last executing test programs:

1.526119323s ago: executing program 0 (id=2825):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="eab0817dbdb5f31a28001280110001006272696467650000000000020000000010000580040018000500010001000000140003006272696467655f736c6176655f30"], 0x5c}, 0x1, 0x0, 0x0, 0x24044054}, 0x4040)

1.485067854s ago: executing program 0 (id=2827):
r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
sendfile(r0, r0, 0x0, 0x1000000201005)

1.458335955s ago: executing program 0 (id=2829):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8)

1.427029685s ago: executing program 0 (id=2831):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800082, &(0x7f0000000340)=ANY=[], 0x81, 0x105b3, &(0x7f0000016c80)="$eJzs3MtuG2UbB/DH7ZeevlIi1AOsGAkhxRK24iSNQEIoQCuoRKqIw4IVOLZjubU9Uewc6IpFu4JLYIuEUHdcA5veRsUCiRUSuyKQZyYogSwoceS2+f2k0X/m9bzPvOPO5vFUCeDYmk5++7UUF+JsRJyMiPMR2X6p2DJLebwYES9HxIk9W6kY/2vgVESci4gLo+J5zVLx0eLvDx99+9KNN7/6/mG59vN330zuroFJezUieuv5/nYvz7Sd561ivL7VybK3sFVk/kHvdnGc5rndWs0qbNd3z6tnOd/Oz0/XNwejXOvWG6Nsd9ay8fV+fsHBVnu3TjbhVn0jO262VrPsDNIs23fyde0UeWcwzOs0i3pfZOVjONzNfLy108rvZ/12lo3+sBjP66bN1s4ot4osLheNtNvM1rH6n7/mJ94Hnf7mTrLV2hh00n5ytVp7vVpbrNQ20mZr2Fqo1HvNxYVkpt0dnVYZtuq9pXaatrutaiPtlZOZdqNRqdWSmWut1U69n9Rq1fnqbOVqudh7LXnv5idJt5nMjPKdTn9z2OkOkrV0I8lnlJO56vwb5eSVWvLR8kqy8uH168srH3927dObby/feLc46R/LSmbmZufmKrXZylyt7P4Po3S46Rx3HiCAx6b/ByZB/6//j739b5w4lv2v/h8OwQMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs/TT1w/vZznR+/P9i/Lli6IWIuBIRlyPiUkT8cYCTcWpfzYsRUSr2Dzp/6m9r+LEUWYXRnNPFdi4ilort0fNH/S0AAADAs+v+g7v39rbWbz3O5C/Hvx6OyomDBosfbc6M6yLZTz7/G1e1i1mxnTFVu7RbciwuR8TU9C9jqnZl9A90/vMxVftXTu6LM3uilMeBDwwAAPB0298JjK17AwAA4Inz9aQXwGRk72uL/4tfvAs+nUfxQvDsviMAAADgKVSa9AIAAACAI5f1//7+HwAAADzb7j+4e2/SawAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JOde8dNI4jjAPwHsoG8FBTxuApVlJKCQ+QIKVPakn0bd5zBEuIcuPMRLLDYHWMvhoplQfj7pGUewE8DEsXMsAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw6R6y6fhufnN7aM5y9ep6tUdcRex7CgAAADiaRTYd55Vu0f6W+n+krl8RMYyIQUT0Y/f0vRWfS5m9iGik+q7XZ1tjuI/IE9bvaafra0T8SdfTz2N/CwAAAHC55rPRJKK1ruYPvzc1PoC0aNOpKi9f8vlUVVovD/tfUVr/JbISg4jIuo8VpQ0jovn9b2rV8vtrlYrOm6JRFM06RgEAANSrPBOobPYGAADA2fl36gFwGvl+bfovftoLbhdF2hD8UmoBAAAA52v7bvuNRr3jAAAAAE4gn/+/O/8vrQo4/w8AAAAuQ3H+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMe0yKbj+Ww0OTRnuTpMNZ8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhmf85RKITBKIzevFH3FNz/suRCbG1tzoH8fGQoAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCdsVZeV7wbR8dYd74dM8mvu41/HzS2Hjf2JJ/55E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA42Z+zEwyBIAiD/R9eYEiL+YclDRqDCFWw8LHDPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC81ed6+d7xaxxJ/v1tTEn2kWTuqLF01Fi70Ni6MJ6+BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirsz72JAkEYx+F39+64W7jorgTzxY8aTIxES/ADhIWtwQJsyMTIdLERbUFBRzAzkg18nuT3HyaZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhP5yf3v4+Hj4jIIx+t/4+fEfEV+aZpht/XmW1Ph/rnNqe7/TjNv5h0iogoInvtRwAAWlLem8ZyVS26qb3UfuogtZzV1bzNRwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBh545Vm4rCAACfJE20OjlaQQQHXWxsYjVCFodCd0HQLbSxFFOVNENbuvQJRCdXX8Fu+gq+gOCgBQeHDgougihJbtITDJIi3Bvq98F/7587nHtOhsB//3MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMdyuBfODvJcCGFu5ijvev91d2Xc+e2zD3OD+HLnzcV4zO4QxRDCw/VW83qKa5l2m9s7jxqtVrMtkUgkwyTrXyYAAE6aYhLduv5TcX+5ey1XD+HXq9H6/0qUh7/U/59fnr8wiJ9b7zrxveL6fyG1FU6/cmfjaXlze+fa+kZjrbnWfFytVhZvLt64fatS7j0rKXtiAgAAwL8pJRHX//n6n/3/M1EeJqz/7y09uB/fq6D+H+uo6Zf1TAAAAP5v5y59/5Ybcz1XKoWtRqfTXugfh58r/WMGUz22U0nE9X+hnvWsAAAAgDQc7uVG+v+rUR4m7P/Pv949iMcshBBmk/7//MqT1mp6y5lqabxOnPUaAQAAyNZsEnH/v9jb/58fbnnIhxCuXu7nyd8ATlT/f3xxd+Sl9Xj/fzW9JU6lfK3/ffTOtRBmalnPCAAAgJPsdBLdYv+guL/c/vF8qWT/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/GbHjlEaCKIwAG92s1qJASu18gKinVXAQhAbDyEKgicQQTyA2Fp6B0vvkFrBxsIyhTeQN7ujkiZgsavk+2DyHmHIvEya/AsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHNN97/7Kl5GTV+27z1/XJ1EfZmp4f1+fTNW9IMuh/6HBnt9TwAAAMAiqHK+L4rirX48jFqOU/6v857I/A8rTZ/z/Gzuz/Xp7nUj5//r463Lr4NGzTnxoWfnF6c7nX3Dv2917o5huvn07KVKP0h5dLM2rdN9Dm4nk4Ol1C53MS0A8BvbubZN/j8UdbfPwQBYGMN2FT/yfzXudyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALnwGAAD//+gHXZc=")
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)

291.986973ms ago: executing program 4 (id=2896):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x38, 0xf})

232.765595ms ago: executing program 4 (id=2899):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x21, 0xfffffffe}})

232.240325ms ago: executing program 3 (id=2901):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x478, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3e0, 0x3c8, 0x3c8, 0x3e0, 0x3c8, 0x3, 0x0, {[{{@ip={@remote, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {0x5c00000000000000}, [@common=@unspec=@bpf1={{0x230}, @fd}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x5, 0x1, 0x6, 0x1, 0x7, 0x2], 0x6, 0x7}, {0xffffffffffffffff, [0x4, 0x4, 0x2, 0x5, 0x8], 0x6, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4d8)

212.666025ms ago: executing program 1 (id=2902):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x8, 0x0, 0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x100, 0x65, 0x2f, 0x0, @empty, @empty}}}})

186.855276ms ago: executing program 2 (id=2903):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000005c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa010942ba9380d410000000000000002900000036000000", 0x30)

186.522556ms ago: executing program 4 (id=2904):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x488, 0x30, 0x12f, 0x3c, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0xb, 0x4, 0x0, 0x8d, 0x0, 0x7ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0x10, 0xfffffffd, 0x3, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0x11, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x3, 0xb2e4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x100, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x934, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x81, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x3, 0x8, 0xfffffffe, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffff3bac, 0xd, 0x2, 0x2000, 0x3, 0x0, 0x0, 0xfffffffe, 0xffffffd1, 0x480000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a7, 0x0, 0x6, 0x7ff, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x713b, 0x0, 0x0, 0x0, 0xffff, 0x1000000, 0xffffffff, 0x2, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce2, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2000000, 0xfffffff9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x7, 0xff, 0x0, 0xa]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x3, 0xbed}, {0x0, 0xf6c5d7a4e5a498ca, 0x1000, 0x8}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x4044840}, 0x44004)

