 1488.857239][   T30] audit: type=1326 audit(1784038206.401:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30611 comm="syz.2.7789" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1363d5e68e code=0x7ffc0000
[ 1488.882527][   T30] audit: type=1326 audit(1784038206.441:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30611 comm="syz.2.7789" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1363d9de59 code=0x7ffc0000
[ 1488.908048][   T30] audit: type=1326 audit(1784038206.441:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30611 comm="syz.2.7789" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1363d9de59 code=0x7ffc0000
[ 1489.047215][   T30] audit: type=1326 audit(1784038206.551:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30611 comm="syz.2.7789" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1363d9de59 code=0x7ffc0000
[ 1489.072503][   T30] audit: type=1326 audit(1784038206.551:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30611 comm="syz.2.7789" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1363d9de59 code=0x7ffc0000
[ 1489.116240][T29748] dummy0: left promiscuous mode
[ 1489.680234][T30635] vxcan1: tx drop: invalid sa for name 0x0000000000000003
[ 1490.025554][T29748] hsr_slave_0: left promiscuous mode
[ 1490.182312][T29748] hsr_slave_1: left promiscuous mode
[ 1490.188502][T29748] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1490.195975][T29748] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1490.310501][T29748] veth1_macvtap: left promiscuous mode
[ 1490.316386][T29748] veth0_macvtap: left promiscuous mode
[ 1490.321968][T29748] veth1_vlan: left promiscuous mode
[ 1490.327267][T29748] veth0_vlan: left promiscuous mode
[ 1491.696919][T29748] team0 (unregistering): Port device team_slave_1 removed
[ 1492.248414][T29748] team0 (unregistering): Port device team_slave_0 removed
[ 1493.467652][T30107] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1493.764974][T30698] loop1: detected capacity change from 0 to 512
[ 1494.058235][T30698] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.7809: Directory hole found for htree index block 0
[ 1494.070626][T30698] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[ 1494.119630][T30698] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[ 1494.199851][    C1] EXT4-fs (loop1): error count since last fsck: 1
[ 1494.199893][    C1] EXT4-fs (loop1): initial error at time 1784038211: dx_probe:791: inode 2
[ 1494.199950][    C1] EXT4-fs (loop1): last error at time 1784038211: dx_probe:791: inode 2
[ 1494.279290][T30698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1494.978638][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1495.078464][T30720] netlink: 'syz.2.7816': attribute type 25 has an invalid length.
[ 1495.086313][T30720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7816'.
[ 1495.119132][T29743] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1495.128699][T29743] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1495.137451][T29743] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1495.156104][T30720] netlink: 'syz.2.7816': attribute type 25 has an invalid length.
[ 1495.268421][T29743] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1495.281971][T30720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7816'.
[ 1495.898201][T30107] veth0_vlan: entered promiscuous mode
[ 1495.905609][T30732] loop2: detected capacity change from 0 to 1024
[ 1495.911658][T30107] veth1_vlan: entered promiscuous mode
[ 1495.913231][T30732] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1495.945089][T30107] veth0_macvtap: entered promiscuous mode
[ 1495.956022][T30107] veth1_macvtap: entered promiscuous mode
[ 1495.977219][T30107] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1496.118591][T30107] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1496.229935][T30740] loop1: detected capacity change from 0 to 1024
[ 1496.327477][T30732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1496.598621][T29745] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1496.610980][T16079] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1496.715305][T30740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1496.727413][T30740] ext4 filesystem being mounted at /1374/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1497.004183][T30740] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.7820: lblock 0 mapped to illegal pblock 0 (length 1)
[ 1497.036033][T30740] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[ 1497.048303][T30740] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1497.048303][T30740] 
[ 1497.155623][  T803] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 1497.321881][T29710] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm kworker/u8:9: bg 0: block 112: padding at end of block bitmap is not set
[ 1497.450339][ T5757] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1497.469995][T29710] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28
[ 1497.532855][T29745] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1497.644016][T29745] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1497.652772][T29745] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1497.681179][T29710] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1497.681179][T29710] 
[ 1497.690854][T29710] EXT4-fs (loop1): Total free blocks count 0
[ 1497.696844][T29710] EXT4-fs (loop1): Free/Dirty block details
[ 1497.784106][T29710] EXT4-fs (loop1): free_blocks=0
[ 1497.789085][T29710] EXT4-fs (loop1): dirty_blocks=16
[ 1497.794207][T29710] EXT4-fs (loop1): Block reservation details
[ 1497.809398][ T5628] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[ 1498.247077][T29745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1498.254923][T29745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1498.393904][ T5757] usb 3-1: Using ep0 maxpacket: 32
[ 1498.532642][T29745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1498.540494][T29745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1498.933328][T30781] loop1: detected capacity change from 0 to 64
[ 1499.007198][  T803] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1499.016322][  T803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1499.028890][  T803] usb 6-1: config 0 descriptor??
[ 1499.320624][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1499.331544][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1499.341306][ T5757] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1499.350349][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1499.361517][ T5757] usb 3-1: config 0 descriptor??
[ 1499.680787][T30785] netlink: 'syz.0.7833': attribute type 1 has an invalid length.
[ 1499.688809][T30785] netlink: 'syz.0.7833': attribute type 2 has an invalid length.
[ 1499.696533][T30785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7833'.
[ 1499.941901][ T5757] hub 3-1:0.0: USB hub found
[ 1500.248268][  T803] usb 6-1: Cannot read MAC address
[ 1500.253642][  T803] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1500.269101][  T803] usb 6-1: USB disconnect, device number 49
[ 1500.281051][ T5757] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 1500.745523][T30795] loop4: detected capacity change from 0 to 8192
[ 1500.759476][T30795] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1500.875279][ T5757] hid_parser_main: 152 callbacks suppressed
[ 1500.875314][ T5757] hid-generic 0003:046D:C31C.0052: unknown main item tag 0x0
[ 1500.897643][ T5757] hid-generic 0003:046D:C31C.0052: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0
[ 1501.703893][T30819] erspan0: left promiscuous mode
[ 1502.897778][ T5606] usb 3-1: USB disconnect, device number 26
[ 1503.160206][T16766] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 1503.903539][T30819] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1504.281362][T16766] usb 2-1: Using ep0 maxpacket: 32
[ 1504.868060][T30819] geneve2: left promiscuous mode
[ 1504.999466][T24344] Bluetooth: hci0: Opcode 0x1407 failed: -110
[ 1505.052794][T16766] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[ 1505.061000][T16766] usb 2-1: config 0 has no interface number 0
[ 1505.067107][T16766] usb 2-1: config 0 interface 184 has no altsetting 0
[ 1505.079612][T24344] Bluetooth: hci0: command 0x1407 tx timeout
[ 1505.180000][   T57] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1505.188396][   T57] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1505.208475][   T57] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1505.216837][   T57] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1505.225533][   T57] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1505.265726][   T57] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1505.399579][   T57] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1505.554828][   T57] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1506.214145][T16766] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1506.223238][T16766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1506.231453][T16766] usb 2-1: Product: syz
[ 1506.235620][T16766] usb 2-1: Manufacturer: syz
[ 1506.461512][T16766] usb 2-1: config 0 descriptor??
[ 1506.607016][T30926] loop7: detected capacity change from 0 to 512
[ 1506.631468][T16766] usb 2-1: can't set config #0, error -71
[ 1506.639606][T30926] EXT4-fs (loop7): Invalid log block size: 7
[ 1506.647375][T16766] usb 2-1: USB disconnect, device number 47
[ 1507.547880][T30958] loop2: detected capacity change from 0 to 128
[ 1507.555623][T30958] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1507.568198][T30958] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1507.895163][T29746] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1508.130446][T30969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7893'.
