last executing test programs:

20.004995873s ago: executing program 0 (id=414):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r4, 0x1, 0x21, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)

18.355702845s ago: executing program 0 (id=416):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

15.787573431s ago: executing program 4 (id=425):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0xfffffffa, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}, 0xfffffffa}], 0x1, 0x20028, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x2014, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x804810, &(0x7f0000000000)={[{@init_itable}, {@usrjquota}, {@abort}, {@noload}]}, 0x26, 0x758, &(0x7f0000000ac0)="$eJzs3M1rHGUYAPBnptmmH7EbQfDjIEILLZRukubSnhov3gqFgtcakkkImWRDdlO7sWDrWajNRUEQ9ezRq1DqH+BNCgreBdEaD+JlZTYfpWl2u+2m3ZL+fjDd533nnXnehx3e7kBmAnhpvVP8k0QMRcSliChv9qcRcbAVHYq4sTFu/f71qWJLotm8/GdSHBbrzfL2uZLNz6PROiTeiIi7pYjTnzyat9ZYnZ/M82x5sz1SX1gaqTVWz8wtTM5ms9ni2Pj50XPj4+dGxx9bw+td1nri/fOHb//03traz9/Xb709cCaJiVbdsVlbl6fZVdKxvxQTO/oXe0n2AmpXPwAAL5bid/6BiBho/Uotx4FWBAAAAOwnzcEmAAAAsO8l0e8ZAAAAAM/W1t8BbD3b2+tzsE/qj3cjYni3/AOtZ4gjDkUpIo6sJw89mZBsHAY9uXEzIu5M7Lz+vi2usBs9nnt0R/vhZ6QP9nh29sKdYv2Z2G39SbfXn9hl/RnYendCj9qvfw/yH2iz/l3qMscPX71Zapv/ZsRbA7vlT7bzJ23yf9Bl/ltrn95uBcce3df8JuLkrv//JA/l6vB+iImZubzj6wfu/nfqXqf6j7TLn3Suf6nL+j9a/3u+3VpS5D91vPP3v1v+4pr4bHMeaUTc3vws2mutEQ9GH1/45cdO9U9HNJ/m+/+6y/p/+27wWpdDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCWNiKFI0sp2nKaVSsTRiHgtjqR5tVY/PVNdWZwu9kUMRymdmcuz0Ygob7SToj3Wih+0z+5oj0fEq78e3kg6l2eVqWo+3e/iAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HY0IoYiSSsRkUbEP+U0rVQiBro4dvA5zA8AAADYI8P9ngAAAADwzLn/BwAAgP3vae//kz2eBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCvXbp4sdia6/evTxXt6auNlfnq1TPTWW2+srAyVZmqLi9VZqvV2TyrTFUXHne+vFpdGjsfK9dG6lmtPlJrrF5ZqK4s1q/MLUzOZley0nOpCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCc11NqStBIRaStO00ol4pWIGI5SMjOXZ6MRcSwi7pVLg0V7rN+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM/VGqvzk3meLQsEgucWfBwRL8A0OgT9XpkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiHWmN1fjLPs+Vav2cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAf6W/JxFRbCfLJ4Z27j2Y/FtufUbEh19e/vzaZL2+PFb0/7XdX/9is/9sP+YPAAAAL4ULTzJ46z596z4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgW7XG6vxknmfLvQUXorHaTNqM6XeNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0/k/AAD//x0hx0s=")
chdir(&(0x7f0000000040)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x86400, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000a40)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

14.309653426s ago: executing program 1 (id=427):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x181341, 0x0)
remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1)

14.198999964s ago: executing program 0 (id=428):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x50}}, 0x20004800)

13.266333519s ago: executing program 0 (id=430):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x88101)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

13.065782113s ago: executing program 4 (id=431):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c040}, 0x4004)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c)
readv(r1, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)

13.002114592s ago: executing program 0 (id=432):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = msgget$private(0x0, 0x3ac)
r2 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}})
fchownat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xee01, 0x0, 0x1000)
close(r3)
keyctl$set_timeout(0xf, r2, 0x4b2)
msgrcv(r1, 0x0, 0x0, 0x0, 0x800)
syz_clone3(0x0, 0x0)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
socket(0x28, 0x803, 0x2)
socket$kcm(0x10, 0x2, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050)

12.190495711s ago: executing program 0 (id=433):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESOCT], 0x0)

12.01692693s ago: executing program 3 (id=434):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={<r1=>r0})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
close(r2)
r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000540)={0x4, 0x6, 0x1, {0x1, @pix={0x0, 0x0, 0x30324c4a, 0x3, 0x2, 0xffffffff, 0x2, 0x6}}, 0xfffffe00})
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

11.715255847s ago: executing program 3 (id=435):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="d6"], 0x0}, 0x94)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

10.98272993s ago: executing program 32 (id=433):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESOCT], 0x0)

10.955928027s ago: executing program 1 (id=437):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r4, 0x1, 0x21, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)

10.954062188s ago: executing program 3 (id=439):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3009042, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)

9.581345389s ago: executing program 1 (id=440):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x50}}, 0x20004800)

8.943365422s ago: executing program 2 (id=442):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x803})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0)
unshare(0x20000400)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, 0x0, 0x0)

7.929609583s ago: executing program 3 (id=443):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = msgget$private(0x0, 0x3ac)
r2 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}})
fchownat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xee01, 0x0, 0x1000)
close(r3)
keyctl$set_timeout(0xf, r2, 0x4b2)
msgrcv(r1, 0x0, 0x0, 0x0, 0x800)
syz_clone3(0x0, 0x0)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
socket(0x28, 0x803, 0x2)
socket$kcm(0x10, 0x2, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050)

7.87861185s ago: executing program 4 (id=444):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x11, 0x3, 0x1)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb0}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)

7.693621431s ago: executing program 2 (id=445):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={<r1=>r0})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
close(r2)
r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000540)={0x4, 0x6, 0x1, {0x1, @pix={0x0, 0x0, 0x30324c4a, 0x3, 0x2, 0xffffffff, 0x2, 0x6}}, 0xfffffe00})
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

6.300632179s ago: executing program 2 (id=446):
r0 = open$dir(0x0, 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './myproc/interrupts\x00'})
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20)
lseek(r3, 0x2000000008, 0x0)

6.081058592s ago: executing program 4 (id=447):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x181341, 0x0)
remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1)

5.389493243s ago: executing program 2 (id=448):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'wlan0\x00', &(0x7f0000000080)=@ethtool_cmd={0x2f, 0x1, 0x2, 0x9, 0x8, 0x8, 0x9, 0x9, 0x0, 0xc, 0x8, 0x9, 0x101, 0x0, 0x3, 0x10f, [0x9, 0x4]}})
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="1d0000"], 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A7', 0x2}], 0x1}}], 0x1, 0x4000801)

5.087147567s ago: executing program 4 (id=449):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r4, 0x1, 0x21, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)

4.481142857s ago: executing program 1 (id=450):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x7, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.35988428s ago: executing program 1 (id=451):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000440)=""/53, 0x0, 0x26000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680))
r2 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096})
connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

2.788173576s ago: executing program 4 (id=452):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3009042, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)

2.431914894s ago: executing program 1 (id=453):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c040}, 0x4004)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c)
readv(r1, &(0x7f0000000580)=[{&(0x7f0000000440)=""/192, 0xc0}], 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)

2.193210618s ago: executing program 3 (id=454):
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x4c, 0x2, 0x6, 0x401, 0x6c, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_SEQ_RESETSAMPLES(r2, 0x40045109, &(0x7f0000000180)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r5, @ANYBLOB="08001d8004000080"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800000, 0x13, r6, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0xfffffffd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x80000)
syz_80211_inject_frame(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000880)=ANY=[], 0x330)

1.237575147s ago: executing program 2 (id=455):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={<r1=>r0})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
close(r2)
r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000540)={0x4, 0x6, 0x1, {0x1, @pix={0x0, 0x0, 0x30324c4a, 0x3, 0x2, 0xffffffff, 0x2, 0x6}}, 0xfffffe00})
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

282.526179ms ago: executing program 3 (id=456):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000600)=ANY=[@ANYBLOB="64697361626c655f6578745f6964656e746966792c6673796e635f6d6f64653d7374726963742c6e6f636865636b706f696e745f6d657267652c6e6f657874656e745f63616368652c746573745f64756d6d795f656e6372797074696f6e2c00ca7f3b2f981996b7a00b17c2a1b3aa2a3e156ef54c8301c5808a0289acc8150d1456efcff6a1ad284947038ee7ebbae2a3343cc6974b8b89266c96dc9fdb0ec647e94616bce9b99dc61c3152a4a98da019eb6bf3f231707e05bb76742e3b67ca80224862c9aa07a11c57130ed13661ae753b267c11c000"/224], 0x1, 0x10598, &(0x7f0000031140)="$eJzs3F9rW2UcB/Bf2u7/nEW8EBQ8oEIrJizdH/RumxviWEdRd+GVpkkasiU5pUnb2CvBGy98AwNfife+GFEQBBFBUHKeU1mLgrUl1fbzgbPvOU9Ofuf3jHPznKQJ4NSaz37+qRJX4kJEzEbE5Yhiv1JuhVspXoqIVyNi5pmtUo7/OXA2Ii5GxJVJ8VSzUr705t2z9+8/vfPLl08ffPP9+JXXj2/WwHF7IyL662l/u58y76R8XI43trpF9q9vlZle6D8pj/OU2+3VosJ2Y/e8RpHXOun8fH1zOMm1XqM5yU53rRhfH6QLDrc6u3WKNzxubBTHrfZqkd1hXmRnJ/U1LnNnOEp1WmW9naJ8jEa7mcbb43aaz/qTIpuDUTme6uat9niSW2WWl4tm3msVfaz+6//m/7wH3cHmONtqbwy7+SC7Uau/XavfrNY38lZ71L5ebfRbN69nC53e5LTqqN3o3+rkeafXrjXz/mK20Gk2q/V6tnC3vdptDLJ6vXatdrV6Y7Hceyt77+GjrNfKFiZ5pzvYHHV7w2wt38jSOxazpdq1dxaz1+rZh8sr2coH9+4tn4uIjx/eXn7/3fKk7MZs7GkrW1i6urRUrV+tLtUXT9z8Vz765O6++e9r6wjn/2vlcO/nlHP/AByY9T8wTZd+TDnF9f/c1Nb/n1n/H9RpX/+e9vlbvnEobiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFPr0Xe3Xy525tPxpXL8uXLohfK4EhEzEfH7X5iNs3tqzpZ1zvzN+Wf29fBtJYoKk2ucK7eLEXGr3H57Pr0GAAAAHNzc1198nlbr6Z/5426IaUoPbWYuf3pE9SoRcWb+hyOoEuXDpnjx8F0lk/t7LsaHrLLbW/EA6/zhu0qKR25zR1XtH5ndE+efiUqKmam2AwAATMXelcB0VyEAAABM01fH3QDHo/g0s/wufvkF/nMpyg8EL+w5AgAAAP6H/Ek9AAAAnHzF+t/v/wEAAMDJln7/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAPdu4lNZUgCgPw8XX13huJhMxcjHHo3MyDK8gww0C2EdxNFiNkCUGDXRWIwUBCtd0g3wdtWa38ngYnp/oBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAp3W7m0/7z02NpznZXpp6jAQAAAI5ZbubT6s0kzf/n/eO86yrPOxHRjYhjvXsv/hxk9nLO4JvvD77U8BJRJex/Y5i3fxFxk7e3y/QZAAAA8Hur9WyRuvX0Mmm7IJqUFm26F3c15XUiYjB5rSEl8mJTXJdXlez/3/14KEz5qK1awBqVV5VUS279utJ+pHcwjD4NnTR0Gy0HAABoxGEn0GwXAgAAQJPu2y6AdlRnM/O1+PkC/mEa8gnBv3k2bqE4AAAAoBZuqQcAAIDzV/X/nv8HAAAA5y09/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBTWm7m09V6tijN2e7K1HM0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA7+/OOAiEQBmGwd31nMvc/rDRoampSBcLH3xgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG9+95f/E1PjTDL32lh6HknWTo2tU2Pv3Dj6w/j6NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzszzsKhkAQhMH+n2q27P0PKw2aGgpCFQgfMwyyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ESv48v7jE9jJPl22vh1PJP8u2osXTXWHjS2HsyLH427XgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7O3fsGzcVBgD82b67UBDCBCkDWUAMMEDTkA7HeFJZ2MJ/EKXXEnHlUBKhtipDxg4sMFZCZWSlfwH/QDfghq4dMtxQBHPQ89k5t4RCkWpfk99Pev6+WCf7e44U5fN7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARNPBPM/iIZ/laXnut0e3tmOcPBGj8cNJHkfMkyaLfgElK21XAAAAwFmQVf19CGHzcLAaY5oX/X+3+kzs+e++Osurfv7Jvr+Klx7cyasxXr7+6/GN8tl94kWv7IyGFxqb4eJ77V8/0SmefPHuJSu+IeknB29Mu8XzTL65f//jXpEuNVEtAPB/nK9imVS/D8W43mZhAJwZnXKEWv+f5e3WBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCE6UF4pcqTEMKbnXkeTR7d2j4pXnpwJ6/GLz+/fbt+zXiJbgjhys5oeKHBuSy6vRs3P98ajYa7EolEcpy0/ZMJAIDTpluO2NdvHg5W47lkOYSjHx7v/9+t5aHW79/s/XP///XdwU/1e9X7//XGZrj41vavfbm2d2Ppg51rW1eHV4dfrPcv9i9u9D/a6K8V70rWnvmNSfr8qgUAAOBF1CtHvf9Pl/++/v9yLQ//cf2/c/vox/mdzoVM/3+CozKOhrt7LZcCAABwxr3+1p+/JyecT3q9cH1rf393PR6z+dcfzo4tlPrMlspR7/+z5barAgAAAJowPUgeW/+/XMvDU9b/xw8neTXufbbRrV8zK3YBzNb/z2+PR5ebm85Ca+LPidueIwAAAO06V476+n+32P+fHm95SEMI770zy8t/A/jU/f+x94/xj81vv6rfq77/f6O5KS6kdGX2PIq4EkJnpe2KAAAAOM1eKkds9j89HKze+/7973r2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MX+3NsmDIRxHH59SZS4TUZIbyUwAw0VghH4kJAseQYGYCEaKlqLRWAFkOBc0xmK52n+v+KKewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABe3uXhi7eIKCJ1mSKNNz+n94j4iLRt29HnLYvd+dh83XO2P0xyfsf0t4yIMoo+zgEA6F3VbY7Vul7+5f3PO8g7zFvNm3rxzE8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABXduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgrAAD//xHgTlo=")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x820008, 0x0, 0xda, 0x0, &(0x7f0000000280))