181.977316ms ago: executing program 1 (id=2905):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x3e}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48)

181.646096ms ago: executing program 3 (id=2906):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0xf8, 0x30, 0xffff, 0x70bd2d, 0x20000000, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x4, 0xfffffff8, 0x2e3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf8}}, 0x0)

157.006427ms ago: executing program 2 (id=2907):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, 0x0, &(0x7f0000000000))

103.861988ms ago: executing program 4 (id=2908):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0x4004, 0xffffffffffffdfff})

103.743388ms ago: executing program 3 (id=2909):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000080}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0xb7, 0x200, 0xfffffffe}}, 0xe8)

103.701838ms ago: executing program 2 (id=2910):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x14, 0x0, &(0x7f0000000340))

103.657428ms ago: executing program 1 (id=2911):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x3ff, @mcast2, 0x4}}]}, 0x50}}, 0x0)

103.592448ms ago: executing program 4 (id=2912):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0)

98.716058ms ago: executing program 2 (id=2913):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000300)=0xffffffff, 0x4)

86.886218ms ago: executing program 1 (id=2914):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x6}]}}}]}, 0x48}}, 0x400c018)

86.625698ms ago: executing program 3 (id=2915):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
pipe(&(0x7f0000000040))

78.341118ms ago: executing program 0 (id=2916):
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802)
ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000140)=""/76)

48.202559ms ago: executing program 2 (id=2917):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x3a0, 0x700, 0x250, 0xffffffff, 0x188, 0xe0, 0x308, 0x308, 0xffffffff, 0x308, 0x308, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x3, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x300, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400)

47.906149ms ago: executing program 4 (id=2918):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000080)='40', 0x2)

38.857899ms ago: executing program 3 (id=2919):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
pwritev2(r0, 0x0, 0x0, 0x2, 0x6, 0x9)

38.572419ms ago: executing program 1 (id=2920):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x174)

34.05948ms ago: executing program 0 (id=2921):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0)

368.95µs ago: executing program 2 (id=2922):
r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802)
lseek(r0, 0x5, 0x3)

278.88µs ago: executing program 1 (id=2923):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0x7, 0x7}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)

0s ago: executing program 3 (id=2924):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x0, 0x6, 0x0, 0xa, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):