[ 1508.426282][T30977] input: syz0 as /devices/virtual/input/input73
[ 1508.551922][T30980] loop5: detected capacity change from 0 to 1024
[ 1509.237998][T30980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1509.250113][T30980] ext4 filesystem being mounted at /740/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1509.318308][T31003] loop2: detected capacity change from 0 to 128
[ 1509.362434][T30980] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.7896: lblock 0 mapped to illegal pblock 0 (length 1)
[ 1509.376548][T30980] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[ 1509.388811][T30980] EXT4-fs (loop5): This should not happen!! Data will be lost
[ 1509.388811][T30980] 
[ 1509.516467][T16766] usb 8-1: new high-speed USB device number 58 using dummy_hcd
[ 1509.669883][   T57] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm kworker/u8:4: bg 0: block 112: padding at end of block bitmap is not set
[ 1509.743637][   T57] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28
[ 1509.756298][   T57] EXT4-fs (loop5): This should not happen!! Data will be lost
[ 1509.756298][   T57] 
[ 1509.769228][   T57] EXT4-fs (loop5): Total free blocks count 0
[ 1509.800626][   T57] EXT4-fs (loop5): Free/Dirty block details
[ 1509.828340][   T57] EXT4-fs (loop5): free_blocks=0
[ 1509.894055][   T57] EXT4-fs (loop5): dirty_blocks=16
[ 1509.899217][   T57] EXT4-fs (loop5): Block reservation details
[ 1510.037666][T16338] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[ 1510.741205][T31016] loop0: detected capacity change from 0 to 32768
[ 1510.811364][T31016] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.7907 (31016)
[ 1510.834835][T31016] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1510.844943][T31016] BTRFS info (device loop0): using sha256 checksum algorithm
[ 1511.217395][T16766] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1511.226452][T16766] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1511.500419][T16766] usb 8-1: config 0 descriptor??
[ 1512.086547][T30997] loop7: detected capacity change from 0 to 512
[ 1512.093990][T30997] journal_path: Non-blockdev passed as './file0'
[ 1512.100348][T30997] EXT4-fs: error: could not find journal device path
[ 1512.156354][T31051] loop2: detected capacity change from 0 to 128
[ 1512.164085][T31051] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1512.180610][T31051] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1512.211395][T31016] BTRFS info (device loop0): setting nodatasum
[ 1512.217577][T31016] BTRFS info (device loop0): enabling ssd optimizations
[ 1512.224527][T31016] BTRFS info (device loop0): using spread ssd allocation scheme
[ 1512.232179][T31016] BTRFS info (device loop0): turning on flush-on-commit
[ 1512.239133][T31016] BTRFS info (device loop0): turning on async discard
[ 1512.285878][T31016] BTRFS info (device loop0): enabling free space tree
[ 1512.292675][T31016] BTRFS info (device loop0): enabling auto defrag
[ 1512.299199][T31016] BTRFS info (device loop0): max_inline set to 0
[ 1512.552954][T16766] cp210x 8-1:0.0: cp210x converter detected
[ 1512.744729][T29710] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[ 1513.048828][T16766] cp210x 8-1:0.0: failed to get vendor val 0x0010 size 3: -32
[ 1513.437168][T29902] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1513.459963][T16766] usb 8-1: cp210x converter now attached to ttyUSB0
[ 1513.603266][T16766] usb 8-1: USB disconnect, device number 58
[ 1513.980193][T31080] loop1: detected capacity change from 0 to 128
[ 1514.072961][T31082] loop2: detected capacity change from 0 to 256
[ 1514.220782][  T802] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0
[ 1514.239625][T31080] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1514.257065][T31080] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a046c018, mo2=0042]
[ 1514.269741][T31080] System zones: 1-3, 19-19, 35-36
[ 1514.277341][T31080] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[ 1514.334647][  T802] hid-generic 0000:0000:0000.0053: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1514.334942][T16766] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1514.497285][T31080] ext4 filesystem being mounted at /1390/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1514.514352][T31088] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7919'.
[ 1514.762378][T16766] cp210x 8-1:0.0: device disconnected
[ 1514.824505][T31088] netlink: 'syz.7.7919': attribute type 26 has an invalid length.
[ 1514.832354][T31088] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7919'.
[ 1514.841876][T31088] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7919'.
[ 1514.850933][T31088] netlink: 'syz.7.7919': attribute type 26 has an invalid length.
[ 1514.858751][T31088] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7919'.
[ 1516.416370][ T5628] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1517.507745][T31136] loop0: detected capacity change from 0 to 512
[ 1517.844599][T31141] netlink: 'syz.1.7935': attribute type 18 has an invalid length.
[ 1517.852444][T31141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7935'.
[ 1517.871135][T31141] netlink: 'syz.1.7935': attribute type 18 has an invalid length.
[ 1517.875073][T29710] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 8472 - 0
[ 1517.887300][   T57] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 8472 - 0
[ 1517.895504][   T57] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 8472 - 0
[ 1517.903708][   T57] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 8472 - 0
[ 1517.911951][T31136] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1517.926814][T31141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7935'.
[ 1518.411748][T31136] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.7933: bad orphan inode 131083
[ 1518.422143][T31136] loop0: lost filesystem error report for type 5 error -117
[ 1518.436245][T31136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1518.597084][T31154] loop7: detected capacity change from 0 to 128
[ 1518.605328][T31154] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1518.614611][T31154] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a046c018, mo2=0042]
[ 1518.698335][T31154] System zones: 1-3, 19-19, 35-36
[ 1518.705981][T31154] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[ 1518.726456][T31154] ext4 filesystem being mounted at /1287/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1519.023267][T31159] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7942'.
[ 1519.286016][T29902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1520.144560][ T6918] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1520.449054][  T803] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0
[ 1520.463025][  T803] hid-generic 0000:0000:0000.0054: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1521.119494][T31196] loop2: detected capacity change from 0 to 512
[ 1521.382579][T31196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1521.526504][T16079] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1522.230382][T31208] loop1: detected capacity change from 0 to 8192
[ 1522.256833][   T30] audit: type=1326 audit(1784038239.951:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31206 comm="syz.1.7953" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa908f9de59 code=0x0
[ 1522.319787][T24344] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1523.527207][T31242] loop2: detected capacity change from 0 to 256
[ 1523.803170][T16079] FAT-fs (loop2): error, corrupted directory (invalid entries)
[ 1523.810770][T16079] FAT-fs (loop2): Filesystem has been set read-only
[ 1523.819409][T16079] FAT-fs (loop2): error, corrupted directory (invalid entries)
[ 1524.154403][T31255] input: syz1 as /devices/virtual/input/input74
[ 1524.234620][T31252] loop5: detected capacity change from 0 to 4096
[ 1524.364131][T31258] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1524.623264][   T30] audit: type=1800 audit(1784038242.371:370): pid=31252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7969" name="file1" dev="loop5" ino=15 res=0 errno=0
[ 1524.952625][T31267] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean
[ 1525.358022][  T803] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[ 1525.526381][T31283] loop1: detected capacity change from 0 to 128
[ 1525.636340][T31283] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1525.648054][T31283] hpfs: filesystem error: improperly stopped
[ 1525.654055][T31283] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1525.661792][T31283] hpfs: You really don't want any checks? You are crazy...
[ 1525.669356][T31283] hpfs: hpfs_map_sector(): read error
[ 1525.674733][T31283] hpfs: code page support is disabled
[ 1525.680216][T31283] hpfs: hpfs_map_4sectors(): unaligned read
[ 1525.686193][T31283] hpfs: hpfs_map_4sectors(): unaligned read
[ 1525.692087][T31283] hpfs: filesystem error: unable to find root dir
[ 1525.873795][T31283] hpfs: hpfs_map_4sectors(): unaligned read
[ 1525.879982][T31283] hpfs: hpfs_map_sector(): read error
[ 1525.887317][T31283] hpfs: hpfs_map_4sectors(): unaligned read
[ 1525.893866][T31283] hpfs: hpfs_map_sector(): read error
[ 1526.627925][T31305] loop5: detected capacity change from 0 to 1024
[ 1526.644989][T31305] EXT4-fs (loop5): stripe (31) is not aligned with cluster size (16), stripe is disabled
[ 1526.873386][  T803] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[ 1526.884230][  T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1526.895145][  T803] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1526.908132][  T803] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 1526.917181][  T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1527.083802][  T803] usb 5-1: config 0 descriptor??