0s ago: executing program 2 (id=457):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0)
syz_usb_disconnect(r0)
syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts.
[   73.642119][ T5604] cgroup: Unknown subsys name 'net'
[   73.738873][ T5604] cgroup: Unknown subsys name 'cpuset'
[   73.741924][ T5604] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   75.352034][ T5604] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   79.222823][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.225075][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.233144][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.249563][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.259239][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.333567][ T4935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   79.335109][ T4935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   79.345706][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   79.359605][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   79.361023][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   79.361487][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   79.364410][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   79.373739][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   79.374796][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   79.375384][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   79.446096][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   79.448075][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   79.449667][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   79.451188][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   79.453349][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   79.568160][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   79.569344][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   79.571014][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   79.573062][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   79.574594][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   81.288914][   T54] Bluetooth: hci0: command tx timeout
[   81.342497][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.342687][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.342856][ T5628] bridge_slave_0: entered allmulticast mode
[   81.344740][ T5628] bridge_slave_0: entered promiscuous mode
[   81.399049][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.399199][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.399297][ T5628] bridge_slave_1: entered allmulticast mode
[   81.400429][ T5628] bridge_slave_1: entered promiscuous mode
[   81.445378][   T54] Bluetooth: hci1: command tx timeout
[   81.445530][   T54] Bluetooth: hci2: command tx timeout
[   81.499588][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.499735][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.499825][ T5615] bridge_slave_0: entered allmulticast mode
[   81.501199][ T5615] bridge_slave_0: entered promiscuous mode
[   81.522406][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.526073][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.535090][ T5618] Bluetooth: hci3: command tx timeout
[   81.588732][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.588877][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.589125][ T5615] bridge_slave_1: entered allmulticast mode
[   81.590257][ T5615] bridge_slave_1: entered promiscuous mode
[   81.609515][ T5628] team0: Port device team_slave_0 added
[   81.654672][ T5628] team0: Port device team_slave_1 added
[   81.672361][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.672534][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.672618][ T5622] bridge_slave_0: entered allmulticast mode
[   81.673903][ T5622] bridge_slave_0: entered promiscuous mode
[   81.679789][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.695019][ T5618] Bluetooth: hci4: command tx timeout
[   81.733696][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.733792][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.733898][ T5622] bridge_slave_1: entered allmulticast mode
[   81.736069][ T5622] bridge_slave_1: entered promiscuous mode
[   81.740402][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.761134][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.761152][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.761174][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.767785][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.767893][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.768292][ T5620] bridge_slave_0: entered allmulticast mode
[   81.773984][ T5620] bridge_slave_0: entered promiscuous mode
[   81.779059][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.779829][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.779969][ T5620] bridge_slave_1: entered allmulticast mode
[   81.782090][ T5620] bridge_slave_1: entered promiscuous mode
[   81.831967][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.831983][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.832004][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.865059][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.865162][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.865557][ T5633] bridge_slave_0: entered allmulticast mode
[   81.867733][ T5633] bridge_slave_0: entered promiscuous mode
[   81.883572][ T5615] team0: Port device team_slave_0 added
[   81.956746][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.957015][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.957568][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.957714][ T5633] bridge_slave_1: entered allmulticast mode
[   81.959908][ T5633] bridge_slave_1: entered promiscuous mode
[   81.965160][ T5615] team0: Port device team_slave_1 added
[   81.983123][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.987974][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.016305][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.132182][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.160604][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.160622][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.160647][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.217299][ T5620] team0: Port device team_slave_0 added
[   82.241971][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.279507][ T5628] hsr_slave_0: entered promiscuous mode
[   82.280778][ T5628] hsr_slave_1: entered promiscuous mode
[   82.282677][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.282689][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.282709][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.287011][ T5620] team0: Port device team_slave_1 added
[   82.320154][ T5622] team0: Port device team_slave_0 added
[   82.386542][ T5622] team0: Port device team_slave_1 added
[   82.409333][ T5633] team0: Port device team_slave_0 added
[   82.412589][ T5633] team0: Port device team_slave_1 added
[   82.413287][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.413296][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.413309][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.478727][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.478743][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.478767][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.535580][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.535596][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.535617][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.537802][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.537820][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.537843][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.538938][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.538948][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.538967][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.556488][ T5615] hsr_slave_0: entered promiscuous mode
[   82.557651][ T5615] hsr_slave_1: entered promiscuous mode
[   82.558366][ T5615] debugfs: 'hsr0' already exists in 'hsr'
[   82.558441][ T5615] Cannot create hsr debugfs directory
[   82.600464][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.600480][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.600501][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.739268][ T5620] hsr_slave_0: entered promiscuous mode
[   82.740680][ T5620] hsr_slave_1: entered promiscuous mode
[   82.741432][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[   82.741449][ T5620] Cannot create hsr debugfs directory
[   82.819498][ T5633] hsr_slave_0: entered promiscuous mode
[   82.820565][ T5633] hsr_slave_1: entered promiscuous mode
[   82.821019][ T5633] debugfs: 'hsr0' already exists in 'hsr'
[   82.821040][ T5633] Cannot create hsr debugfs directory
[   82.844468][ T5622] hsr_slave_0: entered promiscuous mode
[   82.845742][ T5622] hsr_slave_1: entered promiscuous mode
[   82.846549][ T5622] debugfs: 'hsr0' already exists in 'hsr'
[   82.846567][ T5622] Cannot create hsr debugfs directory
[   83.340121][ T5628] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   83.350610][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   83.351746][ T5628] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   83.366617][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   83.367430][ T5628] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   83.372518][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   83.382003][ T5618] Bluetooth: hci0: command tx timeout
[   83.385406][ T5628] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   83.394027][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   83.462328][ T5615] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   83.479174][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   83.483944][ T5615] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   83.494562][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   83.498036][ T5615] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   83.506902][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   83.526210][ T5618] Bluetooth: hci2: command tx timeout
[   83.526249][ T5618] Bluetooth: hci1: command tx timeout
[   83.526937][ T5615] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   83.529439][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   83.606081][ T5618] Bluetooth: hci3: command tx timeout
[   83.647044][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   83.652044][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   83.663366][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   83.678886][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   83.700149][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   83.703098][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   83.703967][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   83.719495][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   83.766385][ T5618] Bluetooth: hci4: command tx timeout
[   83.784666][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.836378][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   83.840949][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   83.841944][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   83.844728][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   83.883495][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   83.890894][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   83.894351][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   83.903871][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   83.937578][ T5628] 8021q: adding VLAN 0 to HW filter on device team0
[   83.968019][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.968172][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.022285][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.039644][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.039855][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.075901][ T5620] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   84.079009][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   84.080762][ T5620] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   84.083621][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   84.118942][ T5615] 8021q: adding VLAN 0 to HW filter on device team0
[   84.121859][ T5620] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   84.128304][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   84.132599][ T5620] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   84.151906][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   84.176838][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.177068][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.203360][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.203452][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.231726][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.312025][ T5633] 8021q: adding VLAN 0 to HW filter on device team0