[  116.859139][ T4357] loop1: p35 size 1342439424 extends beyond EOD, 
[  116.866619][ T1036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.874082][ T4357] truncated
[  116.881242][ T1036] usb 5-1: Product: syz
[  116.886639][ T4357] loop1: p36 size 117900032 extends beyond EOD, 
[  116.888513][ T1036] usb 5-1: Manufacturer: syz
[  116.888524][ T1036] usb 5-1: SerialNumber: syz
[  116.904259][ T4357] truncated
[  116.907762][ T4357] loop1: p37 size 1342439424 extends beyond EOD, truncated
[  116.915831][ T2400] usb 4-1: unable to get BOS descriptor or descriptor too short
[  116.917478][ T4357] loop1: p38 size 117900032 extends beyond EOD, truncated
[  116.931451][ T4357] loop1: p39 size 1342439424 extends beyond EOD, truncated
[  116.939090][ T4357] loop1: p40 size 117900032 extends beyond EOD, truncated
[  116.946739][ T4357] loop1: p41 size 1342439424 extends beyond EOD, truncated
[  116.954536][ T4357] loop1: p42 size 117900032 extends beyond EOD, truncated
[  116.962061][ T4357] loop1: p43 size 1342439424 extends beyond EOD, truncated
[  116.969447][    T5] usb 3-1: config 1 interface 0 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 1023
[  116.971226][ T4357] loop1: p44 size 117900032 extends beyond EOD, 
[  116.979559][    T5] usb 3-1: config 1 interface 0 altsetting 10 bulk endpoint 0x3 has invalid maxpacket 16
[  116.979572][    T5] usb 3-1: config 1 interface 0 has no altsetting 0
[  117.002582][ T4357] truncated
[  117.005837][ T2400] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[  117.007705][ T4357] loop1: p45 size 1342439424 extends beyond EOD, truncated
[  117.017962][ T2400] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  117.025708][ T4357] loop1: p46 size 117900032 extends beyond EOD, truncated
[  117.034085][ T2400] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt
[  117.042613][ T4357] loop1: p47 size 1342439424 extends beyond EOD, truncated
[  117.051471][ T2400] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  117.060076][ T4357] loop1: p48 size 117900032 extends beyond EOD, truncated
[  117.068124][ T2400] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 15912, setting to 8
[  117.076981][ T4357] loop1: p49 size 1342439424 extends beyond EOD, truncated
[  117.093909][ T4357] loop1: p50 size 117900032 extends beyond EOD, truncated
[  117.101691][ T4357] loop1: p51 size 1342439424 extends beyond EOD, truncated
[  117.109474][ T4357] loop1: p52 size 117900032 extends beyond EOD, truncated
[  117.117116][ T4357] loop1: p53 size 1342439424 extends beyond EOD, truncated
[  117.124897][ T4357] loop1: p54 size 117900032 extends beyond EOD, truncated
[  117.132485][ T4357] loop1: p55 size 1342439424 extends beyond EOD, truncated
[  117.140173][ T4357] loop1: p56 size 117900032 extends beyond EOD, truncated
[  117.147919][ T4357] loop1: p57 size 1342439424 extends beyond EOD, truncated
[  117.155775][ T4357] loop1: p58 size 117900032 extends beyond EOD, truncated
[  117.163318][ T4357] loop1: p59 size 1342439424 extends beyond EOD, truncated
[  117.170691][    T5] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  117.172683][ T4357] loop1: p60 size 117900032 extends beyond EOD, 
[  117.179799][    T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.180468][ T4357] truncated
[  117.186156][    T5] usb 3-1: Product: syz
[  117.186187][    T5] usb 3-1: Manufacturer: syz
[  117.196612][   T25] usb 1-1: config 24 has too many interfaces: 158, using maximum allowed: 32
[  117.198208][    T5] usb 3-1: SerialNumber: syz
[  117.202182][   T25] usb 1-1: config 24 has an invalid descriptor of length 171, skipping remainder of the config
[  117.210062][ T4357] loop1: p61 size 1342439424 extends beyond EOD, 
[  117.217049][   T25] usb 1-1: config 24 has 1 interface, different from the descriptor's value: 158
[  117.220046][ T4357] truncated
[  117.230306][ T4346] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  117.237967][ T4357] loop1: p62 size 117900032 extends beyond EOD, 
[  117.246317][ T4346] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  117.249000][ T4357] truncated
[  117.272295][ T4357] loop1: p63 size 1342439424 extends beyond EOD, truncated
[  117.280121][ T4357] loop1: p64 size 117900032 extends beyond EOD, truncated
[  117.287404][ T1036] usb 5-1: 0:2 : does not exist
[  117.294812][ T4357] loop1: p65 size 1342439424 extends beyond EOD, truncated
[  117.314910][ T4357] loop1: p66 size 117900032 extends beyond EOD, truncated
[  117.325939][ T4357] loop1: p67 size 1342439424 extends beyond EOD, truncated
[  117.336430][ T1036] snd-usb-audio: probe of 5-1:1.0 failed with error -71
[  117.344219][ T4357] loop1: p68 size 117900032 extends beyond EOD, truncated
[  117.354879][ T4357] loop1: p69 size 1342439424 extends beyond EOD, truncated
[  117.362228][ T2400] usb 4-1: string descriptor 0 read error: -22
[  117.368552][ T2400] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  117.373719][ T1036] usb 5-1: USB disconnect, device number 39
[  117.379047][ T4357] loop1: p70 size 117900032 extends beyond EOD, truncated
[  117.391705][ T2400] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.405284][ T2400] usb 4-1: config 0 descriptor??
[  117.410369][ T4357] loop1: p71 size 1342439424 extends beyond EOD, truncated
[  117.418253][ T4357] loop1: p72 size 117900032 extends beyond EOD, truncated
[  117.422825][   T25] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40
[  117.425793][ T4350] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  117.434774][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.443013][ T4350] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  117.451437][   T25] usb 1-1: Product: syz
[  117.456661][ T4357] loop1: p73 size 1342439424 extends beyond EOD, truncated
[  117.461464][   T25] usb 1-1: Manufacturer: syz
[  117.472471][   T25] usb 1-1: SerialNumber: syz
[  117.472735][ T4357] loop1: p74 size 117900032 extends beyond EOD, truncated
[  117.486400][ T4357] loop1: p75 size 1342439424 extends beyond EOD, truncated
[  117.494280][ T4357] loop1: p76 size 117900032 extends beyond EOD, truncated
[  117.502128][ T4357] loop1: p77 size 1342439424 extends beyond EOD, truncated
[  117.509872][ T4357] loop1: p78 size 117900032 extends beyond EOD, truncated
[  117.517450][ T4357] loop1: p79 size 1342439424 extends beyond EOD, truncated
[  117.525254][ T4357] loop1: p80 size 117900032 extends beyond EOD, truncated
[  117.532875][ T4357] loop1: p81 size 1342439424 extends beyond EOD, truncated
[  117.540741][ T4357] loop1: p82 size 117900032 extends beyond EOD, truncated
[  117.548237][ T4357] loop1: p83 size 1342439424 extends beyond EOD, truncated
[  117.556005][ T4357] loop1: p84 size 117900032 extends beyond EOD, truncated
[  117.563621][ T4357] loop1: p85 size 1342439424 extends beyond EOD, truncated
[  117.571311][ T4357] loop1: p86 size 117900032 extends beyond EOD, truncated
[  117.579147][ T4357] loop1: p87 size 1342439424 extends beyond EOD, truncated
[  117.586909][ T4357] loop1: p88 size 117900032 extends beyond EOD, truncated
[  117.594241][    T5] cdc_ether: probe of 3-1:1.0 failed with error -71
[  117.595607][ T4357] loop1: p89 size 1342439424 extends beyond EOD, truncated
[  117.604411][    T5] usb 3-1: USB disconnect, device number 41
[  117.618371][ T4357] loop1: p90 size 117900032 extends beyond EOD, truncated
[  117.626843][ T4357] loop1: p91 size 1342439424 extends beyond EOD, truncated
[  117.634475][ T4357] loop1: p92 size 117900032 extends beyond EOD, truncated
[  117.642354][ T4357] loop1: p93 size 1342439424 extends beyond EOD, truncated
[  117.650027][ T4357] loop1: p94 size 117900032 extends beyond EOD, truncated
[  117.657628][ T4357] loop1: p95 size 1342439424 extends beyond EOD, truncated
[  117.665492][ T4357] loop1: p96 size 117900032 extends beyond EOD, truncated
[  117.673128][ T4357] loop1: p97 size 1342439424 extends beyond EOD, truncated
[  117.680870][ T4357] loop1: p98 size 117900032 extends beyond EOD, truncated
[  117.688359][ T4357] loop1: p99 size 1342439424 extends beyond EOD, truncated
[  117.696266][ T4357] loop1: p100 size 117900032 extends beyond EOD, truncated
[  117.704152][ T4357] loop1: p101 size 1342439424 extends beyond EOD, truncated
[  117.712163][ T4357] loop1: p102 size 117900032 extends beyond EOD, truncated
[  117.719958][ T4357] loop1: p103 size 1342439424 extends beyond EOD, truncated
[  117.727952][ T4357] loop1: p104 size 117900032 extends beyond EOD, truncated
[  117.731064][   T15] usb 4-1: USB disconnect, device number 35
[  117.743772][ T4357] loop1: p105 size 1342439424 extends beyond EOD, truncated
[  117.751957][ T4357] loop1: p106 size 117900032 extends beyond EOD, truncated