[ 1527.092171][T31305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1527.147839][T31309] loop7: detected capacity change from 0 to 32768
[ 1527.157185][T31309] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.7987 (31309)
[ 1527.171352][T31271] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1527.178751][T31309] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1527.188853][T31309] BTRFS info (device loop7): using sha256 checksum algorithm
[ 1527.297720][T31305] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.7985: bg 0: block 153: padding at end of block bitmap is not set
[ 1527.718630][T16338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1528.063349][T31331] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1528.326896][  T803] hid-multitouch 0003:1FD2:6007.0055: ignoring exceeding usage max
[ 1528.336845][  T803] hid-multitouch 0003:1FD2:6007.0055: unknown main item tag 0x2
[ 1528.358062][  T803] hid-multitouch 0003:1FD2:6007.0055: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0
[ 1528.841000][  T803] usb 5-1: USB disconnect, device number 16
[ 1528.939122][T31309] BTRFS info (device loop7): rebuilding free space tree
[ 1528.967914][T31309] BTRFS info (device loop7): setting nodatasum
[ 1528.974131][T31309] BTRFS info (device loop7): setting nodatacow
[ 1528.980692][T31309] BTRFS info (device loop7): turning off barriers
[ 1528.987201][T31309] BTRFS info (device loop7): turning on sync discard
[ 1528.993887][T31309] BTRFS info (device loop7): enabling free space tree
[ 1529.000660][T31309] BTRFS info (device loop7): force clearing of disk cache
[ 1529.099164][T31341] fido_id[31341]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 1529.704694][T31309] BTRFS info (device loop7): scrub: started on devid 1
[ 1529.828506][T31309] BTRFS info (device loop7): scrub: finished on devid 1 with status: 0
[ 1530.231438][T31340] loop1: detected capacity change from 0 to 131072
[ 1530.254061][T31340] F2FS-fs (loop1): invalid crc value
[ 1530.527695][T31340] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1530.638418][T31340] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[ 1530.778107][T24344] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1530.858855][T24344] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1530.871409][   T30] audit: type=1800 audit(1784038248.581:371): pid=31340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7990" name="bus" dev="loop1" ino=10 res=0 errno=0
[ 1530.988356][T24344] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1531.079989][T24344] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1531.119091][   T30] audit: type=1326 audit(1784038248.841:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31366 comm="syz.4.7997" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc9f99de59 code=0x0
[ 1531.214839][ T6918] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1532.141838][T24344] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1532.989035][T31368] loop0: detected capacity change from 0 to 131072
[ 1533.176223][T31368] F2FS-fs (loop0): invalid crc value
[ 1533.589915][T31368] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1533.688767][T31368] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[ 1533.921855][   T30] audit: type=1800 audit(1784038251.621:373): pid=31368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7996" name="bus" dev="loop0" ino=10 res=0 errno=0
[ 1534.206761][T31378] loop5: detected capacity change from 0 to 131072
[ 1534.260659][T31378] F2FS-fs (loop5): invalid crc value
[ 1534.972813][T31378] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1535.045873][T31378] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[ 1535.417714][T24344] Bluetooth: hci5: command tx timeout
[ 1537.103855][T31352] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1537.111700][T31352] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1537.118893][T31352] bridge_slave_0: entered allmulticast mode
[ 1537.127064][T31352] bridge_slave_0: entered promiscuous mode
[ 1537.176847][T31352] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1537.184088][T31352] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1537.191345][T31352] bridge_slave_1: entered allmulticast mode
[ 1537.199394][T31352] bridge_slave_1: entered promiscuous mode
[ 1537.240647][T31352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1537.253161][T31352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1537.483343][T24344] Bluetooth: hci5: command tx timeout
[ 1537.516359][T31352] team0: Port device team_slave_0 added
[ 1537.595695][T31352] team0: Port device team_slave_1 added
[ 1537.629637][T31352] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1537.636589][T31352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1537.663073][T31352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1537.703431][T31436] sctp: [Deprecated]: syz.1.8011 (pid 31436) Use of int in max_burst socket option.
[ 1537.703431][T31436] Use struct sctp_assoc_value instead
[ 1537.867967][T31352] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1537.874940][T31352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1537.900833][T31352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1538.218086][T31352] hsr_slave_0: entered promiscuous mode
[ 1538.335871][T31352] hsr_slave_1: entered promiscuous mode
[ 1538.342598][T31352] debugfs: 'hsr0' already exists in 'hsr'
[ 1538.348345][T31352] Cannot create hsr debugfs directory
[ 1538.949306][T31444] loop4: detected capacity change from 0 to 128
[ 1539.018565][T31444] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[ 1539.706664][T24344] Bluetooth: hci5: command tx timeout
[ 1539.798953][T31444] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[ 1541.390732][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1541.815857][T24344] Bluetooth: hci5: command tx timeout
[ 1542.449695][T31512] loop4: detected capacity change from 0 to 1024
[ 1542.888717][T31512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1543.353373][   T30] audit: type=1800 audit(1784038261.051:374): pid=31512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8032" name="file1" dev="overlay" ino=15 res=0 errno=0
[ 1543.969843][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1544.744566][T30107] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1545.380217][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[ 1545.386574][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[ 1545.393487][ T1312] aoe: packet could not be sent on lowpan0.  consider increasing tx_queue_len
[ 1547.014027][T31604] loop4: detected capacity change from 0 to 64
[ 1547.440755][T30107] hfs: node 4:3 still has 1 user(s)!
[ 1547.953885][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1548.020925][T31614] netlink: 'syz.4.8060': attribute type 4 has an invalid length.
[ 1548.028698][T31614] netlink: 'syz.4.8060': attribute type 10 has an invalid length.
[ 1548.036518][T31614] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8060'.
[ 1548.183127][T31614] bond_slave_1: mtu greater than device maximum
[ 1548.257716][T31352] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1548.524079][T31352] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1548.532265][T31352] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1548.542636][T31352] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1548.594983][T31617] loop9: detected capacity change from 0 to 255852544
[ 1548.701463][T31352] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1548.786247][T31352] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1548.794849][T31352] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1549.060234][T31352] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1549.933629][T31352] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1549.953546][T31352] 8021q: adding VLAN 0 to HW filter on device team0
[ 1550.107256][T31646] loop1: detected capacity change from 0 to 1024
[ 1550.564528][T29748] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1550.571710][T29748] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1550.582317][T29748] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1550.589452][T29748] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1550.965395][T31646] hfsplus: bad catalog file entry
[ 1550.971082][T31646] hfsplus: failed to load root directory
[ 1551.555935][T31652] loop7: detected capacity change from 0 to 131072
[ 1551.578426][T31652] F2FS-fs (loop7): invalid crc value
[ 1551.858061][T31652] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1551.942266][T31670] loop0: detected capacity change from 0 to 1024
[ 1551.949098][T31652] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[ 1552.196737][T31670] EXT4-fs (loop0): stripe (31) is not aligned with cluster size (16), stripe is disabled
[ 1552.221461][ T5281] 8021q: adding VLAN 0 to HW filter on device eth8
[ 1552.389820][T31670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1552.601591][T31670] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.8074: bg 0: block 153: padding at end of block bitmap is not set
[ 1552.948330][T29902] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1553.280539][T31696] netlink: 'syz.4.8078': attribute type 14 has an invalid length.
[ 1553.288390][T31696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8078'.
[ 1553.298920][T31696] netlink: 'syz.4.8078': attribute type 14 has an invalid length.
[ 1553.306733][T31696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8078'.
[ 1553.316258][T31696] netlink: 'syz.4.8078': attribute type 14 has an invalid length.
[ 1553.324068][T31696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8078'.
[ 1553.773971][T31352] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1554.533900][T31718] loop4: detected capacity change from 0 to 1024
[ 1555.007241][T31728] 
: renamed from bond0 (while UP)
[ 1555.281796][T31352] veth0_vlan: entered promiscuous mode
[ 1555.295561][T31352] veth1_vlan: entered promiscuous mode
[ 1555.414951][T31352] veth0_macvtap: entered promiscuous mode
[ 1555.426597][T31352] veth1_macvtap: entered promiscuous mode
[ 1555.449101][T31352] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1555.507678][T31734] loop4: detected capacity change from 0 to 128
[ 1555.524891][T31734] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1555.537481][T31734] hpfs: filesystem error: improperly stopped
[ 1555.543490][T31734] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1555.551223][T31734] hpfs: You really don't want any checks? You are crazy...