[   84.351256][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.351373][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.388101][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.388220][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.448054][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.542684][ T5622] 8021q: adding VLAN 0 to HW filter on device team0
[   84.592908][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.593024][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.657945][  T751] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.658533][  T751] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.749901][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.883564][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[   84.911379][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.911495][ T4170] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.954604][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.954828][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.448941][ T5618] Bluetooth: hci0: command tx timeout
[   85.605477][ T5618] Bluetooth: hci1: command tx timeout
[   85.608361][ T5618] Bluetooth: hci2: command tx timeout
[   85.608684][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.686693][ T5618] Bluetooth: hci3: command tx timeout
[   85.839834][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.847471][ T5618] Bluetooth: hci4: command tx timeout
[   85.889478][ T5628] veth0_vlan: entered promiscuous mode
[   85.953234][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.986519][ T5628] veth1_vlan: entered promiscuous mode
[   86.208062][ T5628] veth0_macvtap: entered promiscuous mode
[   86.239105][ T5633] veth0_vlan: entered promiscuous mode
[   86.267938][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.282197][ T5628] veth1_macvtap: entered promiscuous mode
[   86.308588][ T5633] veth1_vlan: entered promiscuous mode
[   86.422999][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.442818][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.518540][ T5633] veth0_macvtap: entered promiscuous mode
[   86.536303][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.539771][ T5633] veth1_macvtap: entered promiscuous mode
[   86.547406][ T5622] veth0_vlan: entered promiscuous mode
[   86.631038][ T5622] veth1_vlan: entered promiscuous mode
[   86.658548][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.700713][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.761844][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.761881][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.764056][ T5615] veth0_vlan: entered promiscuous mode
[   86.793515][ T5622] veth0_macvtap: entered promiscuous mode
[   86.839975][ T5620] veth0_vlan: entered promiscuous mode
[   86.842233][ T5622] veth1_macvtap: entered promiscuous mode
[   86.847651][ T5615] veth1_vlan: entered promiscuous mode
[   86.880642][  T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.880667][  T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.931252][ T5620] veth1_vlan: entered promiscuous mode
[   86.968869][ T5615] veth0_macvtap: entered promiscuous mode
[   86.997590][ T5628] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   87.009408][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.016375][ T5615] veth1_macvtap: entered promiscuous mode
[   87.063028][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.092259][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.092282][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.132342][ T1225] cfg80211: failed to load regulatory.db
[   87.171891][ T5620] veth0_macvtap: entered promiscuous mode
[   87.180596][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.226166][   T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.226516][   T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.226556][   T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.226590][   T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.226625][   T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.226660][   T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.226695][   T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.226730][   T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.226764][   T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.226799][   T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.226833][   T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.226867][   T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.229869][ T5620] veth1_macvtap: entered promiscuous mode
[   87.247522][  T751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.247542][  T751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.250663][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.438862][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.491915][ T5808] loop2: detected capacity change from 0 to 1024
[   87.525393][ T5618] Bluetooth: hci0: command tx timeout
[   87.569350][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.638059][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.638084][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.680041][  T751] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.680412][  T751] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.685811][ T5618] Bluetooth: hci2: command tx timeout
[   87.685849][ T5618] Bluetooth: hci1: command tx timeout
[   87.765289][   T54] Bluetooth: hci3: command tx timeout
[   87.945644][   T54] Bluetooth: hci4: command tx timeout
[   88.020035][  T751] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.032107][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.032128][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.908655][   T33] audit: type=1326 audit(1789160657.698:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz.2.7" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840bd9e159 code=0x7ffc0000
[   89.908713][   T33] audit: type=1326 audit(1789160657.708:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz.2.7" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840bd9e159 code=0x7ffc0000
[   89.908756][   T33] audit: type=1326 audit(1789160657.728:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz.2.7" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f840bd9e159 code=0x7ffc0000
[   89.908797][   T33] audit: type=1326 audit(1789160657.728:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz.2.7" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840bd9e159 code=0x7ffc0000
[   89.908840][   T33] audit: type=1326 audit(1789160657.728:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz.2.7" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840bd9e159 code=0x7ffc0000
[   89.908882][   T33] audit: type=1326 audit(1789160657.738:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz.2.7" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f840bd9e159 code=0x7ffc0000
[   89.908925][   T33] audit: type=1326 audit(1789160657.738:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz.2.7" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840bd9e159 code=0x7ffc0000
[   89.908968][   T33] audit: type=1326 audit(1789160657.738:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz.2.7" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840bd9e159 code=0x7ffc0000
[   90.137161][ T1104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.140830][ T4170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.140879][ T4170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.140916][ T4170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.140952][ T4170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.149734][ T5819] loop0: detected capacity change from 0 to 64
[   90.223618][  T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.223644][  T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.300726][  T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.300747][  T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.332227][   T33] audit: type=1800 audit(1789160658.838:10): pid=5819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8" name="file1" dev="loop0" ino=21 res=0 errno=0
[   90.473399][ T4170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.473421][ T4170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.559815][ T5822] loop1: detected capacity change from 0 to 16
[   90.580206][ T5822] =======================================================
[   90.580206][ T5822] WARNING: The mand mount option has been deprecated and
[   90.580206][ T5822]          and is ignored by this kernel. Remove the mand
[   90.580206][ T5822]          option from the mount to silence this warning.
[   90.580206][ T5822] =======================================================
[   90.596554][ T4170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.596576][ T4170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.680812][ T5822] erofs (device loop1): mounted with root inode @ nid 36.
[   90.790825][ T5824] loop0: detected capacity change from 0 to 8
[   90.846791][ T5825] erofs (device loop1): readahead error at folio 2 @ nid 89
[   90.847641][ T5825] erofs (device loop1): too much compressed data @ la 512 of nid 89
[   90.847663][ T5825] erofs (device loop1): readahead error at folio 1 @ nid 89
[   90.847819][ T5825] erofs (device loop1): bogus lookback distance 1 @ lcn 0 of nid 89
[   90.847837][ T5825] erofs (device loop1): readahead error at folio 0 @ nid 89
[   90.849155][ T5825] syz.1.2: attempt to access beyond end of device
[   90.849155][ T5825] loop1: rw=524288, sector=524296, nr_sectors = 8 limit=16
[   90.903456][ T5825] erofs (device loop1): bogus lookback distance 1 @ lcn 0 of nid 89
[   90.903659][ T5825] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 3584
[   90.903686][ T5825] erofs (device loop1): read error -117 @ 0 of nid 89
[   90.912040][   T33] audit: type=1800 audit(1789160659.408:11): pid=5825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="file2" dev="loop1" ino=89 res=0 errno=0
[   91.983156][ T5832] loop4: detected capacity change from 0 to 1024
[   92.552203][ T5832] hfsplus: failed to load attributes file
[   92.693626][ T5836] Zero length message leads to an empty skb
[   93.822871][ T5822] syz.1.2 (5822): drop_caches: 2
[   94.923839][ T5850] loop0: detected capacity change from 0 to 131072
[   94.962149][ T5850] F2FS-fs (loop0): Test dummy encryption mode enabled
[   95.054582][ T5850] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   95.066557][ T5850] F2FS-fs (loop0): Mounted with checkpoint version = 1b41e955
[   95.097761][ T5850] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[   96.015409][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[   99.592488][ T5867] loop4: detected capacity change from 0 to 32768
[   99.643999][ T5867] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   99.718842][ T5867] XFS (loop4): Ending clean mount
[   99.734487][ T5867] XFS (loop4): Quotacheck needed: Please wait.
[   99.892592][ T5867] XFS (loop4): Quotacheck: Done.
[  100.195605][   T33] audit: type=1800 audit(1789160668.628:12): pid=5867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.21" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0
[  100.305902][ T5615] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  102.365275][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  102.646310][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'.
[  102.654797][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'.
[  102.668637][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'.
[  102.680130][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'.
[  102.689198][ T5894] 9pnet_virtio: no channels available for device syz
[  103.161687][ T5895] loop3: detected capacity change from 0 to 256
[  105.536076][ T5895] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  107.971459][ T5914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.815357][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  109.224973][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  109.244975][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  111.472017][ T5941] loop1: detected capacity change from 0 to 512
[  111.496946][ T5941] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  111.496969][ T5941] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  111.607536][ T5941] EXT4-fs (loop1): 1 truncate cleaned up
[  111.638412][ T5941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.052513][ T5947] tipc: Started in network mode
[  112.052535][ T5947] tipc: Node identity , cluster identity 4711
[  112.436294][ T5950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.44'.
[  114.262474][ T5960] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  115.988543][ T5968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.256000][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  118.076202][ T5976] syz.3.49 (5976): drop_caches: 2