[  117.759628][ T4357] loop1: p107 size 1342439424 extends beyond EOD, truncated
[  117.767500][ T4357] loop1: p108 size 117900032 extends beyond EOD, truncated
[  117.775228][ T4357] loop1: p109 size 1342439424 extends beyond EOD, truncated
[  117.782965][ T4357] loop1: p110 size 117900032 extends beyond EOD, truncated
[  117.790792][ T4357] loop1: p111 size 1342439424 extends beyond EOD, truncated
[  117.798602][ T4357] loop1: p112 size 117900032 extends beyond EOD, truncated
[  117.806334][ T4357] loop1: p113 size 1342439424 extends beyond EOD, truncated
[  117.814111][ T4357] loop1: p114 size 117900032 extends beyond EOD, truncated
[  117.821768][ T4357] loop1: p115 size 1342439424 extends beyond EOD, truncated
[  117.829535][ T4357] loop1: p116 size 117900032 extends beyond EOD, truncated
[  117.837655][ T4357] loop1: p117 size 1342439424 extends beyond EOD, truncated
[  117.845492][ T4357] loop1: p118 size 117900032 extends beyond EOD, truncated
[  117.853487][ T4357] loop1: p119 size 1342439424 extends beyond EOD, truncated
[  117.861063][   T25] usb 1-1: 0:1 : does not exist
[  117.861488][ T4357] loop1: p120 size 117900032 extends beyond EOD, truncated
[  117.868266][   T25] usb 1-1: unit 80 not found!
[  117.875036][ T4357] loop1: p121 size 1342439424 extends beyond EOD, truncated
[  117.885930][ T4357] loop1: p122 size 117900032 extends beyond EOD, truncated
[  117.893987][ T4357] loop1: p123 size 1342439424 extends beyond EOD, truncated
[  117.901786][ T4357] loop1: p124 size 117900032 extends beyond EOD, truncated
[  117.909643][ T4357] loop1: p125 size 1342439424 extends beyond EOD, truncated
[  117.910677][   T25] usb 1-1: USB disconnect, device number 37
[  117.921099][ T4357] loop1: p126 size 117900032 extends beyond EOD, truncated
[  117.931350][ T4357] loop1: p127 size 1342439424 extends beyond EOD, truncated
[  117.940202][ T4357] loop1: p128 size 117900032 extends beyond EOD, truncated
[  117.950725][ T4357] loop1: p129 size 1342439424 extends beyond EOD, truncated
[  117.958565][ T4357] loop1: p130 size 117900032 extends beyond EOD, truncated
[  117.973087][ T4357] loop1: p131 size 1342439424 extends beyond EOD, truncated
[  117.982054][ T4368] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  117.989044][ T4357] loop1: p132 size 117900032 extends beyond EOD, truncated
[  117.997395][ T4357] loop1: p133 size 1342439424 extends beyond EOD, truncated
[  118.005769][ T4357] loop1: p134 size 117900032 extends beyond EOD, truncated
[  118.013435][ T4357] loop1: p135 size 1342439424 extends beyond EOD, truncated
[  118.021307][ T4357] loop1: p136 size 117900032 extends beyond EOD, truncated
[  118.028991][ T4357] loop1: p137 size 1342439424 extends beyond EOD, truncated
[  118.036836][ T4357] loop1: p138 size 117900032 extends beyond EOD, truncated
[  118.045198][ T4357] loop1: p139 size 1342439424 extends beyond EOD, truncated
[  118.053046][ T4357] loop1: p140 size 117900032 extends beyond EOD, truncated
[  118.071132][ T4357] loop1: p141 size 1342439424 extends beyond EOD, truncated
[  118.083220][ T4357] loop1: p142 size 117900032 extends beyond EOD, truncated
[  118.103061][ T4357] loop1: p143 size 1342439424 extends beyond EOD, truncated
[  118.112982][ T4357] loop1: p144 size 117900032 extends beyond EOD, truncated
[  118.125727][ T4357] loop1: p145 size 1342439424 extends beyond EOD, truncated
[  118.138622][ T4357] loop1: p146 size 117900032 extends beyond EOD, truncated
[  118.148755][ T4357] loop1: p147 size 1342439424 extends beyond EOD, truncated
[  118.161651][ T4357] loop1: p148 size 117900032 extends beyond EOD, truncated
[  118.170716][ T4357] loop1: p149 size 1342439424 extends beyond EOD, truncated
[  118.175605][  T302] udevd[302]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:24.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  118.180184][ T4357] loop1: p150 size 117900032 extends beyond EOD, truncated
[  118.201619][ T4357] loop1: p151 size 1342439424 extends beyond EOD, truncated
[  118.209896][ T4384] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  118.218522][ T4357] loop1: p152 size 117900032 extends beyond EOD, truncated
[  118.226647][ T4357] loop1: p153 size 1342439424 extends beyond EOD, truncated
[  118.235724][ T4357] loop1: p154 size 117900032 extends beyond EOD, truncated
[  118.244416][ T4384] EXT4-fs (loop2): 1 truncate cleaned up
[  118.244687][ T4357] loop1: p155 size 1342439424 extends beyond EOD, truncated
[  118.253208][ T4384] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  118.269875][ T4357] loop1: p156 size 117900032 extends beyond EOD, truncated
[  118.280597][ T4357] loop1: p157 size 1342439424 extends beyond EOD, truncated
[  118.296190][ T4357] loop1: p158 size 117900032 extends beyond EOD, truncated
[  118.310668][ T4357] loop1: p159 size 1342439424 extends beyond EOD, truncated
[  118.318630][ T4357] loop1: p160 size 117900032 extends beyond EOD, truncated
[  118.346928][ T4357] loop1: p161 size 1342439424 extends beyond EOD, truncated
[  118.364757][ T4357] loop1: p162 size 117900032 extends beyond EOD, truncated
[  118.390662][ T4357] loop1: p163 size 1342439424 extends beyond EOD, truncated
[  118.418298][ T4357] loop1: p164 size 117900032 extends beyond EOD, truncated
[  118.431054][ T4357] loop1: p165 size 1342439424 extends beyond EOD, truncated
[  118.462878][ T4357] loop1: p166 size 117900032 extends beyond EOD, truncated
[  118.488221][ T4357] loop1: p167 size 1342439424 extends beyond EOD, truncated
[  118.517608][ T4357] loop1: p168 size 117900032 extends beyond EOD, truncated
[  118.526497][ T4357] loop1: p169 size 1342439424 extends beyond EOD, truncated
[  118.540080][ T4357] loop1: p170 size 117900032 extends beyond EOD, truncated
[  118.555653][ T4357] loop1: p171 size 1342439424 extends beyond EOD, truncated
[  118.573920][ T4357] loop1: p172 size 117900032 extends beyond EOD, truncated
[  118.593086][ T4357] loop1: p173 size 1342439424 extends beyond EOD, truncated
[  118.602212][ T4357] loop1: p174 size 117900032 extends beyond EOD, truncated
[  118.610637][ T4357] loop1: p175 size 1342439424 extends beyond EOD, truncated
[  118.618504][ T4357] loop1: p176 size 117900032 extends beyond EOD, truncated
[  118.630401][ T4357] loop1: p177 size 1342439424 extends beyond EOD, truncated
[  118.638411][ T4357] loop1: p178 size 117900032 extends beyond EOD, truncated
[  118.646386][ T4357] loop1: p179 size 1342439424 extends beyond EOD, truncated
[  118.662487][ T4357] loop1: p180 size 117900032 extends beyond EOD, truncated
[  118.671081][ T4357] loop1: p181 size 1342439424 extends beyond EOD, truncated
[  118.679246][ T4357] loop1: p182 size 117900032 extends beyond EOD, truncated
[  118.687195][ T4357] loop1: p183 size 1342439424 extends beyond EOD, truncated
[  118.705580][ T4357] loop1: p184 size 117900032 extends beyond EOD, truncated
[  118.713630][ T4450] IPv6: addrconf: prefix option has invalid lifetime
[  118.720380][ T4450] IPv6: addrconf: prefix option has invalid lifetime
[  118.727116][ T4450] IPv6: addrconf: prefix option has invalid lifetime
[  118.731431][ T4452] fuse: Bad value for 'fd'
[  118.742049][ T4357] loop1: p185 size 1342439424 extends beyond EOD, truncated
[  118.750135][ T4357] loop1: p186 size 117900032 extends beyond EOD, truncated
[  118.759357][ T4357] loop1: p187 size 1342439424 extends beyond EOD, truncated
[  118.770547][ T4357] loop1: p188 size 117900032 extends beyond EOD, truncated
[  118.778460][ T4357] loop1: p189 size 1342439424 extends beyond EOD, truncated
[  118.780566][   T15] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  118.788123][ T4357] loop1: p190 size 117900032 extends beyond EOD, truncated
[  118.819223][ T4357] loop1: p191 size 1342439424 extends beyond EOD, truncated
[  118.833346][ T4357] loop1: p192 size 117900032 extends beyond EOD, truncated
[  118.852093][ T4357] loop1: p193 size 1342439424 extends beyond EOD, truncated
[  118.865508][ T4357] loop1: p194 size 117900032 extends beyond EOD, truncated
[  118.878329][ T4357] loop1: p195 size 1342439424 extends beyond EOD, truncated
[  118.886216][ T4357] loop1: p196 size 117900032 extends beyond EOD, truncated
[  118.894090][ T4357] loop1: p197 size 1342439424 extends beyond EOD, truncated
[  118.901555][  T367] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  118.902831][ T4357] loop1: p198 size 117900032 extends beyond EOD, truncated
[  118.919260][ T4357] loop1: p199 size 1342439424 extends beyond EOD, truncated
[  118.927082][ T4357] loop1: p200 size 117900032 extends beyond EOD, truncated
[  118.934916][ T4357] loop1: p201 size 1342439424 extends beyond EOD, truncated
[  118.943010][ T4357] loop1: p202 size 117900032 extends beyond EOD, truncated