[ 1555.558786][T31734] hpfs: hpfs_map_sector(): read error
[ 1555.564162][T31734] hpfs: code page support is disabled
[ 1555.653393][T31734] hpfs: hpfs_map_4sectors(): unaligned read
[ 1555.659409][T31734] hpfs: hpfs_map_4sectors(): unaligned read
[ 1555.665315][T31734] hpfs: filesystem error: unable to find root dir
[ 1555.697798][T31734] hpfs: hpfs_map_4sectors(): unaligned read
[ 1555.704343][T31734] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[ 1555.775268][T31737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8087'.
[ 1555.784164][T31737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8087'.
[ 1555.804387][T31737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8087'.
[ 1555.813468][T31737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8087'.
[ 1555.932551][T31352] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1555.947137][T29743] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1555.956448][T29743] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1555.965944][T29743] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1556.056213][T31742] loop1: detected capacity change from 0 to 2048
[ 1556.165304][T31742] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1556.199872][T29743] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1557.141691][T29735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1557.149544][T29735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1557.565746][T29750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1557.573600][T29750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1557.978085][T31778] loop4: detected capacity change from 0 to 256
[ 1559.359012][T31798] loop5: detected capacity change from 0 to 2048
[ 1559.943055][T31798] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1560.071610][T31814] loop1: detected capacity change from 0 to 512
[ 1560.515542][T31814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1561.067034][   T30] audit: type=1800 audit(1784038278.731:375): pid=31814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8112" name="file1" dev="loop1" ino=15 res=0 errno=0
[ 1561.347771][T31851] netlink: 260 bytes leftover after parsing attributes in process `syz.0.8121'.
[ 1561.445890][T31846] loop4: detected capacity change from 0 to 128
[ 1561.599935][T31846] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1561.643132][T31846] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1561.989978][T31862] loop7: detected capacity change from 0 to 4096
[ 1562.117562][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1562.134734][T31862] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[ 1562.290997][T31862] ntfs3(loop7): Failed to load $Extend (-22).
[ 1562.297307][T31862] ntfs3(loop7): Failed to initialize $Extend.
[ 1562.657763][T30107] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1564.435306][T31872] loop1: detected capacity change from 0 to 131072
[ 1564.468102][T31882] ip6tnl1: entered promiscuous mode
[ 1564.479764][T31872] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[ 1564.486465][T31872] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1564.581677][T31872] F2FS-fs (loop1): invalid crc value
[ 1564.833553][T31872] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1565.179649][T31899] loop7: detected capacity change from 0 to 7
[ 1565.240324][T31899] Dev loop7: unable to read RDB block 7
[ 1565.245926][T31899]  loop7: AHDI p1 p2 p3
[ 1565.250136][T31899] loop7: partition table partially beyond EOD, truncated
[ 1565.308537][T31872] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 1565.315619][T31872] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[ 1565.556835][T31899] loop7: p1 start 1601398130 is beyond EOD, truncated
[ 1565.563951][T31899] loop7: p2 start 1702059890 is beyond EOD, truncated
[ 1566.005160][ T4986] Dev loop7: unable to read RDB block 7
[ 1566.010771][ T4986]  loop7: AHDI p1 p2 p3
[ 1566.014948][ T4986] loop7: partition table partially beyond EOD, truncated
[ 1566.201085][ T4986] loop7: p1 start 1601398130 is beyond EOD, truncated
[ 1566.207906][ T4986] loop7: p2 start 1702059890 is beyond EOD, truncated
[ 1566.781190][T31925] loop5: detected capacity change from 0 to 16
[ 1567.018824][T31925] erofs (device loop5): mounted with root inode @ nid 36.
[ 1567.056755][T29705] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[ 1567.238260][T31925] erofs (device loop5): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192
[ 1567.250346][T31925] erofs (device loop5): read error -117 @ 1 of nid 89
[ 1567.317124][   T30] audit: type=1800 audit(1784038285.001:376): pid=31925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8139" name="file2" dev="loop5" ino=89 res=0 errno=0
[ 1567.523824][   T29] usb 8-1: new full-speed USB device number 59 using dummy_hcd
[ 1568.099519][T29705] Bluetooth: hci0: command 0x1407 tx timeout
[ 1568.143530][T31938] loop9: detected capacity change from 0 to 32768
[ 1568.161261][T31938] btrfs: Deprecated parameter 'usebackuproot'
[ 1568.167374][T31938] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1568.182566][T31938] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.8146 (31938)
[ 1568.243070][T31938] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1568.253204][T31938] BTRFS info (device loop9): using crc32c checksum algorithm
[ 1568.904756][  T803] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1569.029764][   T29] usb 8-1: config index 0 descriptor too short (expected 28277, got 36)
[ 1569.038659][   T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1569.048760][   T29] usb 8-1: config 0 has no interfaces?
[ 1569.054266][   T29] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[ 1569.063311][   T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1569.301063][   T29] usb 8-1: config 0 descriptor??
[ 1569.350092][T29750] BTRFS warning (device loop9): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[ 1569.364983][T31938] BTRFS error (device loop9): failed to load root extent
[ 1569.372226][T31938] BTRFS warning (device loop9): try to load backup roots slot 1
[ 1569.381786][T29750] BTRFS warning (device loop9): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[ 1569.394896][T31938] BTRFS warning (device loop9): couldn't read tree root
[ 1569.401872][T31938] BTRFS warning (device loop9): try to load backup roots slot 2
[ 1569.411056][T29710] BTRFS error (device loop9): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[ 1569.430206][T31938] BTRFS warning (device loop9): couldn't read tree root
[ 1569.500293][T31938] BTRFS warning (device loop9): try to load backup roots slot 3
[ 1569.771192][  T803] usb 5-1: Using ep0 maxpacket: 32
[ 1569.917983][T31938] BTRFS info (device loop9): rebuilding free space tree
[ 1570.098464][T31938] BTRFS info (device loop9): checking UUID tree
[ 1570.201396][T31975] netlink: 92 bytes leftover after parsing attributes in process `syz.5.8150'.
[ 1570.245154][T31938] BTRFS info (device loop9): enabling ssd optimizations
[ 1570.252158][T31938] BTRFS info (device loop9): turning on async discard
[ 1570.258947][T31938] BTRFS info (device loop9): enabling free space tree
[ 1570.265723][T31938] BTRFS info (device loop9): force clearing of disk cache
[ 1570.272848][T31938] BTRFS info (device loop9): enabling auto defrag
[ 1570.279277][T31938] BTRFS info (device loop9): trying to use backup root at mount time
[ 1570.287354][T31938] BTRFS info (device loop9): use zstd compression, level 3
[ 1570.380488][ T5606] usb 8-1: USB disconnect, device number 59
[ 1570.487559][  T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1570.499097][  T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1570.509405][  T803] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1570.518456][  T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1570.907816][  T803] usb 5-1: config 0 descriptor??
[ 1571.404778][  T803] hub 5-1:0.0: USB hub found
[ 1571.654136][T31352] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1571.664528][  T803] hub 5-1:0.0: 1 port detected
[ 1572.787670][  T803] hub 5-1:0.0: activate --> -90
[ 1573.062309][T16766] usb 5-1: USB disconnect, device number 17
[ 1573.165003][  T803] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[ 1574.383213][T32068] loop7: detected capacity change from 0 to 764
[ 1574.395611][T32069] Invalid argument reading file caps for ./file0
[ 1574.527787][T32068] rock: directory entry would overflow storage
[ 1574.534006][T32068] rock: sig=0x5245, size=8, remaining=5
[ 1574.865481][ T5785] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1575.724638][T32093] loop4: detected capacity change from 0 to 16
[ 1575.742313][T32093] erofs (device loop4): mounted with root inode @ nid 36.