[  119.233478][ T5984] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  119.875582][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  120.452201][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.636593][ T5994] loop0: detected capacity change from 0 to 128
[  121.692540][ T5994] EXT4-fs (loop0): Test dummy encryption mode enabled
[  121.768270][ T5994] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  121.783882][ T5994] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  124.174353][ T5994] fscrypt: AES-256-XTS using blk-crypto-fallback
[  124.797347][ T5633] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  126.262062][ T6019] syz.1.60 (6019): drop_caches: 2
[  128.718039][ T6026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.979512][ T6033] loop2: detected capacity change from 0 to 512
[  128.997369][ T6033] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  129.019339][ T6033] EXT4-fs (loop2): 1 truncate cleaned up
[  129.020531][ T6033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.689334][ T6042] trusted_key: encrypted_key: insufficient parameters specified
[  131.445724][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  133.528707][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  133.528775][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  135.235544][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  135.854730][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.276862][    C1] vcan0: j1939_tp_rxtimer: 0xffff888033e55800: rx timeout, send abort
[  137.776479][    C1] vcan0: j1939_tp_rxtimer: 0xffff888033e54800: rx timeout, send abort
[  137.778016][    C1] vcan0: j1939_tp_rxtimer: 0xffff888033e55800: abort rx timeout. Force session deactivation
[  138.276591][    C1] vcan0: j1939_tp_rxtimer: 0xffff888033e54800: abort rx timeout. Force session deactivation
[  139.197030][ T6110] loop4: detected capacity change from 0 to 736
[  139.197685][ T6110] iso9660: Bad value for 'dmode'
[  140.007132][ T6115] loop4: detected capacity change from 0 to 164
[  144.937619][ T6136] overlayfs: upper fs does not support file handles, falling back to index=off.
[  144.943450][ T6136] evm: overlay not supported
[  145.596164][ T6138] loop4: detected capacity change from 0 to 1024
[  145.773815][ T6140] loop2: detected capacity change from 0 to 512
[  145.853187][ T6140] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.99: bg 0: block 5: invalid block bitmap
[  145.853362][ T6140] loop2: lost filesystem error report for type 5 error -117
[  145.855353][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  145.855379][    C0] EXT4-fs (loop2): initial error at time 1789160714: ext4_validate_block_bitmap:436
[  145.855405][    C0] EXT4-fs (loop2): last error at time 1789160714: ext4_validate_block_bitmap:436
[  145.936962][ T6140] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  145.937000][ T6140] loop2: lost filesystem error report for type 5 error -117
[  145.940250][ T6140] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.99: invalid indirect mapped block 3 (level 2)
[  145.940433][ T6140] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  145.941920][ T6140] EXT4-fs (loop2): 1 orphan inode deleted
[  145.941945][ T6140] EXT4-fs (loop2): 1 truncate cleaned up
[  145.952924][ T6140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.805880][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  147.503334][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.793743][ T6156] syz.4.101 (6156): drop_caches: 2
[  151.889375][ T6165] loop0: detected capacity change from 0 to 32768
[  152.548158][ T6178] overlayfs: upper fs does not support file handles, falling back to index=off.
[  152.658605][ T6165] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  152.712228][ T6165] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.98 (6165)
[  153.249852][ T6189] loop2: detected capacity change from 0 to 256
[  153.301538][ T6189] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  154.051036][ T6165] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  154.051073][ T6165] BTRFS info (device loop0): using crc32c checksum algorithm
[  154.132684][ T6165] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  154.147097][ T6165] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  154.152500][ T6165] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  154.152795][ T6165] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  154.152955][ T6165] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  154.154386][ T6165] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  154.154552][ T6165] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  154.154744][ T6165] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  154.169551][ T6165] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  154.179042][ T6165] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  154.179430][ T6165] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  154.179695][ T6165] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  154.213558][ T6165] BTRFS error (device loop0): open_ctree failed: -ENOMEM
[  159.102494][ T6227] loop4: detected capacity change from 0 to 512
[  159.120589][ T6227] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  159.155277][ T6227] EXT4-fs (loop4): 1 truncate cleaned up
[  159.175798][ T6227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.344079][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.160643][   T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  160.287503][ T6243] loop0: detected capacity change from 0 to 512
[  160.418426][ T6243] FAT-fs (loop0): bogus number of FAT sectors
[  160.418473][ T6243] FAT-fs (loop0): Can't find a valid FAT filesystem
[  161.089384][   T27] usb 3-1: Using ep0 maxpacket: 32
[  161.107035][   T27] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  161.131428][   T27] usb 3-1: config 0 has an invalid interface number: 146 but max is 0
[  161.131460][   T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  161.131477][   T27] usb 3-1: config 0 has no interface number 0
[  161.131520][   T27] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC
[  161.131543][   T27] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  161.131561][   T27] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0
[  161.131582][   T27] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  161.131603][   T27] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  161.131625][   T27] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  161.131646][   T27] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  161.131667][   T27] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  161.266715][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.266755][   T27] usb 3-1: Product: syz
[  161.266770][   T27] usb 3-1: Manufacturer: syz
[  161.266784][   T27] usb 3-1: SerialNumber: syz
[  161.332505][   T27] usb 3-1: config 0 descriptor??
[  161.349726][ T6238] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  161.377411][   T27] usb 3-1: can only deal with bulk endpoints; endpoint 2 is not bulk.
[  161.377439][   T27] usb 3-1: couldn't find two input bulk endpoints. Bailing out.
[  162.339741][   T27] usb 3-1: USB disconnect, device number 2
[  162.727649][ T6257] loop3: detected capacity change from 0 to 512
[  162.878708][ T6257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.902428][ T6257] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  162.961188][   T33] audit: type=1800 audit(1789160731.468:13): pid=6257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.128" name="file1" dev="loop3" ino=15 res=0 errno=0
[  163.333744][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.676810][ T6264] overlayfs: upper fs does not support file handles, falling back to index=off.
[  165.187646][ T6279] 
@ÿ: renamed from veth0_vlan (while UP)
[  165.191637][ T6279] FAULT_INJECTION: forcing a failure.
[  165.191637][ T6279] name failslab, interval 1, probability 0, space 0, times 1
[  165.191658][ T6279] CPU: 1 UID: 0 PID: 6279 Comm: syz.4.133 Not tainted syzkaller #0 PREEMPT(full) 
[  165.191672][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  165.191678][ T6279] Call Trace:
[  165.191687][ T6279]  <TASK>
[  165.191693][ T6279]  dump_stack_lvl+0xe8/0x150
[  165.191717][ T6279]  should_fail_ex+0x3eb/0x540
[  165.191737][ T6279]  should_failslab+0xa8/0x100
[  165.191756][ T6279]  __kmalloc_noprof+0xf9/0x710
[  165.191772][ T6279]  ? kobject_get_path+0xc5/0x2f0
[  165.191786][ T6279]  ? kobject_get_path+0xc5/0x2f0
[  165.191812][ T6279]  kobject_get_path+0xc5/0x2f0
[  165.191829][ T6279]  kobject_uevent_env+0x29e/0x9e0
[  165.191849][ T6279]  kobject_rename+0x400/0x500
[  165.191864][ T6279]  ? __pfx_kobject_rename+0x10/0x10
[  165.191882][ T6279]  ? sysfs_rename_link_ns+0x178/0x1b0
[  165.191908][ T6279]  device_rename+0x15d/0x210
[  165.191930][ T6279]  netif_change_name+0x27a/0x970
[  165.191965][ T6279]  ? dev_change_name+0x101/0x220
[  165.191978][ T6279]  ? dev_ioctl+0x5dc/0x1150
[  165.191993][ T6279]  ? __pfx_netif_change_name+0x10/0x10
[  165.192009][ T6279]  ? full_name_hash+0x92/0xe0
[  165.192023][ T6279]  ? __dev_get_by_name+0xe5/0x130
[  165.192043][ T6279]  dev_change_name+0x101/0x220
[  165.192057][ T6279]  dev_ioctl+0x5ec/0x1150
[  165.192071][ T6279]  sock_do_ioctl+0x23e/0x320
[  165.192090][ T6279]  ? __pfx_sock_do_ioctl+0x10/0x10
[  165.192104][ T6279]  ? hook_file_ioctl+0x1f2/0x600
[  165.192131][ T6279]  sock_ioctl+0x57a/0x7e0
[  165.192147][ T6279]  ? __pfx_sock_ioctl+0x10/0x10
[  165.192163][ T6279]  ? __fget_files+0x2a/0x420
[  165.192174][ T6279]  ? __fget_files+0x3a2/0x420
[  165.192185][ T6279]  ? __fget_files+0x2a/0x420
[  165.192199][ T6279]  ? bpf_lsm_file_ioctl+0x9/0x20
[  165.192210][ T6279]  ? __pfx_sock_ioctl+0x10/0x10
[  165.192225][ T6279]  __se_sys_ioctl+0xfc/0x170
[  165.192242][ T6279]  do_syscall_64+0x166/0x520
[  165.192254][ T6279]  ? trace_irq_disable+0x3b/0x140
[  165.192266][ T6279]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.192277][ T6279]  ? clear_bhb_loop+0x70/0xc0
[  165.192291][ T6279]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.192302][ T6279] RIP: 0033:0x7f1004f9e159
[  165.192314][ T6279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.192324][ T6279] RSP: 002b:00007f1005dca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  165.192338][ T6279] RAX: ffffffffffffffda RBX: 00007f1005225fa0 RCX: 00007f1004f9e159
[  165.192346][ T6279] RDX: 00002000000000c0 RSI: 0000000000008923 RDI: 0000000000000005
[  165.192353][ T6279] RBP: 00007f100503503b R08: 0000000000000000 R09: 0000000000000000
[  165.192360][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.192367][ T6279] R13: 00007f1005226038 R14: 00007f1005225fa0 R15: 00007ffdca2d5ad8
[  165.192385][ T6279]  </TASK>
[  165.575053][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'.
[  165.582821][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'.
[  165.962544][ T6287] loop2: detected capacity change from 0 to 512
[  166.605579][ T6287] FAT-fs (loop2): bogus number of FAT sectors
[  166.605605][ T6287] FAT-fs (loop2): Can't find a valid FAT filesystem
[  168.152499][ T6302] overlayfs: upper fs does not support file handles, falling back to index=off.
[  169.354249][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'.
[  169.355983][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.019006][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.099674][ T6319] loop3: detected capacity change from 0 to 1024
[  170.160090][ T6319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  170.160166][ T6319] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.208549][ T6319] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.147: corrupted xattr block 128: overlapping e_value 
[  170.328215][ T6319] EXT4-fs (loop3): Remounting filesystem read-only
[  170.453029][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  173.005022][ T5820] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  174.517585][ T5820] usb 2-1: device descriptor read/all, error -71
[  176.209701][ T6353] loop0: detected capacity change from 0 to 512
[  176.837889][ T6353] FAT-fs (loop0): bogus number of FAT sectors
[  176.837924][ T6353] FAT-fs (loop0): Can't find a valid FAT filesystem
[  178.644775][ T6363] loop0: detected capacity change from 0 to 512
[  178.680550][ T6363] udf: Unknown parameter '18446744073709551615ÿÿ'
[  181.695940][ T6381] loop3: detected capacity change from 0 to 32768
[  181.696644][ T6381] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  181.737559][ T6381] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.162 (6381)
[  181.745124][ T6381] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  181.745162][ T6381] BTRFS info (device loop3): using crc32c checksum algorithm
[  181.909577][ T6381] BTRFS info (device loop3): rebuilding free space tree