[  118.950666][ T4357] loop1: p203 size 1342439424 extends beyond EOD, truncated
[  118.958694][ T4357] loop1: p204 size 117900032 extends beyond EOD, truncated
[  118.966440][ T4357] loop1: p205 size 1342439424 extends beyond EOD, truncated
[  118.974358][ T4357] loop1: p206 size 117900032 extends beyond EOD, truncated
[  118.981978][ T4357] loop1: p207 size 1342439424 extends beyond EOD, truncated
[  118.995185][ T4357] loop1: p208 size 117900032 extends beyond EOD, truncated
[  119.002972][ T4357] loop1: p209 size 1342439424 extends beyond EOD, truncated
[  119.010878][ T4357] loop1: p210 size 117900032 extends beyond EOD, truncated
[  119.018610][ T4357] loop1: p211 size 1342439424 extends beyond EOD, truncated
[  119.026915][ T4357] loop1: p212 size 117900032 extends beyond EOD, truncated
[  119.039474][ T4357] loop1: p213 size 1342439424 extends beyond EOD, truncated
[  119.049009][ T4357] loop1: p214 size 117900032 extends beyond EOD, truncated
[  119.058268][ T4357] loop1: p215 size 1342439424 extends beyond EOD, truncated
[  119.076348][ T4357] loop1: p216 size 117900032 extends beyond EOD, truncated
[  119.090323][   T15] usb 1-1: Using ep0 maxpacket: 16
[  119.101118][ T4357] loop1: p217 size 1342439424 extends beyond EOD, truncated
[  119.117467][ T4357] loop1: p218 size 117900032 extends beyond EOD, truncated
[  119.132338][ T4357] loop1: p219 size 1342439424 extends beyond EOD, truncated
[  119.140574][ T4357] loop1: p220 size 117900032 extends beyond EOD, truncated
[  119.148628][ T4357] loop1: p221 size 1342439424 extends beyond EOD, truncated
[  119.156815][ T4357] loop1: p222 size 117900032 extends beyond EOD, truncated
[  119.165162][  T367] usb 5-1: Using ep0 maxpacket: 16
[  119.172597][ T4357] loop1: p223 size 1342439424 extends beyond EOD, truncated
[  119.181011][ T4357] loop1: p224 size 117900032 extends beyond EOD, truncated
[  119.193404][ T4357] loop1: p225 size 1342439424 extends beyond EOD, truncated
[  119.201535][ T4357] loop1: p226 size 117900032 extends beyond EOD, truncated
[  119.209415][ T4357] loop1: p227 size 1342439424 extends beyond EOD, truncated
[  119.217948][ T4357] loop1: p228 size 117900032 extends beyond EOD, truncated
[  119.226641][ T4357] loop1: p229 size 1342439424 extends beyond EOD, truncated
[  119.234152][   T15] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  119.239383][ T4357] loop1: p230 size 117900032 extends beyond EOD, 
[  119.244257][   T15] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  119.244281][   T15] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  119.272641][ T4357] truncated
[  119.276165][ T4357] loop1: p231 size 1342439424 extends beyond EOD, truncated
[  119.286837][ T4357] loop1: p232 size 117900032 extends beyond EOD, truncated
[  119.295011][ T4357] loop1: p233 size 1342439424 extends beyond EOD, truncated
[  119.310914][ T4357] loop1: p234 size 117900032 extends beyond EOD, truncated
[  119.322920][ T4357] loop1: p235 size 1342439424 extends beyond EOD, truncated
[  119.331178][ T4357] loop1: p236 size 117900032 extends beyond EOD, truncated
[  119.343631][ T4357] loop1: p237 size 1342439424 extends beyond EOD, truncated
[  119.352007][ T4357] loop1: p238 size 117900032 extends beyond EOD, truncated
[  119.359968][ T4357] loop1: p239 size 1342439424 extends beyond EOD, truncated
[  119.368049][ T4357] loop1: p240 size 117900032 extends beyond EOD, truncated
[  119.380679][ T4357] loop1: p241 size 1342439424 extends beyond EOD, truncated
[  119.388786][ T4357] loop1: p242 size 117900032 extends beyond EOD, truncated
[  119.400865][ T4357] loop1: p243 size 1342439424 extends beyond EOD, truncated
[  119.408943][ T4357] loop1: p244 size 117900032 extends beyond EOD, truncated
[  119.417170][ T4357] loop1: p245 size 1342439424 extends beyond EOD, truncated
[  119.425064][ T4357] loop1: p246 size 117900032 extends beyond EOD, truncated
[  119.432473][   T25] usb 4-1: new full-speed USB device number 36 using dummy_hcd
[  119.432894][   T15] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  119.449849][ T4357] loop1: p247 size 1342439424 extends beyond EOD, truncated
[  119.457731][ T4357] loop1: p248 size 117900032 extends beyond EOD, truncated
[  119.465185][   T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.473191][   T15] usb 1-1: Product: syz
[  119.478017][ T4357] loop1: p249 size 1342439424 extends beyond EOD, truncated
[  119.485618][   T15] usb 1-1: Manufacturer: syz
[  119.490476][ T4357] loop1: p250 size 117900032 extends beyond EOD, truncated
[  119.496769][  T367] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[  119.498136][   T15] usb 1-1: SerialNumber: syz
[  119.506735][  T367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.506760][  T367] usb 5-1: Product: syz
[  119.519310][ T4357] loop1: p251 size 1342439424 extends beyond EOD, truncated
[  119.520292][ T4357] loop1: p252 size 117900032 extends beyond EOD, 
[  119.525103][  T367] usb 5-1: Manufacturer: syz
[  119.535490][ T4357] truncated
[  119.541263][  T367] usb 5-1: SerialNumber: syz
[  119.543721][ T4357] loop1: p253 size 1342439424 extends beyond EOD, truncated
[  119.558531][ T4357] loop1: p254 size 117900032 extends beyond EOD, truncated
[  119.566813][ T4357] loop1: p255 size 1342439424 extends beyond EOD, truncated
[  119.582617][   T15] cdc_ncm 1-1:1.0: skipping garbage
[  119.591812][   T15] cdc_ncm 1-1:1.0: bind() failure
[  119.658003][ T4518] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  119.669928][ T4518] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  119.678821][ T4518] EXT4-fs (loop2): external journal has bad superblock
[  119.702645][   T95]  loop1: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215
[  119.702704][   T95] loop1: p1 size 1342439424 extends beyond EOD, truncated
[  119.806307][   T15] usb 1-1: USB disconnect, device number 38
[  119.808589][   T95] loop1: p2 size 117900032 extends beyond EOD, truncated
[  119.824003][   T95] loop1: p5 size 1342439424 extends beyond EOD, truncated
[  119.831742][   T95] loop1: p6 size 117900032 extends beyond EOD, truncated
[  119.839378][   T95] loop1: p7 size 1342439424 extends beyond EOD, truncated
[  119.846901][   T95] loop1: p8 size 117900032 extends beyond EOD, truncated
[  119.854402][   T95] loop1: p9 size 1342439424 extends beyond EOD, truncated
[  119.862169][   T95] loop1: p10 size 117900032 extends beyond EOD, truncated
[  119.869845][   T95] loop1: p11 size 1342439424 extends beyond EOD, truncated
[  119.877581][ T4521] EXT4-fs (loop2): invalid first ino: 0
[  119.877841][   T95] loop1: p12 size 117900032 extends beyond EOD, truncated
[  119.891216][   T95] loop1: p13 size 1342439424 extends beyond EOD, truncated
[  119.893520][  T367] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  119.900481][   T95] loop1: p14 size 117900032 extends beyond EOD, truncated
[  119.905544][   T25] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 20, changing to 4
[  119.914355][   T95] loop1: p15 size 1342439424 extends beyond EOD, truncated
[  119.925841][  T367] usb 5-1: USB disconnect, device number 40
[  119.938427][   T95] loop1: p16 size 117900032 extends beyond EOD, truncated
[  119.946239][   T95] loop1: p17 size 1342439424 extends beyond EOD, truncated
[  119.953850][   T95] loop1: p18 size 117900032 extends beyond EOD, truncated
[  119.961510][   T95] loop1: p19 size 1342439424 extends beyond EOD, truncated
[  119.969344][   T95] loop1: p20 size 117900032 extends beyond EOD, truncated
[  119.976885][   T95] loop1: p21 size 1342439424 extends beyond EOD, truncated
[  119.984808][   T95] loop1: p22 size 117900032 extends beyond EOD, truncated
[  119.993226][   T95] loop1: p23 size 1342439424 extends beyond EOD, truncated
[  120.001115][   T95] loop1: p24 size 117900032 extends beyond EOD, truncated
[  120.008571][   T95] loop1: p25 size 1342439424 extends beyond EOD, truncated
[  120.016221][   T95] loop1: p26 size 117900032 extends beyond EOD, truncated
[  120.023831][   T95] loop1: p27 size 1342439424 extends beyond EOD, truncated
[  120.031553][   T95] loop1: p28 size 117900032 extends beyond EOD, truncated
[  120.038991][   T95] loop1: p29 size 1342439424 extends beyond EOD, truncated
[  120.046759][   T95] loop1: p30 size 117900032 extends beyond EOD, truncated
[  120.054487][   T95] loop1: p31 size 1342439424 extends beyond EOD, truncated
[  120.062142][   T95] loop1: p32 size 117900032 extends beyond EOD, truncated
[  120.069818][   T95] loop1: p33 size 1342439424 extends beyond EOD, truncated
[  120.077457][   T95] loop1: p34 size 117900032 extends beyond EOD, truncated
[  120.085033][   T95] loop1: p35 size 1342439424 extends beyond EOD, truncated