[ 1575.954053][ T5785] usb 10-1: Using ep0 maxpacket: 8
[ 1576.800287][ T5785] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[ 1576.808608][ T5785] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1576.818430][ T5785] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1576.828256][ T5785] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1576.838347][ T5785] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1577.114182][ T5785] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1577.123362][ T5785] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1577.212218][ T5606] libceph: connect (1)[c::]:6789 error -101
[ 1577.219235][ T5606] libceph: mon0 (1)[c::]:6789 connect error
[ 1577.531312][T32131] ceph: No mds server is up or the cluster is laggy
[ 1577.603754][ T5606] libceph: connect (1)[c::]:6789 error -101
[ 1577.609913][ T5606] libceph: mon0 (1)[c::]:6789 connect error
[ 1578.555690][T32146] loop4: detected capacity change from 0 to 65536
[ 1578.564250][ T5785] usb 10-1: usb_control_msg returned -71
[ 1578.569946][ T5785] usbtmc 10-1:16.0: can't read capabilities
[ 1578.962971][ T5785] usb 10-1: USB disconnect, device number 13
[ 1579.307143][T32146] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[ 1579.941084][T32146] XFS (loop4): Ending clean mount
[ 1579.953372][T32146] XFS (loop4): Quotacheck needed: Please wait.
[ 1684.992429][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1684.999406][    C0] rcu: 	1-...!: (1 GPs behind) idle=452c/1/0x4000000000000000 softirq=201401/201401 fqs=1
[ 1685.012142][    C0] rcu: 	(detected by 0, t=10509 jiffies, g=177001, q=2397 ncpus=2)
[ 1685.020049][    C0] Sending NMI from CPU 0 to CPUs 1:
[ 1685.020088][    C1] NMI backtrace for cpu 1
[ 1685.020113][    C1] CPU: 1 UID: 0 PID: 31352 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1685.020160][    C1] Tainted: [L]=SOFTLOCKUP
[ 1685.020173][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[ 1685.020193][    C1] RIP: 0010:lock_acquire+0x1c0/0x370
[ 1685.020233][    C1] Code: 4c 89 14 24 4d 89 d1 6a 00 49 c1 e9 09 6a 00 41 83 f1 01 6a 00 ff b4 24 88 00 00 00 41 57 e8 f7 e3 ff ff 48 c7 c7 eb 23 18 8e <48> 83 c4 28 e8 a7 b7 d2 09 b8 ff ff ff ff 65 0f c1 05 fa 42 7e 12
[ 1685.020266][    C1] RSP: 0018:ffffc90000a08d48 EFLAGS: 00000092
[ 1685.020293][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000
[ 1685.020314][    C1] RDX: 0000000000000000 RSI: 0000000095481a34 RDI: ffffffff8e1823eb
[ 1685.020336][    C1] RBP: ffffffff8ebe6180 R08: 00000000ffffffff R09: 0000000000000007
[ 1685.020358][    C1] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000002
[ 1685.020379][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1685.020402][    C1] FS:  000055558a262500(0000) GS:ffff888123eeb000(0000) knlGS:0000000000000000
[ 1685.020432][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1685.020454][    C1] CR2: 00007fe9e63556b8 CR3: 00000000418b1000 CR4: 0000000000350ef0
[ 1685.020476][    C1] Call Trace:
[ 1685.020487][    C1]  <IRQ>
[ 1685.020500][    C1]  ? advance_sched+0x707/0xd20
[ 1685.020538][    C1]  ? advance_sched+0x6a2/0xd20
[ 1685.020572][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.020619][    C1]  advance_sched+0x718/0xd20
[ 1685.020654][    C1]  ? advance_sched+0x707/0xd20
[ 1685.020689][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.020735][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.020781][    C1]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1685.020823][    C1]  ? __pfx_advance_sched+0x10/0x10
[ 1685.020859][    C1]  __hrtimer_run_queues+0x462/0x9c0
[ 1685.020909][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1685.020957][    C1]  hrtimer_interrupt+0x3e5/0x940
[ 1685.021016][    C1]  __sysvec_apic_timer_interrupt+0x109/0x470
[ 1685.021066][    C1]  sysvec_apic_timer_interrupt+0x9e/0xc0
[ 1685.021121][    C1]  </IRQ>
[ 1685.021132][    C1]  <TASK>
[ 1685.021144][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1685.021182][    C1] RIP: 0010:srso_alias_safe_ret+0x5/0x7
[ 1685.021223][    C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 48 8d 64 24 08 <c3> cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc cc cc cc cc cc
[ 1685.021255][    C1] RSP: 0018:ffffc90005f47448 EFLAGS: 00000293
[ 1685.021281][    C1] RAX: 0000000000000000 RBX: ffffea0001741780 RCX: ffffffff82856ac6
[ 1685.021303][    C1] RDX: ffff888035438000 RSI: ffffffff82856ad4 RDI: ffff888035438000
[ 1685.021326][    C1] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000
[ 1685.021347][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8e465f50
[ 1685.021368][    C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000
[ 1685.021395][    C1]  ? page_table_check_set+0x2d6/0x930
[ 1685.021448][    C1]  ? page_table_check_set+0x2e4/0x930
[ 1685.021503][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.021543][    C1]  page_table_check_set+0x2e4/0x930
[ 1685.021599][    C1]  __page_table_check_ptes_set+0x27a/0x4e0
[ 1685.021653][    C1]  ? __pfx___page_table_check_ptes_set+0x10/0x10
[ 1685.021707][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1685.021760][    C1]  copy_page_range+0x2197/0x5b20
[ 1685.021827][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.021867][    C1]  ? mas_wr_store_entry+0xa1/0x1e80
[ 1685.021908][    C1]  ? __pfx_copy_page_range+0x10/0x10
[ 1685.021950][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.021996][    C1]  ? __pfx___might_resched+0x10/0x10
[ 1685.022028][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.022073][    C1]  ? dup_mmap+0xcfe/0x21b0
[ 1685.022103][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.022159][    C1]  ? down_write+0x146/0x1f0
[ 1685.022194][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.022236][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.022276][    C1]  ? up_write+0x2e5/0x5c0
[ 1685.022316][    C1]  dup_mmap+0xd44/0x21b0
[ 1685.022359][    C1]  ? __pfx_dup_mmap+0x10/0x10
[ 1685.022389][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.022430][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1685.022486][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.022525][    C1]  ? __lock_acquire+0x49f/0x1a40
[ 1685.022559][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.022599][    C1]  ? find_held_lock+0x2b/0x80
[ 1685.022644][    C1]  ? __percpu_counter_init_many+0x2bc/0x3b0
[ 1685.022693][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.022738][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.022790][    C1]  copy_process+0x4588/0x8030
[ 1685.022845][    C1]  ? __pfx_copy_process+0x10/0x10
[ 1685.022884][    C1]  ? do_raw_spin_lock+0x128/0x260
[ 1685.022927][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.022975][    C1]  kernel_clone+0x176/0x9d0
[ 1685.023016][    C1]  ? __pfx_kernel_clone+0x10/0x10
[ 1685.023054][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.023103][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.023143][    C1]  ? find_held_lock+0x2b/0x80
[ 1685.023187][    C1]  ? __might_fault+0xc5/0x140
[ 1685.023231][    C1]  __do_sys_clone+0xd9/0x120
[ 1685.023272][    C1]  ? __pfx___do_sys_clone+0x10/0x10
[ 1685.023326][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.023368][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.023413][    C1]  do_syscall_64+0x115/0x870
[ 1685.023447][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1685.023481][    C1] RIP: 0033:0x7fe9e55c68d2
[ 1685.023508][    C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[ 1685.023540][    C1] RSP: 002b:00007ffde43541b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1685.023570][    C1] RAX: ffffffffffffffda RBX: 00007ffde43541b0 RCX: 00007fe9e55c68d2
[ 1685.023592][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1685.023614][    C1] RBP: 00007ffde435433c R08: 0000000000000000 R09: 0000000000000001
[ 1685.023635][    C1] R10: 000055558a2627d0 R11: 0000000000000246 R12: 0000000000000001
[ 1685.023657][    C1] R13: 00000000000927c0 R14: 0000000000181b72 R15: 00007ffde4354390
[ 1685.023693][    C1]  </TASK>