[  181.976766][ T6381] BTRFS info (device loop3): disabling free space tree
[  181.976861][ T6381] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  181.976881][ T6381] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  181.985489][ T6381] BTRFS info (device loop3): enabling ssd optimizations
[  181.985514][ T6381] BTRFS info (device loop3): turning on async discard
[  181.985528][ T6381] BTRFS info (device loop3): force clearing of disk cache
[  181.985544][ T6381] BTRFS info (device loop3): use zstd compression, level 3
[  182.914392][ T6405] loop0: detected capacity change from 0 to 1024
[  183.004719][ T5620] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  183.022780][ T6405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.082408][ T6405] FAULT_INJECTION: forcing a failure.
[  183.082408][ T6405] name failslab, interval 1, probability 0, space 0, times 0
[  183.082443][ T6405] CPU: 1 UID: 0 PID: 6405 Comm: syz.0.166 Not tainted syzkaller #0 PREEMPT(full) 
[  183.082466][ T6405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  183.082478][ T6405] Call Trace:
[  183.082487][ T6405]  <TASK>
[  183.082496][ T6405]  dump_stack_lvl+0xe8/0x150
[  183.082533][ T6405]  should_fail_ex+0x3eb/0x540
[  183.082567][ T6405]  should_failslab+0xa8/0x100
[  183.082596][ T6405]  ? __ext4_journal_start_sb+0x2bf/0x780
[  183.082620][ T6405]  kmem_cache_alloc_noprof+0x9c/0x600
[  183.082646][ T6405]  ? __ext4_journal_start_sb+0x2bf/0x780
[  183.082677][ T6405]  __ext4_journal_start_sb+0x2bf/0x780
[  183.082697][ T6405]  ? current_time+0x22f/0x380
[  183.082738][ T6405]  ext4_dirty_inode+0x93/0x110
[  183.082764][ T6405]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  183.082787][ T6405]  __mark_inode_dirty+0x3a8/0x13b0
[  183.082820][ T6405]  file_update_time_flags+0x399/0x440
[  183.082852][ T6405]  ext4_write_checks+0x9f/0x220
[  183.082879][ T6405]  ext4_buffered_write_iter+0xb0/0x380
[  183.082897][ T6405]  ? __pfx_futex_wake_mark+0x10/0x10
[  183.082919][ T6405]  ext4_file_write_iter+0xae4/0x1cd0
[  183.082951][ T6405]  ? lock_acquire+0x115/0x350
[  183.082977][ T6405]  ? __pfx_ext4_file_write_iter+0x10/0x10
[  183.083007][ T6405]  vfs_write+0x612/0xba0
[  183.083038][ T6405]  ? __pfx_vfs_write+0x10/0x10
[  183.083070][ T6405]  ? __fget_files+0x2a/0x420
[  183.083099][ T6405]  __x64_sys_pwrite64+0x196/0x220
[  183.083126][ T6405]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[  183.083162][ T6405]  do_syscall_64+0x166/0x520
[  183.083183][ T6405]  ? trace_irq_disable+0x3b/0x140
[  183.083205][ T6405]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.083226][ T6405]  ? clear_bhb_loop+0x70/0xc0
[  183.083252][ T6405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.083271][ T6405] RIP: 0033:0x7fc2e459e159
[  183.083292][ T6405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.083308][ T6405] RSP: 002b:00007fc2e54e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  183.083331][ T6405] RAX: ffffffffffffffda RBX: 00007fc2e4825fa0 RCX: 00007fc2e459e159
[  183.083346][ T6405] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004
[  183.083360][ T6405] RBP: 00007fc2e463503b R08: 0000000000000000 R09: 0000000000000000
[  183.083371][ T6405] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000
[  183.083383][ T6405] R13: 00007fc2e4826038 R14: 00007fc2e4825fa0 R15: 00007ffdb2745ed8
[  183.083416][ T6405]  </TASK>
[  183.559735][ T6415] loop1: detected capacity change from 0 to 256
[  183.623768][ T6415] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  183.654889][   T33] audit: type=1800 audit(1789160752.158:14): pid=6415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.168" name="file1" dev="loop1" ino=1048606 res=0 errno=0
[  184.033746][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.140127][ T6435] syz.1.173 (6435): drop_caches: 2
[  187.648740][ T6439] loop1: detected capacity change from 0 to 32768
[  188.699348][ T6439] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  188.854212][ T6439] XFS (loop1): Ending clean mount
[  189.009923][ T6451] comedi comedi0: board detection failed
[  189.392015][ T5622] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  192.714163][ T6481] loop0: detected capacity change from 0 to 512
[  192.723455][ T6004] IPVS: starting estimator thread 0...
[  192.725537][ T6481] FAT-fs (loop0): bogus number of FAT sectors
[  192.725558][ T6481] FAT-fs (loop0): Can't find a valid FAT filesystem
[  192.845059][ T6483] IPVS: using max 33 ests per chain, 79200 per kthread
[  192.962724][ T6489] syz.1.185 (6489): drop_caches: 2
[  193.531107][ T6494] gfs2: error -5 reading superblock
[  194.650983][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  194.651022][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  195.925125][ T5820] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  196.509411][ T5820] usb 1-1: New USB device found, idVendor=7dcc, idProduct=676e, bcdDevice=77.db
[  196.978539][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  196.978601][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  197.008404][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  197.008460][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  197.042340][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  197.042396][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  197.042440][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.085606][ T5820] usb 1-1: config 0 descriptor??
[  197.090805][ T5820] rndis_host 1-1:0.0: rndis: master #0/ffff88802d8b4000 slave #1/0000000000000000
[  197.328579][ T5820] usb 1-1: USB disconnect, device number 2
[  197.593633][ T6509] syzkaller0: entered promiscuous mode
[  197.593658][ T6509] syzkaller0: entered allmulticast mode
[  198.053128][ T5820] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  198.352635][ T5820] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  198.424336][ T5820] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.424417][ T5820] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  198.424486][ T5820] usb 5-1: config 0 interface 0 has no altsetting 0
[  198.438224][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.729397][ T5820] usb 5-1: config 0 descriptor??
[  199.007931][ T6527] Bluetooth: MGMT ver 1.23
[  199.120432][ T6534] syz.2.197 (6534): drop_caches: 2
[  199.800311][ T6525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  201.821174][ T6544] loop1: detected capacity change from 0 to 32768
[  201.823930][ T5820] usbhid 5-1:0.0: can't add hid device: -71
[  201.824046][ T5820] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  201.829925][ T5820] usb 5-1: USB disconnect, device number 2
[  201.857849][ T6538] Bluetooth: hci1: command 0x0406 tx timeout
[  201.857885][ T6538] Bluetooth: hci2: command 0x0406 tx timeout
[  201.857909][ T6538] Bluetooth: hci0: command 0x0406 tx timeout
[  201.857933][ T6538] Bluetooth: hci3: command 0x0406 tx timeout
[  201.914932][ T6544] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  201.989084][ T6544] XFS (loop1): Ending clean mount
[  202.017906][ T6544] XFS (loop1): Quotacheck needed: Please wait.
[  204.599906][ T6544] XFS (loop1): Quotacheck: Done.
[  204.651478][ T5622] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  205.094596][ T6569] loop4: detected capacity change from 0 to 512
[  207.039345][ T6586] syz.2.211 (6586): drop_caches: 2
[  207.041851][ T6585] loop1: detected capacity change from 0 to 64
[  207.563042][ T6587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.647306][ T5738] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  207.796126][ T5738] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  207.833201][ T5738] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.833239][ T5738] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  207.833286][ T5738] usb 5-1: config 0 interface 0 has no altsetting 0
[  207.833322][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.995483][ T5738] usb 5-1: config 0 descriptor??
[  209.324181][ T6604] loop3: detected capacity change from 0 to 32768
[  210.120584][ T6604] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  210.563282][ T6604] XFS (loop3): Ending clean mount
[  210.568465][ T6604] XFS (loop3): Quotacheck needed: Please wait.
[  210.762396][ T6604] XFS (loop3): Quotacheck: Done.
[  210.774902][ T5738] usbhid 5-1:0.0: can't add hid device: -71
[  210.775037][ T5738] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  210.783017][   T33] audit: type=1800 audit(1789160779.288:15): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.217" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0
[  210.860535][   T33] audit: type=1800 audit(1789160779.288:16): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.217" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  210.898531][ T5738] usb 5-1: USB disconnect, device number 3
[  210.904575][ T5620] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  215.228676][ T6637] Set syz1 is full, maxelem 6117 reached
[  215.594475][ T6634] loop3: detected capacity change from 0 to 32768
[  215.672651][ T6634] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.224 (6634)
[  215.825011][ T6647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  215.871442][ T6634] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  215.871467][ T6634] BTRFS info (device loop3): using sha256 checksum algorithm
[  216.332435][ T6634] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  216.417363][ T6634] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  216.688813][ T6634] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  216.978017][ T6634] BTRFS error (device loop3): open_ctree failed: -ENOMEM
[  217.231387][ T6674] syz.4.226 (6674): drop_caches: 2
[  218.951951][ T6685] loop4: detected capacity change from 0 to 512
[  218.954234][   T13] IPVS: starting estimator thread 0...
[  218.954491][ T6685] FAT-fs (loop4): bogus number of FAT sectors
[  218.954508][ T6685] FAT-fs (loop4): Can't find a valid FAT filesystem
[  219.041903][ T6682] loop2: detected capacity change from 0 to 32768
[  221.390622][ T6686] IPVS: using max 30 ests per chain, 72000 per kthread
[  221.435354][ T6682] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  221.616993][ T6682] XFS (loop2): Ending clean mount
[  221.636894][ T6682] XFS (loop2): Quotacheck needed: Please wait.
[  221.887376][ T6682] XFS (loop2): Quotacheck: Done.
[  221.969634][ T5628] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  223.906782][ T6722] fuse: Bad value for 'fd'
[  224.159167][ T6714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.946205][ T6711] Set syz1 is full, maxelem 6117 reached
[  227.240437][ T6737] FAULT_INJECTION: forcing a failure.
[  227.240437][ T6737] name failslab, interval 1, probability 0, space 0, times 0
[  227.240470][ T6737] CPU: 1 UID: 0 PID: 6737 Comm: syz.1.250 Not tainted syzkaller #0 PREEMPT(full) 
[  227.240493][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  227.240505][ T6737] Call Trace:
[  227.240514][ T6737]  <TASK>
[  227.240522][ T6737]  dump_stack_lvl+0xe8/0x150
[  227.240561][ T6737]  should_fail_ex+0x3eb/0x540
[  227.240597][ T6737]  should_failslab+0xa8/0x100
[  227.240630][ T6737]  __kmalloc_noprof+0xf9/0x710
[  227.240657][ T6737]  ? sk_prot_alloc+0xe7/0x210
[  227.240679][ T6737]  ? sk_prot_alloc+0xe7/0x210
[  227.240700][ T6737]  ? security_inode_alloc+0x39/0x310
[  227.240727][ T6737]  sk_prot_alloc+0xe7/0x210
[  227.240747][ T6737]  ? sk_alloc+0x27/0x390
[  227.240772][ T6737]  sk_alloc+0x3a/0x390
[  227.240800][ T6737]  bt_sock_alloc+0x3b/0x330
[  227.240820][ T6737]  ? hidp_sock_create+0x5c/0x180
[  227.240858][ T6737]  hidp_sock_create+0x80/0x180
[  227.240888][ T6737]  bt_sock_create+0x163/0x240
[  227.240913][ T6737]  __sock_create+0x4b5/0xac0
[  227.240954][ T6737]  __sys_socket+0xd6/0x1b0
[  227.240990][ T6737]  __x64_sys_socket+0x7a/0x90
[  227.241023][ T6737]  do_syscall_64+0x166/0x520
[  227.241045][ T6737]  ? trace_irq_disable+0x3b/0x140
[  227.241068][ T6737]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.241088][ T6737]  ? clear_bhb_loop+0x70/0xc0
[  227.241114][ T6737]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.241134][ T6737] RIP: 0033:0x7fa898b9e159
[  227.241155][ T6737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.241172][ T6737] RSP: 002b:00007fa899a50fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  227.241195][ T6737] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fa898b9e159
[  227.241210][ T6737] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 000000000000001f
[  227.241222][ T6737] RBP: 00007fa898c3503b R08: 0000000000000000 R09: 0000000000000000
[  227.241235][ T6737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  227.241248][ T6737] R13: 00007fa898e26038 R14: 00007fa898e25fa0 R15: 00007ffea5670658
[  227.241281][ T6737]  </TASK>
[  228.446396][ T6744] loop3: detected capacity change from 0 to 32768