[  120.092694][   T95] loop1: p36 size 117900032 extends beyond EOD, truncated
[  120.100307][   T95] loop1: p37 size 1342439424 extends beyond EOD, truncated
[  120.107640][   T25] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  120.109046][   T95] loop1: p38 size 117900032 extends beyond EOD, 
[  120.116701][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.116730][   T25] usb 4-1: Product: syz
[  120.123819][   T95] truncated
[  120.131082][   T25] usb 4-1: Manufacturer: syz
[  120.131093][   T25] usb 4-1: SerialNumber: syz
[  120.148327][   T95] loop1: p39 size 1342439424 extends beyond EOD, truncated
[  120.156025][   T95] loop1: p40 size 117900032 extends beyond EOD, truncated
[  120.163673][   T95] loop1: p41 size 1342439424 extends beyond EOD, truncated
[  120.171539][   T95] loop1: p42 size 117900032 extends beyond EOD, truncated
[  120.179027][   T95] loop1: p43 size 1342439424 extends beyond EOD, truncated
[  120.186731][   T95] loop1: p44 size 117900032 extends beyond EOD, truncated
[  120.194288][   T95] loop1: p45 size 1342439424 extends beyond EOD, truncated
[  120.201989][   T95] loop1: p46 size 117900032 extends beyond EOD, truncated
[  120.209571][   T95] loop1: p47 size 1342439424 extends beyond EOD, truncated
[  120.217256][   T95] loop1: p48 size 117900032 extends beyond EOD, truncated
[  120.224836][   T95] loop1: p49 size 1342439424 extends beyond EOD, truncated
[  120.232392][   T95] loop1: p50 size 117900032 extends beyond EOD, truncated
[  120.239973][   T95] loop1: p51 size 1342439424 extends beyond EOD, truncated
[  120.247592][   T95] loop1: p52 size 117900032 extends beyond EOD, truncated
[  120.255064][   T95] loop1: p53 size 1342439424 extends beyond EOD, truncated
[  120.262760][   T95] loop1: p54 size 117900032 extends beyond EOD, truncated
[  120.270340][   T95] loop1: p55 size 1342439424 extends beyond EOD, truncated
[  120.278168][   T95] loop1: p56 size 117900032 extends beyond EOD, truncated
[  120.285642][   T95] loop1: p57 size 1342439424 extends beyond EOD, truncated
[  120.293282][   T95] loop1: p58 size 117900032 extends beyond EOD, truncated
[  120.300820][   T95] loop1: p59 size 1342439424 extends beyond EOD, truncated
[  120.308389][   T95] loop1: p60 size 117900032 extends beyond EOD, truncated
[  120.309172][    T5] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  120.323343][   T95] loop1: p61 size 1342439424 extends beyond EOD, truncated
[  120.331040][   T95] loop1: p62 size 117900032 extends beyond EOD, truncated
[  120.338573][   T95] loop1: p63 size 1342439424 extends beyond EOD, truncated
[  120.346257][   T95] loop1: p64 size 117900032 extends beyond EOD, truncated
[  120.353810][   T95] loop1: p65 size 1342439424 extends beyond EOD, truncated
[  120.361420][   T95] loop1: p66 size 117900032 extends beyond EOD, truncated
[  120.369134][   T95] loop1: p67 size 1342439424 extends beyond EOD, truncated
[  120.376887][   T95] loop1: p68 size 117900032 extends beyond EOD, truncated
[  120.384601][   T95] loop1: p69 size 1342439424 extends beyond EOD, truncated
[  120.392263][   T95] loop1: p70 size 117900032 extends beyond EOD, truncated
[  120.399938][   T95] loop1: p71 size 1342439424 extends beyond EOD, truncated
[  120.408111][   T95] loop1: p72 size 117900032 extends beyond EOD, truncated
[  120.417355][   T95] loop1: p73 size 1342439424 extends beyond EOD, truncated
[  120.426586][   T95] loop1: p74 size 117900032 extends beyond EOD, truncated
[  120.443571][   T95] loop1: p75 size 1342439424 extends beyond EOD, truncated
[  120.459115][   T95] loop1: p76 size 117900032 extends beyond EOD, truncated
[  120.470482][   T95] loop1: p77 size 1342439424 extends beyond EOD, truncated
[  120.488950][   T95] loop1: p78 size 117900032 extends beyond EOD, truncated
[  120.496766][   T95] loop1: p79 size 1342439424 extends beyond EOD, truncated
[  120.509209][   T95] loop1: p80 size 117900032 extends beyond EOD, truncated
[  120.512430][   T25] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  120.517715][   T95] loop1: p81 size 1342439424 extends beyond EOD, truncated
[  120.531843][   T95] loop1: p82 size 117900032 extends beyond EOD, truncated
[  120.544310][   T95] loop1: p83 size 1342439424 extends beyond EOD, truncated
[  120.552026][   T95] loop1: p84 size 117900032 extends beyond EOD, truncated
[  120.555246][   T25] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  120.560407][   T95] loop1: p85 size 1342439424 extends beyond EOD, truncated
[  120.574736][   T95] loop1: p86 size 117900032 extends beyond EOD, truncated
[  120.587397][   T95] loop1: p87 size 1342439424 extends beyond EOD, truncated
[  120.595097][   T95] loop1: p88 size 117900032 extends beyond EOD, truncated
[  120.599705][   T25] usb 4-1: USB disconnect, device number 36
[  120.609418][   T95] loop1: p89 size 1342439424 extends beyond EOD, truncated
[  120.621660][   T95] loop1: p90 size 117900032 extends beyond EOD, truncated
[  120.629229][   T95] loop1: p91 size 1342439424 extends beyond EOD, truncated
[  120.636866][   T95] loop1: p92 size 117900032 extends beyond EOD, truncated
[  120.645048][   T95] loop1: p93 size 1342439424 extends beyond EOD, truncated
[  120.654577][   T95] loop1: p94 size 117900032 extends beyond EOD, truncated
[  120.662386][   T95] loop1: p95 size 1342439424 extends beyond EOD, truncated
[  120.670025][   T95] loop1: p96 size 117900032 extends beyond EOD, truncated
[  120.677706][   T95] loop1: p97 size 1342439424 extends beyond EOD, truncated
[  120.685329][   T95] loop1: p98 size 117900032 extends beyond EOD, truncated
[  120.693186][   T95] loop1: p99 size 1342439424 extends beyond EOD, truncated
[  120.700841][   T95] loop1: p100 size 117900032 extends beyond EOD, truncated
[  120.708475][   T95] loop1: p101 size 1342439424 extends beyond EOD, truncated
[  120.715603][    T5] usb 3-1: config 127 has an invalid interface number: 228 but max is 0
[  120.716949][   T95] loop1: p102 size 117900032 extends beyond EOD, truncated
[  120.731773][   T95] loop1: p103 size 1342439424 extends beyond EOD, truncated
[  120.735055][    T5] usb 3-1: config 127 has no interface number 0
[  120.740449][   T95] loop1: p104 size 117900032 extends beyond EOD, truncated
[  120.745965][    T5] usb 3-1: config 127 interface 228 altsetting 0 bulk endpoint 0xB has invalid maxpacket 32
[  120.753696][   T95] loop1: p105 size 1342439424 extends beyond EOD, 
[  120.762955][    T5] usb 3-1: config 127 interface 228 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023
[  120.768809][   T95] truncated
[  120.783341][   T95] loop1: p106 size 117900032 extends beyond EOD, truncated
[  120.791003][   T95] loop1: p107 size 1342439424 extends beyond EOD, truncated
[  120.798841][   T95] loop1: p108 size 117900032 extends beyond EOD, truncated
[  120.806526][   T95] loop1: p109 size 1342439424 extends beyond EOD, truncated
[  120.814255][   T95] loop1: p110 size 117900032 extends beyond EOD, truncated
[  120.821901][   T95] loop1: p111 size 1342439424 extends beyond EOD, truncated
[  120.829663][   T95] loop1: p112 size 117900032 extends beyond EOD, truncated
[  120.837658][   T95] loop1: p113 size 1342439424 extends beyond EOD, truncated
[  120.845393][   T95] loop1: p114 size 117900032 extends beyond EOD, truncated
[  120.853091][   T95] loop1: p115 size 1342439424 extends beyond EOD, truncated
[  120.861016][   T95] loop1: p116 size 117900032 extends beyond EOD, truncated
[  120.868772][   T95] loop1: p117 size 1342439424 extends beyond EOD, truncated
[  120.876557][   T95] loop1: p118 size 117900032 extends beyond EOD, truncated
[  120.884242][   T95] loop1: p119 size 1342439424 extends beyond EOD, truncated
[  120.891969][   T95] loop1: p120 size 117900032 extends beyond EOD, truncated
[  120.899646][   T95] loop1: p121 size 1342439424 extends beyond EOD, truncated
[  120.907508][   T95] loop1: p122 size 117900032 extends beyond EOD, truncated
[  120.915368][   T95] loop1: p123 size 1342439424 extends beyond EOD, truncated
[  120.923215][   T95] loop1: p124 size 117900032 extends beyond EOD, truncated
[  120.930981][   T95] loop1: p125 size 1342439424 extends beyond EOD, truncated
[  120.938718][   T95] loop1: p126 size 117900032 extends beyond EOD, truncated
[  120.946431][   T95] loop1: p127 size 1342439424 extends beyond EOD, truncated
[  120.950784][    T5] usb 3-1: New USB device found, idVendor=2e24, idProduct=1d95, bcdDevice=5e.f2
[  120.955288][   T95] loop1: p128 size 117900032 extends beyond EOD, truncated
[  120.962918][   T15] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  120.971341][   T95] loop1: p129 size 1342439424 extends beyond EOD, truncated