[ 1685.024082][    C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g177001 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1685.646484][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1685.656459][    C0] rcu: RCU grace-period kthread stack dump:
[ 1685.662339][    C0] task:rcu_preempt     state:R  running task     stack:27592 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1685.675900][    C0] Call Trace:
[ 1685.679292][    C0]  <TASK>
[ 1685.682321][    C0]  __schedule+0x125c/0x6730
[ 1685.686861][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.692551][    C0]  ? __pfx___schedule+0x10/0x10
[ 1685.697430][    C0]  ? find_held_lock+0x2b/0x80
[ 1685.702152][    C0]  ? schedule+0x225/0x2c0
[ 1685.706506][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.712167][    C0]  schedule+0xdd/0x2c0
[ 1685.716272][    C0]  schedule_timeout+0x127/0x280
[ 1685.721150][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[ 1685.726548][    C0]  ? __pfx_process_timeout+0x10/0x10
[ 1685.731878][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.737533][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1685.743372][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.749025][    C0]  ? prepare_to_swait_event+0xdf/0x4a0
[ 1685.754531][    C0]  rcu_gp_fqs_loop+0x1a9/0x900
[ 1685.759305][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.764957][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1685.770312][    C0]  ? __pfx_rcu_gp_init+0x10/0x10
[ 1685.775274][    C0]  ? __pfx_rcu_gp_cleanup+0x10/0x10
[ 1685.780478][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1685.785270][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1685.791112][    C0]  rcu_gp_kthread+0x179/0x230
[ 1685.795800][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1685.801007][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1685.806844][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.812500][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.818154][    C0]  ? __kthread_parkme+0x18c/0x230
[ 1685.823204][    C0]  ? kthread+0x13a/0x450
[ 1685.827478][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1685.832683][    C0]  kthread+0x370/0x450
[ 1685.836778][    C0]  ? __pfx_kthread+0x10/0x10
[ 1685.841401][    C0]  ret_from_fork+0x72b/0xd50
[ 1685.846012][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1685.851152][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1685.856804][    C0]  ? __switch_to+0x800/0x10f0
[ 1685.861510][    C0]  ? __switch_to_asm+0x39/0x70
[ 1685.866299][    C0]  ? __pfx_kthread+0x10/0x10
[ 1685.870921][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1685.875735][    C0]  </TASK>
[ 1685.878751][    C0] rcu: Stack dump where RCU GP kthread last ran:
[ 1685.885074][    C0] CPU: 0 UID: 0 PID: 29902 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1685.896201][    C0] Tainted: [L]=SOFTLOCKUP
[ 1685.900518][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[ 1685.910574][    C0] RIP: 0010:smp_call_function_many_cond+0x589/0x16c0
[ 1685.917270][    C0] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 b9 95 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31
[ 1685.936893][    C0] RSP: 0018:ffffc9000815f618 EFLAGS: 00000293
[ 1685.942976][    C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fd25ed
[ 1685.950953][    C0] RDX: ffff888050b53e00 RSI: ffffffff81fd25c7 RDI: ffff888050b53e00
[ 1685.958933][    C0] RBP: ffff8880b8541380 R08: 0000000000000005 R09: 0000000000000000
[ 1685.966907][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003
[ 1685.974883][    C0] R13: ffffed10170a8271 R14: 0000000000000001 R15: ffff8880b843c9c0
[ 1685.982860][    C0] FS:  0000555570586500(0000) GS:ffff888123deb000(0000) knlGS:0000000000000000
[ 1685.991800][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1685.998387][    C0] CR2: 00007ffc8c31e468 CR3: 00000000904b8000 CR4: 0000000000350ef0
[ 1686.006362][    C0] Call Trace:
[ 1686.009638][    C0]  <TASK>
[ 1686.012574][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[ 1686.017809][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 1686.024150][    C0]  ? ldt_dup_context+0x45/0x300
[ 1686.029028][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1686.034678][    C0]  ? find_held_lock+0x2b/0x80
[ 1686.039379][    C0]  ? ldt_dup_context+0x1a4/0x300
[ 1686.044341][    C0]  ? ldt_dup_context+0x1a4/0x300
[ 1686.049302][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1686.054962][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1686.060616][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[ 1686.065836][    C0]  on_each_cpu_cond_mask+0x40/0x90
[ 1686.070964][    C0]  flush_tlb_mm_range+0x45f/0x16f0
[ 1686.076101][    C0]  ? dup_mmap+0x12ec/0x21b0
[ 1686.080615][    C0]  ? dup_mmap+0x12ec/0x21b0
[ 1686.085126][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1686.090784][    C0]  ? __pfx_flush_tlb_mm_range+0x10/0x10
[ 1686.096439][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1686.102088][    C0]  ? up_write+0x2e5/0x5c0
[ 1686.106546][    C0]  dup_mmap+0x1307/0x21b0
[ 1686.110909][    C0]  ? __pfx_dup_mmap+0x10/0x10
[ 1686.115600][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1686.121254][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1686.127137][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1686.132787][    C0]  ? __lock_acquire+0x49f/0x1a40
[ 1686.137741][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1686.143391][    C0]  ? find_held_lock+0x2b/0x80
[ 1686.148093][    C0]  ? __percpu_counter_init_many+0x2bc/0x3b0
[ 1686.154019][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1686.159676][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1686.165339][    C0]  copy_process+0x4588/0x8030
[ 1686.170067][    C0]  ? __pfx_copy_process+0x10/0x10
[ 1686.175111][    C0]  ? do_raw_spin_lock+0x128/0x260
[ 1686.180159][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1686.185822][    C0]  kernel_clone+0x176/0x9d0
[ 1686.190349][    C0]  ? __pfx_kernel_clone+0x10/0x10
[ 1686.195388][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1686.201053][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1686.206700][    C0]  ? find_held_lock+0x2b/0x80
[ 1686.211405][    C0]  ? __might_fault+0xc5/0x140
[ 1686.216112][    C0]  __do_sys_clone+0xd9/0x120
[ 1686.220722][    C0]  ? __pfx___do_sys_clone+0x10/0x10
[ 1686.225967][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1686.231636][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1686.237293][    C0]  do_syscall_64+0x115/0x870
[ 1686.241901][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1686.247805][    C0] RIP: 0033:0x7fc0cbbc68d2
[ 1686.252228][    C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[ 1686.271848][    C0] RSP: 002b:00007fff70dd2480 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1686.280274][    C0] RAX: ffffffffffffffda RBX: 00007fff70dd2480 RCX: 00007fc0cbbc68d2
[ 1686.288247][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1686.296225][    C0] RBP: 00007fff70dd260c R08: 0000000000000000 R09: 0000000000000001
[ 1686.304203][    C0] R10: 00005555705867d0 R11: 0000000000000246 R12: 0000000000000001
[ 1686.312183][    C0] R13: 00000000000927c0 R14: 0000000000181ae0 R15: 00007fff70dd2660
[ 1686.320183][    C0]  </TASK>
[ 1827.940979][    C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [syz-executor:29902]
[ 1827.941018][    C0] Modules linked in:
[ 1827.941036][    C0] irq event stamp: 1265766
[ 1827.941050][    C0] hardirqs last  enabled at (1265765): [<ffffffff8bb7f73d>] irqentry_exit+0x24d/0xa00
[ 1827.941100][    C0] hardirqs last disabled at (1265766): [<ffffffff8bb7e31e>] sysvec_apic_timer_interrupt+0xe/0xc0
[ 1827.941168][    C0] softirqs last  enabled at (1265764): [<ffffffff81c85222>] __irq_exit_rcu+0x162/0x210
[ 1827.941219][    C0] softirqs last disabled at (1265455): [<ffffffff81c85222>] __irq_exit_rcu+0x162/0x210
[ 1827.941280][    C0] CPU: 0 UID: 0 PID: 29902 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1827.941339][    C0] Tainted: [L]=SOFTLOCKUP
[ 1827.941353][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[ 1827.941377][    C0] RIP: 0010:smp_call_function_many_cond+0x589/0x16c0