[  228.490333][ T6744] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  228.546708][ T6744] XFS (loop3): Ending clean mount
[  228.555843][ T6744] XFS (loop3): Quotacheck needed: Please wait.
[  228.689693][ T6744] XFS (loop3): Quotacheck: Done.
[  228.744932][   T33] audit: type=1800 audit(1789160797.218:17): pid=6742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.253" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0
[  228.744997][   T33] audit: type=1800 audit(1789160797.218:18): pid=6742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.253" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  228.912808][ T5620] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  231.949031][ T6765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  232.273813][ T6771] syz.0.248 (6771): drop_caches: 2
[  233.957365][ T6780] loop3: detected capacity change from 0 to 4096
[  234.284482][ T6783] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  236.209780][ T6804] mmap: syz.1.260 (6804) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  240.339054][ T6818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  240.362318][ T6809] syzkaller1: entered promiscuous mode
[  240.362344][ T6809] syzkaller1: entered allmulticast mode
[  240.788201][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.276'.
[  240.788338][ T6828] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  240.816063][ T6828] batman_adv: batadv0: Removing interface: batadv_slave_1
[  241.126866][ T6832] loop0: detected capacity change from 0 to 512
[  241.194891][ T6832] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  241.202422][   T33] audit: type=1800 audit(1789160809.708:19): pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.277" name="bus" dev="loop0" ino=1048609 res=0 errno=0
[  241.848851][ T6819] loop2: detected capacity change from 0 to 40427
[  241.887989][ T6819] F2FS-fs (loop2): invalid crc value
[  242.576275][ T6842] overlayfs: upper fs does not support file handles, falling back to index=off.
[  243.624090][ T6819] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  243.655889][ T6819] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0
[  243.655921][ T6819] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  243.655993][ T6819] F2FS-fs (loop2): Start checkpoint disabled!
[  243.707436][ T6819] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0
[  243.951269][ T6856] loop0: detected capacity change from 0 to 1024
[  244.101091][ T6854] loop4: detected capacity change from 0 to 32768
[  244.117549][ T6854] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.275 (6854)
[  244.123419][ T6854] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  244.123447][ T6854] BTRFS info (device loop4): using sha256 checksum algorithm
[  244.301062][ T6854] BTRFS info (device loop4): enabling ssd optimizations
[  244.301093][ T6854] BTRFS info (device loop4): turning on sync discard
[  244.301110][ T6854] BTRFS info (device loop4): enabling free space tree
[  244.301129][ T6854] BTRFS info (device loop4): use zlib compression, level 3
[  245.876941][ T5615] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  248.059795][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'.
[  250.452320][ T6903] Can't find ip_set type hash:ne
[  250.961451][ T6914] loop1: detected capacity change from 0 to 1024
[  252.691270][ T6926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.299'.
[  252.933090][ T6924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  254.388907][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'.
[  255.221973][ T6935] loop4: detected capacity change from 0 to 512
[  255.236990][ T6935] udf: Unknown parameter '18446744073709551615ÿÿ'
[  257.021086][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  257.021149][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  259.265174][   T33] audit: type=1326 audit(1789160827.758:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.3.311" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcbb39e159 code=0x0
[  260.911463][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'.
[  262.499217][ T6978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.653161][ T6985] nvme nvme0: rdma connection establishment failed (-104)
[  263.589541][ T6999] loop4: detected capacity change from 0 to 1024
[  265.706196][ T7016] loop3: detected capacity change from 0 to 1024
[  265.849799][ T7018] netlink: 132 bytes leftover after parsing attributes in process `syz.4.328'.
[  265.854639][ T7016] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  265.882948][ T7016] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  265.897500][ T7016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.993513][ T7028] loop4: detected capacity change from 0 to 512
[  266.997380][ T7028] EXT4-fs (loop4): invalid journal inode
[  266.997466][ T7028] EXT4-fs (loop4): can't get journal size
[  267.000037][ T7028] EXT4-fs (loop4): 1 truncate cleaned up
[  267.002156][ T7028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  267.962102][ T7033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'.
[  268.099191][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.538499][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.359111][ T7036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  269.935409][ T7051] loop4: detected capacity change from 0 to 512
[  269.958642][ T7051] udf: Unknown parameter '18446744073709551615ÿÿ'
[  272.572013][ T7069] loop2: detected capacity change from 0 to 512
[  272.585929][ T7068] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  272.600970][ T7069] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  272.624285][ T7069] EXT4-fs (loop2): 1 truncate cleaned up
[  272.663478][ T7069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.722303][ T7069] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  272.803540][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.295050][ T1225] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  273.401922][ T7084] loop0: detected capacity change from 0 to 128
[  273.408545][ T7084] EXT4-fs (loop0): Test dummy encryption mode enabled
[  273.465770][ T1225] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  273.470098][ T1225] usb 3-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  273.501338][ T7084] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  273.504300][ T7084] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  273.603058][ T1225] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  273.603083][ T1225] usb 3-1: Manufacturer: syz
[  273.603098][ T1225] usb 3-1: SerialNumber: syz
[  273.760507][ T7081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  273.854287][ T5633] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  274.030066][ T1225] usbhid 3-1:36.0: couldn't find an input interrupt endpoint
[  275.391571][ T1225] usb 3-1: USB disconnect, device number 3
[  275.746020][ T7099] loop3: detected capacity change from 0 to 512
[  275.750070][ T7099] udf: Unknown parameter '18446744073709551615ÿÿ'
[  276.636882][ T1225] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  276.788210][ T1225] usb 5-1: Using ep0 maxpacket: 16
[  276.788779][ T1225] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  276.796266][ T1225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.796293][ T1225] usb 5-1: Product: syz
[  276.796307][ T1225] usb 5-1: Manufacturer: syz
[  276.796319][ T1225] usb 5-1: SerialNumber: syz
[  276.829520][ T1225] usb 5-1: config 0 descriptor??
[  276.863662][ T1225] hub 5-1:0.0: bad descriptor, ignoring hub
[  276.863694][ T1225] hub 5-1:0.0: probe with driver hub failed with error -5
[  278.273002][ T1225] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  278.320191][ T4170] usb 5-1: Failed to submit usb control message: -71
[  278.320246][ T4170] usb 5-1: unable to send the bmi data to the device: -71
[  278.320264][ T4170] usb 5-1: unable to get target info from device
[  278.320278][ T4170] usb 5-1: could not get target info (-71)
[  278.320317][ T4170] usb 5-1: could not probe fw (-71)
[  278.349456][ T1225] usb 5-1: USB disconnect, device number 4
[  280.269338][ T7125] loop1: detected capacity change from 0 to 32768
[  280.292290][ T7125] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  280.292314][ T7125] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  280.349346][ T7125] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  280.375317][ T3105] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  280.375339][ T3105] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  280.494760][ T3105] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 119ms
[  280.501953][ T3105] gfs2: fsid=syz:syz.0: jid=0: Done
[  280.502810][ T7125] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  280.513809][ T7125] gfs2: fsid=syz:syz.0:  R: n:844424930131985 f:00 b:0/0 i:0 q:0 r:0 e:0
[  280.513844][ T7125] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - RG = 844424930131985, function = compute_bitstructs, file = fs/gfs2/rgrp.c, line = 792
[  280.513870][ T7125] gfs2: fsid=syz:syz.0: G:  s:UN n:3/3000000000011 f:an t:UN d:EX/0 a:0 v:0 r:1 m:20 p:0
[  280.513905][ T7125] CPU: 0 UID: 0 PID: 7125 Comm: syz.1.363 Not tainted syzkaller #0 PREEMPT(full) 
[  280.513926][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  280.513936][ T7125] Call Trace:
[  280.513943][ T7125]  <TASK>
[  280.513951][ T7125]  dump_stack_lvl+0xe8/0x150
[  280.513985][ T7125]  gfs2_withdraw+0xc3/0x1b0
[  280.514018][ T7125]  gfs2_consist_rgrpd_i+0x1a0/0x240
[  280.514050][ T7125]  ? __pfx_gfs2_consist_rgrpd_i+0x10/0x10
[  280.514078][ T7125]  ? __pfx_glock_wake_function+0x10/0x10
[  280.514140][ T7125]  ? mutex_init_lockdep+0xdf/0x110
[  280.514170][ T7125]  gfs2_ri_update+0x578/0x1a00
[  280.514196][ T7125]  ? inode_dio_wait+0x7f/0x270
[  280.514236][ T7125]  ? __pfx_gfs2_ri_update+0x10/0x10
[  280.514275][ T7125]  ? inode_go_held+0xe7/0x1f0
[  280.514305][ T7125]  ? gfs2_glock_wait+0x205/0x2a0
[  280.514328][ T7125]  gfs2_rindex_update+0x312/0x3d0
[  280.514363][ T7125]  ? __pfx_gfs2_rindex_update+0x10/0x10
[  280.514392][ T7125]  ? init_inodes+0x24e/0x320
[  280.514423][ T7125]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  280.514456][ T7125]  init_inodes+0x24e/0x320
[  280.514526][ T7125]  gfs2_fill_super+0x193f/0x20b0
[  280.514567][ T7125]  ? __pfx_gfs2_fill_super+0x10/0x10
[  280.514600][ T7125]  ? init_locking+0xb8/0x210
[  280.514628][ T7125]  ? sb_set_blocksize+0x155/0x240
[  280.514655][ T7125]  ? setup_bdev_super+0x586/0x680
[  280.514684][ T7125]  get_tree_bdev_flags+0x430/0x4f0
[  280.514716][ T7125]  ? __pfx_gfs2_fill_super+0x10/0x10
[  280.514743][ T7125]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  280.514777][ T7125]  gfs2_get_tree+0x51/0x1e0
[  280.514810][ T7125]  vfs_get_tree+0x92/0x2a0
[  280.514835][ T7125]  do_new_mount+0x319/0xdc0
[  280.514861][ T7125]  ? __pfx_do_new_mount+0x10/0x10
[  280.514884][ T7125]  ? ns_capable+0x84/0xe0
[  280.514913][ T7125]  ? path_mount+0x647/0x1050
[  280.514938][ T7125]  ? user_path_at+0xd4/0x160
[  280.514964][ T7125]  __se_sys_mount+0x31d/0x420
[  280.514991][ T7125]  ? __pfx___se_sys_mount+0x10/0x10
[  280.515019][ T7125]  ? __x64_sys_mount+0x20/0xc0
[  280.515043][ T7125]  do_syscall_64+0x166/0x520
[  280.515064][ T7125]  ? trace_irq_disable+0x3b/0x140
[  280.515086][ T7125]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.515107][ T7125]  ? clear_bhb_loop+0x70/0xc0
[  280.515133][ T7125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.515153][ T7125] RIP: 0033:0x7fa898b9f3ca
[  280.515174][ T7125] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.515191][ T7125] RSP: 002b:00007fa899a50e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  280.515214][ T7125] RAX: ffffffffffffffda RBX: 00007fa899a50ee0 RCX: 00007fa898b9f3ca
[  280.515230][ T7125] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007fa899a50ea0
[  280.515244][ T7125] RBP: 00002000000124c0 R08: 00007fa899a50ee0 R09: 0000000000000000
[  280.515258][ T7125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500
[  280.515270][ T7125] R13: 00007fa899a50ea0 R14: 00000000000125c7 R15: 0000200000000180
[  280.515304][ T7125]  </TASK>
[  280.616769][ T7123] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[  281.341306][ T7132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  284.860587][ T7156] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  285.319227][ T7162] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[  285.400258][ T7165] loop4: detected capacity change from 0 to 512
[  285.460084][ T7165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.480192][ T7165] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  285.553578][   T33] audit: type=1800 audit(1789160854.058:21): pid=7165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.377" name="file1" dev="loop4" ino=15 res=0 errno=0