[  120.987162][    T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.994692][   T95] loop1: p130 size 117900032 extends beyond EOD, truncated
[  121.003970][    T5] usb 3-1: Product: syz
[  121.008209][    T5] usb 3-1: Manufacturer: syz
[  121.012831][    T5] usb 3-1: SerialNumber: syz
[  121.018389][   T95] loop1: p131 size 1342439424 extends beyond EOD, truncated
[  121.028685][   T95] loop1: p132 size 117900032 extends beyond EOD, truncated
[  121.046399][   T95] loop1: p133 size 1342439424 extends beyond EOD, truncated
[  121.054474][   T95] loop1: p134 size 117900032 extends beyond EOD, truncated
[  121.057614][ T4524] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  121.071545][   T95] loop1: p135 size 1342439424 extends beyond EOD, truncated
[  121.078858][ T4524] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  121.091219][   T95] loop1: p136 size 117900032 extends beyond EOD, truncated
[  121.099237][   T95] loop1: p137 size 1342439424 extends beyond EOD, truncated
[  121.116110][   T95] loop1: p138 size 117900032 extends beyond EOD, truncated
[  121.125068][   T95] loop1: p139 size 1342439424 extends beyond EOD, truncated
[  121.132939][   T95] loop1: p140 size 117900032 extends beyond EOD, truncated
[  121.140769][   T95] loop1: p141 size 1342439424 extends beyond EOD, truncated
[  121.148975][   T95] loop1: p142 size 117900032 extends beyond EOD, truncated
[  121.155394][ T4550] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288)
[  121.165715][   T95] loop1: p143 size 1342439424 extends beyond EOD, truncated
[  121.167208][ T4550] F2FS-fs (loop0): invalid crc value
[  121.178647][ T4550] F2FS-fs (loop0): invalid crc value
[  121.183957][ T4550] F2FS-fs (loop0): Failed to get valid F2FS checkpoint
[  121.191029][   T95] loop1: p144 size 117900032 extends beyond EOD, truncated
[  121.198817][   T95] loop1: p145 size 1342439424 extends beyond EOD, truncated
[  121.206468][   T95] loop1: p146 size 117900032 extends beyond EOD, truncated
[  121.214215][   T95] loop1: p147 size 1342439424 extends beyond EOD, truncated
[  121.221919][   T95] loop1: p148 size 117900032 extends beyond EOD, truncated
[  121.229538][   T95] loop1: p149 size 1342439424 extends beyond EOD, truncated
[  121.237275][   T95] loop1: p150 size 117900032 extends beyond EOD, truncated
[  121.245300][   T95] loop1: p151 size 1342439424 extends beyond EOD, truncated
[  121.253027][   T95] loop1: p152 size 117900032 extends beyond EOD, truncated
[  121.260787][   T95] loop1: p153 size 1342439424 extends beyond EOD, truncated
[  121.268639][   T24] audit: type=1400 audit(1785176010.881:212): avc:  denied  { create } for  pid=4562 comm="syz.3.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  121.282678][   T95] loop1: p154 size 117900032 extends beyond EOD, truncated
[  121.305306][   T95] loop1: p155 size 1342439424 extends beyond EOD, truncated
[  121.313241][   T95] loop1: p156 size 117900032 extends beyond EOD, truncated
[  121.321204][   T95] loop1: p157 size 1342439424 extends beyond EOD, truncated
[  121.329577][   T95] loop1: p158 size 117900032 extends beyond EOD, truncated
[  121.337309][   T95] loop1: p159 size 1342439424 extends beyond EOD, truncated
[  121.344984][   T95] loop1: p160 size 117900032 extends beyond EOD, truncated
[  121.353132][   T95] loop1: p161 size 1342439424 extends beyond EOD, truncated
[  121.360731][    T5] usb 3-1: USB disconnect, device number 42
[  121.361594][   T95] loop1: p162 size 117900032 extends beyond EOD, truncated
[  121.374514][   T95] loop1: p163 size 1342439424 extends beyond EOD, truncated
[  121.383846][   T95] loop1: p164 size 117900032 extends beyond EOD, truncated
[  121.391573][   T95] loop1: p165 size 1342439424 extends beyond EOD, truncated
[  121.399271][   T95] loop1: p166 size 117900032 extends beyond EOD, truncated
[  121.407003][   T95] loop1: p167 size 1342439424 extends beyond EOD, truncated
[  121.414877][   T95] loop1: p168 size 117900032 extends beyond EOD, truncated
[  121.423954][   T95] loop1: p169 size 1342439424 extends beyond EOD, truncated
[  121.431806][   T95] loop1: p170 size 117900032 extends beyond EOD, truncated
[  121.439394][   T95] loop1: p171 size 1342439424 extends beyond EOD, truncated
[  121.447280][   T95] loop1: p172 size 117900032 extends beyond EOD, truncated
[  121.455007][   T95] loop1: p173 size 1342439424 extends beyond EOD, truncated
[  121.462710][   T95] loop1: p174 size 117900032 extends beyond EOD, truncated
[  121.470445][   T95] loop1: p175 size 1342439424 extends beyond EOD, truncated
[  121.478420][   T95] loop1: p176 size 117900032 extends beyond EOD, truncated
[  121.485305][   T15] usb 5-1: unable to get BOS descriptor or descriptor too short
[  121.487325][   T95] loop1: p177 size 1342439424 extends beyond EOD, truncated
[  121.501193][   T95] loop1: p178 size 117900032 extends beyond EOD, truncated
[  121.508987][   T95] loop1: p179 size 1342439424 extends beyond EOD, truncated
[  121.516683][   T95] loop1: p180 size 117900032 extends beyond EOD, truncated
[  121.524525][   T95] loop1: p181 size 1342439424 extends beyond EOD, truncated
[  121.532310][   T95] loop1: p182 size 117900032 extends beyond EOD, truncated
[  121.540073][   T95] loop1: p183 size 1342439424 extends beyond EOD, truncated
[  121.548169][   T95] loop1: p184 size 117900032 extends beyond EOD, truncated
[  121.556046][   T95] loop1: p185 size 1342439424 extends beyond EOD, truncated
[  121.563912][   T95] loop1: p186 size 117900032 extends beyond EOD, truncated
[  121.571752][   T95] loop1: p187 size 1342439424 extends beyond EOD, truncated
[  121.579746][   T95] loop1: p188 size 117900032 extends beyond EOD, truncated
[  121.581654][   T15] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 41068, setting to 1024
[  121.588899][   T95] loop1: p189 size 1342439424 extends beyond EOD, truncated
[  121.598916][   T15] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024
[  121.611600][   T95] loop1: p190 size 117900032 extends beyond EOD, truncated
[  121.617081][   T15] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFD, skipping
[  121.627196][   T95] loop1: p191 size 1342439424 extends beyond EOD, truncated
[  121.641513][   T95] loop1: p192 size 117900032 extends beyond EOD, truncated
[  121.644756][   T15] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  121.650330][   T95] loop1: p193 size 1342439424 extends beyond EOD, truncated
[  121.666936][   T95] loop1: p194 size 117900032 extends beyond EOD, truncated
[  121.671424][   T53] usb 4-1: new full-speed USB device number 37 using dummy_hcd
[  121.675576][   T95] loop1: p195 size 1342439424 extends beyond EOD, truncated
[  121.689740][   T95] loop1: p196 size 117900032 extends beyond EOD, truncated
[  121.697389][   T95] loop1: p197 size 1342439424 extends beyond EOD, truncated
[  121.705334][   T95] loop1: p198 size 117900032 extends beyond EOD, truncated
[  121.713056][   T95] loop1: p199 size 1342439424 extends beyond EOD, truncated
[  121.720925][   T95] loop1: p200 size 117900032 extends beyond EOD, truncated
[  121.728531][   T95] loop1: p201 size 1342439424 extends beyond EOD, truncated
[  121.736751][   T95] loop1: p202 size 117900032 extends beyond EOD, truncated
[  121.744515][   T95] loop1: p203 size 1342439424 extends beyond EOD, truncated
[  121.752366][   T95] loop1: p204 size 117900032 extends beyond EOD, truncated
[  121.760152][   T95] loop1: p205 size 1342439424 extends beyond EOD, truncated
[  121.768442][   T95] loop1: p206 size 117900032 extends beyond EOD, truncated
[  121.776322][   T95] loop1: p207 size 1342439424 extends beyond EOD, truncated
[  121.784146][ T4577] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  121.785238][   T95] loop1: p208 size 117900032 extends beyond EOD, truncated
[  121.793902][ T4577] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001)
[  121.802477][   T95] loop1: p209 size 1342439424 extends beyond EOD, truncated
[  121.816578][   T95] loop1: p210 size 117900032 extends beyond EOD, truncated
[  121.824277][   T95] loop1: p211 size 1342439424 extends beyond EOD, truncated
[  121.832088][   T95] loop1: p212 size 117900032 extends beyond EOD, truncated
[  121.839832][   T95] loop1: p213 size 1342439424 extends beyond EOD, truncated
[  121.847491][   T95] loop1: p214 size 117900032 extends beyond EOD, truncated
[  121.855297][   T95] loop1: p215 size 1342439424 extends beyond EOD, truncated
[  121.863015][   T95] loop1: p216 size 117900032 extends beyond EOD, truncated
[  121.871439][   T95] loop1: p217 size 1342439424 extends beyond EOD, truncated
[  121.879136][   T95] loop1: p218 size 117900032 extends beyond EOD, truncated