[ 1827.941421][    C0] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 b9 95 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31
[ 1827.941459][    C0] RSP: 0018:ffffc9000815f618 EFLAGS: 00000293
[ 1827.941488][    C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fd25ed
[ 1827.941513][    C0] RDX: ffff888050b53e00 RSI: ffffffff81fd25c7 RDI: ffff888050b53e00
[ 1827.941539][    C0] RBP: ffff8880b8541380 R08: 0000000000000005 R09: 0000000000000000
[ 1827.941564][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003
[ 1827.941587][    C0] R13: ffffed10170a8271 R14: 0000000000000001 R15: ffff8880b843c9c0
[ 1827.941616][    C0] FS:  0000555570586500(0000) GS:ffff888123deb000(0000) knlGS:0000000000000000
[ 1827.941650][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1827.941677][    C0] CR2: 00007ffc8c31e468 CR3: 00000000904b8000 CR4: 0000000000350ef0
[ 1827.941702][    C0] Call Trace:
[ 1827.941714][    C0]  <TASK>
[ 1827.941735][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[ 1827.941794][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 1827.941834][    C0]  ? ldt_dup_context+0x45/0x300
[ 1827.941885][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1827.941931][    C0]  ? find_held_lock+0x2b/0x80
[ 1827.941983][    C0]  ? ldt_dup_context+0x1a4/0x300
[ 1827.942033][    C0]  ? ldt_dup_context+0x1a4/0x300
[ 1827.942082][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1827.942134][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1827.942183][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[ 1827.942242][    C0]  on_each_cpu_cond_mask+0x40/0x90
[ 1827.942285][    C0]  flush_tlb_mm_range+0x45f/0x16f0
[ 1827.942342][    C0]  ? dup_mmap+0x12ec/0x21b0
[ 1827.942379][    C0]  ? dup_mmap+0x12ec/0x21b0
[ 1827.942414][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1827.942465][    C0]  ? __pfx_flush_tlb_mm_range+0x10/0x10
[ 1827.942513][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1827.942559][    C0]  ? up_write+0x2e5/0x5c0
[ 1827.942607][    C0]  dup_mmap+0x1307/0x21b0
[ 1827.942664][    C0]  ? __pfx_dup_mmap+0x10/0x10
[ 1827.942699][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1827.942744][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1827.942812][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1827.942857][    C0]  ? __lock_acquire+0x49f/0x1a40
[ 1827.942897][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1827.942942][    C0]  ? find_held_lock+0x2b/0x80
[ 1827.942993][    C0]  ? __percpu_counter_init_many+0x2bc/0x3b0
[ 1827.943053][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1827.943109][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1827.943168][    C0]  copy_process+0x4588/0x8030
[ 1827.943241][    C0]  ? __pfx_copy_process+0x10/0x10
[ 1827.943286][    C0]  ? do_raw_spin_lock+0x128/0x260
[ 1827.943344][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1827.943404][    C0]  kernel_clone+0x176/0x9d0
[ 1827.943453][    C0]  ? __pfx_kernel_clone+0x10/0x10
[ 1827.943497][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1827.943558][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1827.943603][    C0]  ? find_held_lock+0x2b/0x80
[ 1827.943654][    C0]  ? __might_fault+0xc5/0x140
[ 1827.943707][    C0]  __do_sys_clone+0xd9/0x120
[ 1827.943754][    C0]  ? __pfx___do_sys_clone+0x10/0x10
[ 1827.943829][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1827.943878][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1827.943933][    C0]  do_syscall_64+0x115/0x870
[ 1827.943975][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1827.944015][    C0] RIP: 0033:0x7fc0cbbc68d2
[ 1827.944046][    C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[ 1827.944082][    C0] RSP: 002b:00007fff70dd2480 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1827.944116][    C0] RAX: ffffffffffffffda RBX: 00007fff70dd2480 RCX: 00007fc0cbbc68d2
[ 1827.944142][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1827.944165][    C0] RBP: 00007fff70dd260c R08: 0000000000000000 R09: 0000000000000001
[ 1827.944189][    C0] R10: 00005555705867d0 R11: 0000000000000246 R12: 0000000000000001
[ 1827.944213][    C0] R13: 00000000000927c0 R14: 0000000000181ae0 R15: 00007fff70dd2660
[ 1827.944263][    C0]  </TASK>
[ 1827.944277][    C0] Sending NMI from CPU 0 to CPUs 1:
[ 1828.440119][    C1] NMI backtrace for cpu 1
[ 1828.440148][    C1] CPU: 1 UID: 0 PID: 31352 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1828.440198][    C1] Tainted: [L]=SOFTLOCKUP
[ 1828.440211][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[ 1828.440233][    C1] RIP: 0010:_raw_spin_lock_irq+0x1e/0x50
[ 1828.440290][    C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 fb 9c 58 fa f6 c4 02 75 30 bf 01 00 00 00 e8 06 33 1a f6 ff 74 24 08 <48> 8d 7b 18 45 31 c9 31 c9 41 b8 01 00 00 00 31 d2 31 f6 e8 1a 6e
[ 1828.440325][    C1] RSP: 0018:ffffc90000a08e80 EFLAGS: 00000093
[ 1828.440353][    C1] RAX: 0000000000010003 RBX: ffff8880b8528400 RCX: 1ffffffff36e58c0
[ 1828.440376][    C1] RDX: 0000000000000003 RSI: ffffffff81f570ae RDI: 0000000000000001
[ 1828.440399][    C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[ 1828.440421][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888026870300
[ 1828.440442][    C1] R13: 0000000000000001 R14: ffff8880b8528640 R15: ffff8880b8528690
[ 1828.440469][    C1] FS:  000055558a262500(0000) GS:ffff888123eeb000(0000) knlGS:0000000000000000
[ 1828.440500][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1828.440523][    C1] CR2: 00007fe9e63556b8 CR3: 00000000418b1000 CR4: 0000000000350ef0
[ 1828.440547][    C1] Call Trace:
[ 1828.440559][    C1]  <IRQ>
[ 1828.440571][    C1]  ? __hrtimer_run_queues+0x1b7/0x9c0
[ 1828.440622][    C1]  __hrtimer_run_queues+0x1b7/0x9c0
[ 1828.440674][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1828.440726][    C1]  hrtimer_interrupt+0x3e5/0x940
[ 1828.440790][    C1]  __sysvec_apic_timer_interrupt+0x109/0x470
[ 1828.440849][    C1]  sysvec_apic_timer_interrupt+0x9e/0xc0
[ 1828.440906][    C1]  </IRQ>
[ 1828.440917][    C1]  <TASK>
[ 1828.440930][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1828.440971][    C1] RIP: 0010:srso_alias_safe_ret+0x5/0x7
[ 1828.441013][    C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 48 8d 64 24 08 <c3> cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc cc cc cc cc cc
[ 1828.441047][    C1] RSP: 0018:ffffc90005f47448 EFLAGS: 00000293
[ 1828.441073][    C1] RAX: 0000000000000000 RBX: ffffea0001741780 RCX: ffffffff82856ac6
[ 1828.441097][    C1] RDX: ffff888035438000 RSI: ffffffff82856ad4 RDI: ffff888035438000
[ 1828.441121][    C1] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000
[ 1828.441142][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8e465f50
[ 1828.441165][    C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000
[ 1828.441194][    C1]  ? page_table_check_set+0x2d6/0x930
[ 1828.441248][    C1]  ? page_table_check_set+0x2e4/0x930
[ 1828.441305][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1828.441348][    C1]  page_table_check_set+0x2e4/0x930
[ 1828.441407][    C1]  __page_table_check_ptes_set+0x27a/0x4e0
[ 1828.441464][    C1]  ? __pfx___page_table_check_ptes_set+0x10/0x10
[ 1828.441520][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1828.441572][    C1]  copy_page_range+0x2197/0x5b20
[ 1828.441646][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1828.441688][    C1]  ? mas_wr_store_entry+0xa1/0x1e80
[ 1828.441732][    C1]  ? __pfx_copy_page_range+0x10/0x10
[ 1828.441777][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1828.441824][    C1]  ? __pfx___might_resched+0x10/0x10
[ 1828.441864][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1828.441911][    C1]  ? dup_mmap+0xcfe/0x21b0
[ 1828.441943][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1828.441986][    C1]  ? down_write+0x146/0x1f0
[ 1828.442022][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1828.442066][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1828.442108][    C1]  ? up_write+0x2e5/0x5c0
[ 1828.442151][    C1]  dup_mmap+0xd44/0x21b0
[ 1828.442208][    C1]  ? __pfx_dup_mmap+0x10/0x10