[  285.644118][ T7170] loop2: detected capacity change from 0 to 4096
[  285.653351][ T7170] EXT4-fs: Ignoring removed nobh option
[  285.653424][ T7170] EXT4-fs: Ignoring removed bh option
[  285.676452][ T7170] EXT4-fs (loop2): Test dummy encryption mode enabled
[  285.753989][ T7170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.756874][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.241678][   T33] audit: type=1800 audit(1789160854.748:22): pid=7170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.378" name="file1" dev="loop2" ino=19 res=0 errno=0
[  286.799004][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.574708][ T7186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  289.920423][ T7197] loop0: detected capacity change from 0 to 8
[  290.085376][ T5606] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  290.256711][ T7199] loop2: detected capacity change from 0 to 512
[  290.275941][ T5606] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00
[  290.281898][ T5606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.301096][ T7199] EXT4-fs (loop2): invalid journal inode
[  290.301177][ T7199] EXT4-fs (loop2): can't get journal size
[  290.345313][ T7201] FAULT_INJECTION: forcing a failure.
[  290.345313][ T7201] name failslab, interval 1, probability 0, space 0, times 0
[  290.345346][ T7201] CPU: 1 UID: 0 PID: 7201 Comm: syz.0.387 Not tainted syzkaller #0 PREEMPT(full) 
[  290.345369][ T7201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  290.345381][ T7201] Call Trace:
[  290.345389][ T7201]  <TASK>
[  290.345398][ T7201]  dump_stack_lvl+0xe8/0x150
[  290.345434][ T7201]  should_fail_ex+0x3eb/0x540
[  290.345470][ T7201]  should_failslab+0xa8/0x100
[  290.345498][ T7201]  ? alloc_empty_file+0x5b/0x1d0
[  290.345528][ T7201]  kmem_cache_alloc_noprof+0x9c/0x600
[  290.345553][ T7201]  ? alloc_empty_file+0x5b/0x1d0
[  290.345588][ T7201]  alloc_empty_file+0x5b/0x1d0
[  290.345617][ T7201]  alloc_file_pseudo+0x110/0x1e0
[  290.345648][ T7201]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  290.345678][ T7201]  ? _raw_spin_unlock+0x28/0x50
[  290.345703][ T7201]  ? alloc_fd+0x651/0x6c0
[  290.345726][ T7201]  sock_alloc_file+0xb8/0x2e0
[  290.345750][ T7201]  ? __sys_socket+0x12b/0x1b0
[  290.345780][ T7201]  __sys_socket+0x13f/0x1b0
[  290.345814][ T7201]  __x64_sys_socket+0x7a/0x90
[  290.345845][ T7201]  do_syscall_64+0x166/0x520
[  290.345864][ T7201]  ? trace_irq_disable+0x3b/0x140
[  290.345885][ T7201]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.345905][ T7201]  ? clear_bhb_loop+0x70/0xc0
[  290.345929][ T7201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.345950][ T7201] RIP: 0033:0x7fc2e459e159
[  290.345969][ T7201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  290.345986][ T7201] RSP: 002b:00007fc2e54e0fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  290.346018][ T7201] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fc2e459e159
[  290.346033][ T7201] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 000000000000001f
[  290.346045][ T7201] RBP: 00007fc2e463503b R08: 0000000000000000 R09: 0000000000000000
[  290.346057][ T7201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  290.346069][ T7201] R13: 00007fc2e4826038 R14: 00007fc2e4825fa0 R15: 00007ffdb2745ed8
[  290.346101][ T7201]  </TASK>
[  290.369331][ T7199] EXT4-fs (loop2): 1 truncate cleaned up
[  290.522381][ T7199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.871951][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.084407][    C1] usb 4-1: NFC: Urb failure (status -71)
[  291.096311][ T5606] usb 4-1: NFC: Unable to get FW version
[  291.142402][ T5606] pn533_usb 4-1:1.0: probe with driver pn533_usb failed with error -71
[  291.159176][ T5606] usb 4-1: USB disconnect, device number 2
[  291.930302][ T1044] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  291.972153][ T1044] (NULL device *): queue 0 connect admin queue failed (-111).
[  291.972185][ T1044] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  291.972204][ T1044] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  291.976715][ T7205] nvme nvme0: NVME-FC{0}: new ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery", hostnqn: nqn.2014-08.org.nvmexpress:uuid:25833e99-e280-4896-9723-3f656392d3c1
[  292.324600][ T7220] loop3: detected capacity change from 0 to 512
[  292.342517][ T7220] udf: Unknown parameter '18446744073709551615ÿÿ'
[  292.449319][ T7222] loop4: detected capacity change from 0 to 164
[  293.974927][ T3105] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  294.006602][ T1044] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  294.009859][ T1044] (NULL device *): queue 0 connect admin queue failed (-111).
[  294.009898][ T1044] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  294.009915][ T1044] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  294.126962][ T3105] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  294.136212][ T3105] usb 1-1: config 1 has an invalid interface number: 3 but max is 0
[  294.136236][ T3105] usb 1-1: config 1 has no interface number 0
[  294.171304][ T3105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.171334][ T3105] usb 1-1: Product: syz
[  294.171348][ T3105] usb 1-1: Manufacturer: syz
[  294.171362][ T3105] usb 1-1: SerialNumber: syz
[  294.516095][ T3105] usb 1-1: 3:1 : does not exist
[  294.516122][ T3105] usb 1-1: 3:2 : does not exist
[  294.648761][ T7229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  295.638262][ T7240] loop4: detected capacity change from 0 to 512
[  295.673034][ T7240] EXT4-fs (loop4): invalid journal inode
[  295.673120][ T7240] EXT4-fs (loop4): can't get journal size
[  295.704663][ T7240] EXT4-fs (loop4): 1 truncate cleaned up
[  295.719582][ T7240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.921883][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.087346][ T3105] usb 1-1: USB disconnect, device number 3
[  296.095602][ T1044] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  296.104477][ T1044] (NULL device *): queue 0 connect admin queue failed (-111).
[  296.104507][ T1044] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  296.104523][ T1044] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  296.240432][ T7245] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.400'.
[  297.288614][ T7258] loop4: detected capacity change from 0 to 164
[  297.796560][ T5739] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  297.845956][ T3105] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  298.004993][ T5739] usb 5-1: Using ep0 maxpacket: 32
[  298.007760][ T5739] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  298.010497][ T5739] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  298.010521][ T5739] usb 5-1: config 0 has no interface number 0
[  298.010561][ T5739] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  298.010586][ T5739] usb 5-1: config 0 interface 85 has no altsetting 0
[  298.055612][ T5739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.055638][ T5739] usb 5-1: Product: syz
[  298.055651][ T5739] usb 5-1: Manufacturer: syz
[  298.055688][ T5739] usb 5-1: SerialNumber: syz
[  298.069009][ T5739] usb 5-1: config 0 descriptor??
[  298.106593][ T3105] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00
[  298.145053][ T3105] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.168322][ T1044] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  298.175619][ T1044] (NULL device *): queue 0 connect admin queue failed (-111).
[  298.175645][ T1044] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  298.175661][ T1044] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  298.576358][ T5739] appletouch 5-1:0.85: Failed to read mode from device.
[  298.576538][ T5739] appletouch 5-1:0.85: probe with driver appletouch failed with error -5
[  298.617018][ T5739] usb 5-1: USB disconnect, device number 5
[  298.698559][ T7278] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.412'.
[  298.797091][ T7273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.409'.
[  299.016616][    C0] usb 2-1: NFC: Urb failure (status -71)
[  299.029133][ T3105] usb 2-1: NFC: Unable to get FW version
[  299.032927][ T3105] pn533_usb 2-1:1.0: probe with driver pn533_usb failed with error -71
[  299.068614][ T3105] usb 2-1: USB disconnect, device number 4
[  300.629542][ T1104] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  300.631584][ T1104] (NULL device *): queue 0 connect admin queue failed (-111).
[  300.631601][ T1104] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  300.631611][ T1104] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  300.946340][ T7290] gfs2: error -5 reading superblock
[  301.985865][ T7297] loop1: detected capacity change from 0 to 512
[  302.017560][ T7297] EXT4-fs (loop1): invalid journal inode
[  302.017650][ T7297] EXT4-fs (loop1): can't get journal size
[  302.059602][ T7297] EXT4-fs (loop1): 1 truncate cleaned up
[  302.075252][ T7297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  302.142721][ T7293] syzkaller1: entered promiscuous mode
[  302.142748][ T7293] syzkaller1: entered allmulticast mode
[  302.180857][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.377926][ T7301] FAULT_INJECTION: forcing a failure.
[  302.377926][ T7301] name fail_futex, interval 1, probability 0, space 0, times 1
[  302.377958][ T7301] CPU: 1 UID: 0 PID: 7301 Comm: syz.1.420 Not tainted syzkaller #0 PREEMPT(full) 
[  302.377980][ T7301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  302.377993][ T7301] Call Trace:
[  302.378001][ T7301]  <TASK>
[  302.378010][ T7301]  dump_stack_lvl+0xe8/0x150
[  302.378047][ T7301]  should_fail_ex+0x3eb/0x540
[  302.378083][ T7301]  get_futex_key+0x1b4/0x1580
[  302.378113][ T7301]  ? kasan_save_stack+0x4d/0x60
[  302.378141][ T7301]  ? call_rcu+0xee/0x8b0
[  302.378166][ T7301]  ? fput_close_sync+0x11f/0x240
[  302.378185][ T7301]  ? __x64_sys_close+0x7e/0x110
[  302.378207][ T7301]  ? __pfx_get_futex_key+0x10/0x10
[  302.378246][ T7301]  futex_wake+0x119/0x5f0
[  302.378273][ T7301]  ? __pfx_futex_wake+0x10/0x10
[  302.378310][ T7301]  do_futex+0x458/0x4e0
[  302.378334][ T7301]  ? call_rcu+0x64d/0x8b0
[  302.378366][ T7301]  ? __pfx_do_futex+0x10/0x10
[  302.378404][ T7301]  __se_sys_futex+0x3a8/0x450
[  302.378436][ T7301]  ? fput_close_sync+0x11f/0x240
[  302.378456][ T7301]  ? __pfx___se_sys_futex+0x10/0x10
[  302.378492][ T7301]  ? __x64_sys_futex+0x21/0xf0
[  302.378524][ T7301]  do_syscall_64+0x166/0x520
[  302.378545][ T7301]  ? trace_irq_disable+0x3b/0x140
[  302.378568][ T7301]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.378593][ T7301]  ? clear_bhb_loop+0x70/0xc0
[  302.378619][ T7301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.378640][ T7301] RIP: 0033:0x7fa898b9e159
[  302.378661][ T7301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  302.378678][ T7301] RSP: 002b:00007fa899a510e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  302.378701][ T7301] RAX: ffffffffffffffda RBX: 00007fa898e25fa8 RCX: 00007fa898b9e159
[  302.378716][ T7301] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa898e25fac
[  302.378729][ T7301] RBP: 00007fa898e25fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  302.378743][ T7301] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[  302.378755][ T7301] R13: 00007fa898e26038 R14: 00007ffea5670570 R15: 00007ffea5670658
[  302.378788][ T7301]  </TASK>
[  302.645014][  T751] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  302.646641][  T751] (NULL device *): queue 0 connect admin queue failed (-111).
[  302.646660][  T751] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  302.646670][  T751] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  304.725073][   T51] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  304.732438][   T51] (NULL device *): queue 0 connect admin queue failed (-111).
[  304.732471][   T51] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  304.732489][   T51] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  304.777659][ T7312] loop4: detected capacity change from 0 to 2048
[  304.830628][ T7312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.830692][ T7312] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.682135][   T33] audit: type=1800 audit(1789160874.188:23): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.425" name="file0" dev="loop4" ino=13 res=0 errno=0
[  305.872673][ T7312] fs-verity (loop4, inode 13): Error -4 building Merkle tree
[  305.923538][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.369350][ T7332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.431'.
[  306.825214][   T51] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  306.828158][   T51] (NULL device *): queue 0 connect admin queue failed (-111).