[ 1828.442240][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1828.442283][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1828.442342][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1828.442384][    C1]  ? __lock_acquire+0x49f/0x1a40
[ 1828.442419][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1828.442461][    C1]  ? find_held_lock+0x2b/0x80
[ 1828.442508][    C1]  ? __percpu_counter_init_many+0x2bc/0x3b0
[ 1828.442561][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1828.442609][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1828.442663][    C1]  copy_process+0x4588/0x8030
[ 1828.442722][    C1]  ? __pfx_copy_process+0x10/0x10
[ 1828.442764][    C1]  ? do_raw_spin_lock+0x128/0x260
[ 1828.442810][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1828.442867][    C1]  kernel_clone+0x176/0x9d0
[ 1828.442910][    C1]  ? __pfx_kernel_clone+0x10/0x10
[ 1828.442953][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1828.443005][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1828.443047][    C1]  ? find_held_lock+0x2b/0x80
[ 1828.443094][    C1]  ? __might_fault+0xc5/0x140
[ 1828.443140][    C1]  __do_sys_clone+0xd9/0x120
[ 1828.443183][    C1]  ? __pfx___do_sys_clone+0x10/0x10
[ 1828.443242][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1828.443286][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1828.443334][    C1]  do_syscall_64+0x115/0x870
[ 1828.443371][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1828.443407][    C1] RIP: 0033:0x7fe9e55c68d2
[ 1828.443435][    C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[ 1828.443469][    C1] RSP: 002b:00007ffde43541b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1828.443500][    C1] RAX: ffffffffffffffda RBX: 00007ffde43541b0 RCX: 00007fe9e55c68d2
[ 1828.443524][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1828.443546][    C1] RBP: 00007ffde435433c R08: 0000000000000000 R09: 0000000000000001
[ 1828.443568][    C1] R10: 000055558a2627d0 R11: 0000000000000246 R12: 0000000000000001
[ 1828.443591][    C1] R13: 00000000000927c0 R14: 0000000000181b72 R15: 00007ffde4354390
[ 1828.443630][    C1]  </TASK>
[ 1829.010036][    C0] Kernel panic - not syncing: softlockup: hung tasks
[ 1829.016716][    C0] CPU: 0 UID: 0 PID: 29902 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1829.027841][    C0] Tainted: [L]=SOFTLOCKUP
[ 1829.032158][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[ 1829.042216][    C0] Call Trace:
[ 1829.045492][    C0]  <IRQ>
[ 1829.048336][    C0]  dump_stack_lvl+0x100/0x190
[ 1829.053035][    C0]  vpanic+0x552/0x970
[ 1829.057029][    C0]  ? __pfx_vpanic+0x10/0x10
[ 1829.061537][    C0]  ? __entry_text_end+0x1020b5/0x1020b9
[ 1829.067104][    C0]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1829.072336][    C0]  panic+0xd1/0xe0
[ 1829.076068][    C0]  ? __pfx_panic+0x10/0x10
[ 1829.080491][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1829.086146][    C0]  ? __pfx_printk_trigger_flush+0x10/0x10
[ 1829.091899][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1829.097549][    C0]  ? wq_watchdog_touch+0xec/0x1a0
[ 1829.102625][    C0]  ? watchdog_timer_fn.cold+0x5/0x25
[ 1829.107928][    C0]  ? watchdog_timer_fn+0x702/0x7a0
[ 1829.113057][    C0]  watchdog_timer_fn.cold+0x16/0x25
[ 1829.118282][    C0]  ? __pfx_watchdog_timer_fn+0x10/0x10
[ 1829.123774][    C0]  __hrtimer_run_queues+0x13f/0x9c0
[ 1829.129005][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1829.133800][    C0]  hrtimer_interrupt+0x3e5/0x940
[ 1829.138811][    C0]  __sysvec_apic_timer_interrupt+0x109/0x470
[ 1829.144822][    C0]  sysvec_apic_timer_interrupt+0x9e/0xc0
[ 1829.150498][    C0]  </IRQ>
[ 1829.153426][    C0]  <TASK>
[ 1829.156357][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1829.162355][    C0] RIP: 0010:smp_call_function_many_cond+0x589/0x16c0
[ 1829.169047][    C0] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 b9 95 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31
[ 1829.188669][    C0] RSP: 0018:ffffc9000815f618 EFLAGS: 00000293
[ 1829.194748][    C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fd25ed
[ 1829.202724][    C0] RDX: ffff888050b53e00 RSI: ffffffff81fd25c7 RDI: ffff888050b53e00
[ 1829.210699][    C0] RBP: ffff8880b8541380 R08: 0000000000000005 R09: 0000000000000000
[ 1829.218672][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003
[ 1829.226643][    C0] R13: ffffed10170a8271 R14: 0000000000000001 R15: ffff8880b843c9c0
[ 1829.234631][    C0]  ? smp_call_function_many_cond+0x5ad/0x16c0
[ 1829.240716][    C0]  ? smp_call_function_many_cond+0x587/0x16c0
[ 1829.246803][    C0]  ? smp_call_function_many_cond+0x587/0x16c0
[ 1829.252888][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[ 1829.258119][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 1829.264459][    C0]  ? ldt_dup_context+0x45/0x300
[ 1829.269339][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1829.274988][    C0]  ? find_held_lock+0x2b/0x80
[ 1829.279690][    C0]  ? ldt_dup_context+0x1a4/0x300
[ 1829.284652][    C0]  ? ldt_dup_context+0x1a4/0x300
[ 1829.289612][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1829.295271][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1829.300928][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[ 1829.306152][    C0]  on_each_cpu_cond_mask+0x40/0x90
[ 1829.311281][    C0]  flush_tlb_mm_range+0x45f/0x16f0
[ 1829.316421][    C0]  ? dup_mmap+0x12ec/0x21b0
[ 1829.320936][    C0]  ? dup_mmap+0x12ec/0x21b0
[ 1829.325447][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1829.331105][    C0]  ? __pfx_flush_tlb_mm_range+0x10/0x10
[ 1829.336673][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1829.342329][    C0]  ? up_write+0x2e5/0x5c0
[ 1829.346687][    C0]  dup_mmap+0x1307/0x21b0
[ 1829.351225][    C0]  ? __pfx_dup_mmap+0x10/0x10
[ 1829.355914][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1829.361571][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1829.367418][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1829.373076][    C0]  ? __lock_acquire+0x49f/0x1a40
[ 1829.378034][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1829.383686][    C0]  ? find_held_lock+0x2b/0x80
[ 1829.388405][    C0]  ? __percpu_counter_init_many+0x2bc/0x3b0
[ 1829.394344][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1829.400007][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1829.405672][    C0]  copy_process+0x4588/0x8030
[ 1829.410398][    C0]  ? __pfx_copy_process+0x10/0x10
[ 1829.415442][    C0]  ? do_raw_spin_lock+0x128/0x260
[ 1829.420494][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1829.426161][    C0]  kernel_clone+0x176/0x9d0
[ 1829.430711][    C0]  ? __pfx_kernel_clone+0x10/0x10
[ 1829.435753][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1829.441419][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1829.447071][    C0]  ? find_held_lock+0x2b/0x80
[ 1829.451772][    C0]  ? __might_fault+0xc5/0x140
[ 1829.456564][    C0]  __do_sys_clone+0xd9/0x120
[ 1829.461174][    C0]  ? __pfx___do_sys_clone+0x10/0x10
[ 1829.466422][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1829.472077][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1829.477741][    C0]  do_syscall_64+0x115/0x870
[ 1829.482348][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1829.488255][    C0] RIP: 0033:0x7fc0cbbc68d2
[ 1829.492674][    C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[ 1829.512296][    C0] RSP: 002b:00007fff70dd2480 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1829.520727][    C0] RAX: ffffffffffffffda RBX: 00007fff70dd2480 RCX: 00007fc0cbbc68d2
[ 1829.528703][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1829.536678][    C0] RBP: 00007fff70dd260c R08: 0000000000000000 R09: 0000000000000001
[ 1829.544652][    C0] R10: 00005555705867d0 R11: 0000000000000246 R12: 0000000000000001
[ 1829.552628][    C0] R13: 00000000000927c0 R14: 0000000000181ae0 R15: 00007fff70dd2660
[ 1829.560630][    C0]  </TASK>
[ 1830.730446][    C0] Shutting down cpus with NMI
[ 1830.735384][    C0] Kernel Offset: disabled
[ 1830.739724][    C0] Rebooting in 86400 seconds..