[  306.828182][   T51] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  306.828194][   T51] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  307.372941][ T1044] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.770619][ T1044] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.988398][ T1044] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.389748][   T39] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  309.391729][   T39] (NULL device *): queue 0 connect admin queue failed (-111).
[  309.391759][   T39] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  309.391777][   T39] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  309.583958][ T1044] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.759721][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  309.775176][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  309.777403][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  309.784109][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  309.784697][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  311.452111][   T39] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  311.452364][   T39] (NULL device *): queue 0 connect admin queue failed (-111).
[  311.452386][   T39] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  311.452403][   T39] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  311.561205][ T1044] bridge_slave_1: left allmulticast mode
[  311.561252][ T1044] bridge_slave_1: left promiscuous mode
[  311.565325][ T1044] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.402934][ T5626] Bluetooth: hci4: command tx timeout
[  312.723369][ T1044] bridge_slave_0: left allmulticast mode
[  312.723398][ T1044] bridge_slave_0: left promiscuous mode
[  312.724541][ T1044] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.577422][ T4170] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  313.594863][ T4170] (NULL device *): queue 0 connect admin queue failed (-111).
[  313.594905][ T4170] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  313.594924][ T4170] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  314.404918][ T5626] Bluetooth: hci4: command tx timeout
[  316.228151][ T6004] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  316.244406][ T6004] (NULL device *): queue 0 connect admin queue failed (-111).
[  316.244459][ T6004] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  316.244476][ T6004] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  316.419657][ T7411] loop2: detected capacity change from 0 to 1024
[  316.497053][ T5626] Bluetooth: hci4: command tx timeout
[  316.518560][ T7411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  317.170635][ T1044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  317.187495][ T1044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  317.201134][ T1044] bond0 (unregistering): Released all slaves
[  317.321567][ T7426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.453'.
[  317.531036][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  317.531101][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  317.580517][ T7424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  317.720451][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.820245][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1
[  318.246883][  T751] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222  rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery"
[  318.253328][  T751] (NULL device *): queue 0 connect admin queue failed (-111).
[  318.253371][  T751] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111)
[  318.253389][  T751] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds
[  318.564860][ T5626] Bluetooth: hci4: command tx timeout
[  319.376033][ T3105] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  319.535436][ T3105] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  319.536600][ T3105] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  319.536655][ T3105] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.810310][ T3105] as10x_usb: device has been detected
[  319.818244][ T3105] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  319.985529][ T3105] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  320.090384][ T7449] ------------[ cut here ]------------
[  320.090401][ T7449] DEBUG_LOCKS_WARN_ON(lock->magic != lock)
[  320.090409][ T7449] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x132a/0x15a0, CPU#1: syz.2.457/7449
[  320.112189][ T7449] Modules linked in:
[  320.116176][ T7449] CPU: 1 UID: 0 PID: 7449 Comm: syz.2.457 Not tainted syzkaller #0 PREEMPT(full) 
[  320.125719][ T7449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  320.136136][ T7449] RIP: 0010:__mutex_lock+0x1331/0x15a0
[  320.141843][ T7449] Code: cb 7a 90 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d b3 54 90 04 00 75 13 48 8d 3d 66 51 93 04 48 c7 c6 40 14 0d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f
[  320.162345][ T7449] RSP: 0018:ffffc9000d53f680 EFLAGS: 00010246
[  320.168794][ T7449] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  320.177132][ T7449] RDX: ffffc90005b21000 RSI: ffffffff8c0d1440 RDI: ffffffff907dc890
[  320.185309][ T7449] RBP: ffffc9000d53f820 R08: ffffffff907acbd3 R09: 1ffffffff20f597a
[  320.193299][ T7449] R10: dffffc0000000000 R11: fffffbfff20f597b R12: ffff8880271f8010
[  320.201293][ T7449] R13: 0000000000000000 R14: 1ffff92001aa7ee4 R15: 0000000000000000
[  320.209475][ T7449] FS:  00007f840cbab6c0(0000) GS:ffff888124db7000(0000) knlGS:0000000000000000
[  320.218511][ T7449] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  320.225423][ T7449] CR2: 00007fdcb3af5000 CR3: 00000000284b6000 CR4: 00000000003526f0
[  320.233679][ T7449] Call Trace:
[  320.237039][ T7449]  <TASK>
[  320.240118][ T7449]  ? __lock_acquire+0x747/0x2de0
[  320.245569][ T7449]  ? as102_stream_ctrl+0x27/0xc0
[  320.250751][ T7449]  ? trace_contention_end+0x3d/0x140
[  320.256357][ T7449]  ? __pfx___mutex_lock+0x10/0x10
[  320.261429][ T7449]  ? __mutex_lock+0x305/0x15a0
[  320.266250][ T7449]  ? __mutex_unlock_slowpath+0x731/0x900
[  320.271979][ T7449]  ? lock_acquire+0x115/0x350
[  320.277051][ T7449]  as102_stream_ctrl+0x27/0xc0
[  320.281880][ T7449]  __dvb_frontend_open+0x2e9/0xca0
[  320.287142][ T7449]  ? dvb_frontend_open+0x1ce/0x870
[  320.292445][ T7449]  ? down_read+0x2b9/0x320
[  320.296931][ T7449]  ? __pfx_dvb_frontend_open+0x10/0x10
[  320.302389][ T7449]  dvb_device_open+0x24f/0x340
[  320.307173][ T7449]  chrdev_open+0x4d9/0x600
[  320.312030][ T7449]  ? __pfx_chrdev_open+0x10/0x10
[  320.317075][ T7449]  ? devcgroup_check_permission+0x31/0x8f0
[  320.322900][ T7449]  ? __pfx_chrdev_open+0x10/0x10
[  320.327946][ T7449]  do_dentry_open+0x80e/0x1360
[  320.332725][ T7449]  vfs_open_consume+0x4a/0x350
[  320.337599][ T7449]  ? path_openat+0x14bb/0x1e40
[  320.342446][ T7449]  path_openat+0x14d7/0x1e40
[  320.347050][ T7449]  do_file_open+0x23e/0x4a0
[  320.351634][ T7449]  ? __pfx_do_file_open+0x10/0x10
[  320.357016][ T7449]  ? _raw_spin_unlock+0x28/0x50
[  320.361862][ T7449]  ? alloc_fd+0x651/0x6c0
[  320.366320][ T7449]  do_sys_openat2+0x115/0x200
[  320.371166][ T7449]  ? __se_sys_futex+0x3a8/0x450
[  320.376142][ T7449]  ? __pfx_do_sys_openat2+0x10/0x10
[  320.381353][ T7449]  ? rcu_is_watching+0x16/0xb0
[  320.386274][ T7449]  __x64_sys_openat+0x138/0x170
[  320.391127][ T7449]  do_syscall_64+0x166/0x520
[  320.395724][ T7449]  ? trace_irq_disable+0x3b/0x140
[  320.400772][ T7449]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.406850][ T7449]  ? clear_bhb_loop+0x70/0xc0
[  320.411543][ T7449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.417454][ T7449] RIP: 0033:0x7f840bd5e98e
[  320.421875][ T7449] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  320.441504][ T7449] RSP: 002b:00007f840cbaab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  320.449938][ T7449] RAX: ffffffffffffffda RBX: 00007f840cbab6c0 RCX: 00007f840bd5e98e
[  320.458017][ T7449] RDX: 0000000000000802 RSI: 00007f840cbaac00 RDI: ffffffffffffff9c
[  320.466008][ T7449] RBP: 00007f840cbaac00 R08: 0000000000000000 R09: 0000000000000000
[  320.474083][ T7449] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  320.482292][ T7449] R13: 00007f840c026038 R14: 00007f840c025fa0 R15: 00007fffb369fb78
[  320.491002][ T7449]  </TASK>
[  320.494045][ T7449] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  320.501329][ T7449] CPU: 1 UID: 0 PID: 7449 Comm: syz.2.457 Not tainted syzkaller #0 PREEMPT(full) 
[  320.510511][ T7449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  320.520558][ T7449] Call Trace:
[  320.523832][ T7449]  <TASK>
[  320.526857][ T7449]  vpanic+0x56d/0xa70
[  320.530855][ T7449]  ? __pfx__printk+0x10/0x10
[  320.535493][ T7449]  ? __pfx_vpanic+0x10/0x10
[  320.540076][ T7449]  ? is_bpf_text_address+0x292/0x2b0
[  320.545360][ T7449]  ? is_bpf_text_address+0x26/0x2b0
[  320.550551][ T7449]  panic+0xc5/0xd0
[  320.554292][ T7449]  ? __pfx_panic+0x10/0x10
[  320.558718][ T7449]  __warn+0x315/0x4c0
[  320.562724][ T7449]  ? __mutex_lock+0x132a/0x15a0
[  320.567566][ T7449]  ? __mutex_lock+0x132a/0x15a0
[  320.572406][ T7449]  __report_bug+0x276/0x570
[  320.577087][ T7449]  ? __mutex_lock+0x132a/0x15a0
[  320.581950][ T7449]  ? __pfx___report_bug+0x10/0x10
[  320.586993][ T7449]  ? __lock_acquire+0x747/0x2de0
[  320.592009][ T7449]  report_bug_entry+0x19b/0x290
[  320.596870][ T7449]  ? __mutex_lock+0x1331/0x15a0
[  320.601709][ T7449]  ? __mutex_lock+0x1336/0x15a0
[  320.606634][ T7449]  handle_bug+0xce/0x200
[  320.610967][ T7449]  exc_invalid_op+0x1a/0x50
[  320.615459][ T7449]  asm_exc_invalid_op+0x1a/0x20
[  320.620296][ T7449] RIP: 0010:__mutex_lock+0x1331/0x15a0
[  320.625830][ T7449] Code: cb 7a 90 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d b3 54 90 04 00 75 13 48 8d 3d 66 51 93 04 48 c7 c6 40 14 0d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f
[  320.645563][ T7449] RSP: 0018:ffffc9000d53f680 EFLAGS: 00010246
[  320.651848][ T7449] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  320.659849][ T7449] RDX: ffffc90005b21000 RSI: ffffffff8c0d1440 RDI: ffffffff907dc890
[  320.667906][ T7449] RBP: ffffc9000d53f820 R08: ffffffff907acbd3 R09: 1ffffffff20f597a
[  320.676077][ T7449] R10: dffffc0000000000 R11: fffffbfff20f597b R12: ffff8880271f8010
[  320.684054][ T7449] R13: 0000000000000000 R14: 1ffff92001aa7ee4 R15: 0000000000000000
[  320.692287][ T7449]  ? __lock_acquire+0x747/0x2de0
[  320.697249][ T7449]  ? as102_stream_ctrl+0x27/0xc0
[  320.702210][ T7449]  ? trace_contention_end+0x3d/0x140
[  320.707581][ T7449]  ? __pfx___mutex_lock+0x10/0x10
[  320.712608][ T7449]  ? __mutex_lock+0x305/0x15a0
[  320.717388][ T7449]  ? __mutex_unlock_slowpath+0x731/0x900
[  320.723142][ T7449]  ? lock_acquire+0x115/0x350
[  320.727938][ T7449]  as102_stream_ctrl+0x27/0xc0
[  320.732943][ T7449]  __dvb_frontend_open+0x2e9/0xca0
[  320.738342][ T7449]  ? dvb_frontend_open+0x1ce/0x870
[  320.743649][ T7449]  ? down_read+0x2b9/0x320
[  320.748097][ T7449]  ? __pfx_dvb_frontend_open+0x10/0x10
[  320.753693][ T7449]  dvb_device_open+0x24f/0x340
[  320.758567][ T7449]  chrdev_open+0x4d9/0x600
[  320.763100][ T7449]  ? __pfx_chrdev_open+0x10/0x10
[  320.768238][ T7449]  ? devcgroup_check_permission+0x31/0x8f0
[  320.774084][ T7449]  ? __pfx_chrdev_open+0x10/0x10
[  320.780338][ T7449]  do_dentry_open+0x80e/0x1360
[  320.785301][ T7449]  vfs_open_consume+0x4a/0x350
[  320.790298][ T7449]  ? path_openat+0x14bb/0x1e40
[  320.795346][ T7449]  path_openat+0x14d7/0x1e40
[  320.799940][ T7449]  do_file_open+0x23e/0x4a0
[  320.804442][ T7449]  ? __pfx_do_file_open+0x10/0x10
[  320.809556][ T7449]  ? _raw_spin_unlock+0x28/0x50
[  320.814402][ T7449]  ? alloc_fd+0x651/0x6c0
[  320.819131][ T7449]  do_sys_openat2+0x115/0x200
[  320.823822][ T7449]  ? __se_sys_futex+0x3a8/0x450
[  320.828705][ T7449]  ? __pfx_do_sys_openat2+0x10/0x10
[  320.833909][ T7449]  ? rcu_is_watching+0x16/0xb0
[  320.838793][ T7449]  __x64_sys_openat+0x138/0x170
[  320.843654][ T7449]  do_syscall_64+0x166/0x520
[  320.848245][ T7449]  ? trace_irq_disable+0x3b/0x140
[  320.853295][ T7449]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.859483][ T7449]  ? clear_bhb_loop+0x70/0xc0
[  320.864169][ T7449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.870064][ T7449] RIP: 0033:0x7f840bd5e98e
[  320.874508][ T7449] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  320.894286][ T7449] RSP: 002b:00007f840cbaab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  320.902897][ T7449] RAX: ffffffffffffffda RBX: 00007f840cbab6c0 RCX: 00007f840bd5e98e
[  320.911677][ T7449] RDX: 0000000000000802 RSI: 00007f840cbaac00 RDI: ffffffffffffff9c
[  320.919754][ T7449] RBP: 00007f840cbaac00 R08: 0000000000000000 R09: 0000000000000000
[  320.927776][ T7449] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  320.935940][ T7449] R13: 00007f840c026038 R14: 00007f840c025fa0 R15: 00007fffb369fb78
[  320.944112][ T7449]  </TASK>
[  320.947499][ T7449] Kernel Offset: disabled
[  320.951859][ T7449] Rebooting in 86400 seconds..