[  121.887144][   T95] loop1: p219 size 1342439424 extends beyond EOD, truncated
[  121.895013][   T95] loop1: p220 size 117900032 extends beyond EOD, truncated
[  121.902827][   T95] loop1: p221 size 1342439424 extends beyond EOD, truncated
[  121.910589][   T95] loop1: p222 size 117900032 extends beyond EOD, truncated
[  121.918747][   T95] loop1: p223 size 1342439424 extends beyond EOD, truncated
[  121.926655][   T95] loop1: p224 size 117900032 extends beyond EOD, truncated
[  121.936135][   T95] loop1: p225 size 1342439424 extends beyond EOD, truncated
[  121.943798][   T95] loop1: p226 size 117900032 extends beyond EOD, truncated
[  121.955485][   T15] usb 5-1: string descriptor 0 read error: -22
[  121.961720][   T15] usb 5-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40
[  121.964622][   T95] loop1: p227 size 1342439424 extends beyond EOD, truncated
[  121.978953][   T95] loop1: p228 size 117900032 extends beyond EOD, truncated
[  121.986586][   T95] loop1: p229 size 1342439424 extends beyond EOD, truncated
[  121.993795][   T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.002336][   T95] loop1: p230 size 117900032 extends beyond EOD, truncated
[  122.014258][ T4586] fuse: Bad value for 'fd'
[  122.018881][   T95] loop1: p231 size 1342439424 extends beyond EOD, truncated
[  122.031285][ T4546] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  122.037976][   T95] loop1: p232 size 117900032 extends beyond EOD, truncated
[  122.038341][ T4546] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  122.052901][   T95] loop1: p233 size 1342439424 extends beyond EOD, truncated
[  122.060949][   T95] loop1: p234 size 117900032 extends beyond EOD, truncated
[  122.068816][   T95] loop1: p235 size 1342439424 extends beyond EOD, truncated
[  122.077235][   T15] usb 5-1: MIDIStreaming interface descriptor not found
[  122.084746][   T95] loop1: p236 size 117900032 extends beyond EOD, truncated
[  122.092352][   T15] usb 5-1: too many endpoints
[  122.097316][   T53] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  122.108496][   T95] loop1: p237 size 1342439424 extends beyond EOD, truncated
[  122.116446][   T53] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.127233][   T95] loop1: p238 size 117900032 extends beyond EOD, truncated
[  122.134832][   T53] usb 4-1: config 0 has no interface number 0
[  122.141220][   T95] loop1: p239 size 1342439424 extends beyond EOD, truncated
[  122.149251][   T95] loop1: p240 size 117900032 extends beyond EOD, truncated
[  122.156918][   T95] loop1: p241 size 1342439424 extends beyond EOD, truncated
[  122.164904][   T95] loop1: p242 size 117900032 extends beyond EOD, truncated
[  122.172766][   T95] loop1: p243 size 1342439424 extends beyond EOD, truncated
[  122.180649][   T95] loop1: p244 size 117900032 extends beyond EOD, truncated
[  122.189688][   T95] loop1: p245 size 1342439424 extends beyond EOD, truncated
[  122.201690][   T95] loop1: p246 size 117900032 extends beyond EOD, truncated
[  122.209333][   T95] loop1: p247 size 1342439424 extends beyond EOD, truncated
[  122.218836][   T95] loop1: p248 size 117900032 extends beyond EOD, truncated
[  122.227935][   T95] loop1: p249 size 1342439424 extends beyond EOD, truncated
[  122.235988][   T95] loop1: p250 size 117900032 extends beyond EOD, truncated
[  122.244228][   T95] loop1: p251 size 1342439424 extends beyond EOD, truncated
[  122.251980][   T95] loop1: p252 size 117900032 extends beyond EOD, truncated
[  122.260057][   T95] loop1: p253 size 1342439424 extends beyond EOD, truncated
[  122.273798][   T95] loop1: p254 size 117900032 extends beyond EOD, truncated
[  122.281768][   T95] loop1: p255 size 1342439424 extends beyond EOD, truncated
[  122.313883][   T15] usb 5-1: USB disconnect, device number 41
[  122.320234][   T53] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  122.329266][   T53] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.337899][   T53] usb 4-1: Product: syz
[  122.348507][ T4610] futex_wake_op: syz.0.1925 tries to shift op by 32; fix this program
[  122.349973][   T53] usb 4-1: Manufacturer: syz
[  122.361386][   T53] usb 4-1: SerialNumber: syz
[  122.373604][   T53] usb 4-1: config 0 descriptor??
[  122.429557][   T53] uvcvideo: Found UVC 0.00 device syz (046c:14e8)
[  122.440234][   T53] uvcvideo: No valid video chain found.
[  122.476657][ T4622] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1931: inode has both inline data and extents flags
[  122.501471][ T4622] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1931: couldn't read orphan inode 15 (err -117)
[  122.514950][ T4622] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue
[  122.655173][  T367] usb 4-1: USB disconnect, device number 37
[  122.729997][  T556] udevd[556]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  122.730003][  T561] udevd[561]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  122.733795][  T307] udevd[307]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory
[  122.746106][  T562] udevd[562]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  122.754375][  T363] udevd[363]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  122.764583][  T302] udevd[302]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  122.772141][  T557] udevd[557]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory
[  122.783326][  T365] udevd[365]: inotify_add_watch(7, /dev/loop1p8, 10) failed: No such file or directory
[  122.794898][  T558] udevd[558]: inotify_add_watch(7, /dev/loop1p13, 10) failed: No such file or directory
[  122.801453][  T560] udevd[560]: inotify_add_watch(7, /dev/loop1p12, 10) failed: No such file or directory
[  122.832249][   T53] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  122.939378][    T5] usb 2-1: new full-speed USB device number 39 using dummy_hcd
[  122.992460][   T15] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  123.216989][   T53] usb 1-1: config 129 has an invalid interface number: 29 but max is 1
[  123.225302][   T53] usb 1-1: config 129 has no interface number 0
[  123.252380][   T53] usb 1-1: config 129 interface 29 has no altsetting 0
[  123.259365][   T53] usb 1-1: config 129 interface 1 has no altsetting 0
[  123.266246][   T15] usb 3-1: Using ep0 maxpacket: 16
[  123.321372][ T4665] erofs: (device loop3): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms fffc
[  123.366662][    T5] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.377587][    T5] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  123.420143][   T15] usb 3-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config
[  123.430748][ T2400] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  123.438541][   T15] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  123.458034][   T15] usb 3-1: config 1 has no interface number 0
[  123.464390][   T53] usb 1-1: New USB device found, idVendor=0856, idProduct=ac11, bcdDevice=ca.06
[  123.475741][    T5] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  123.491312][   T15] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  123.503471][    T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  123.520212][   T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.537850][   T15] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  123.549219][    T5] usb 2-1: SerialNumber: syz
[  123.563425][   T53] usb 1-1: Product: syz
[  123.567717][   T53] usb 1-1: Manufacturer: syz
[  123.573490][   T53] usb 1-1: SerialNumber: syz
[  123.623725][    T5] usb 2-1: 0:2 : does not exist
[  123.643451][ T4670] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6)
[  123.654120][ T4670] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  123.666549][ T4670] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.1952: Failed to acquire dquot type 0
[  123.680307][ T4670] EXT4-fs error (device loop3): mb_free_blocks:1540: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  123.697568][ T4670] EXT4-fs (loop3): 1 truncate cleaned up
[  123.704609][ T2400] usb 5-1: Using ep0 maxpacket: 32
[  123.712200][ T4670] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,inlinecrypt,,errors=continue
[  123.762232][   T15] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[  123.772177][   T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.803605][   T15] usb 3-1: Product: syz
[  123.824390][ T4676] erofs: (device loop3): EXPERIMENTAL big pcluster feature in use. Use at your own risk!
[  123.836637][   T15] usb 3-1: Manufacturer: syz
[  123.846299][ T4676] erofs: (device loop3): z_erofs_load_lzma_config: lzma algorithm isn't enabled
[  123.864921][   T15] usb 3-1: SerialNumber: syz
[  123.870342][    T5] usb 2-1: USB disconnect, device number 39
[  123.905045][   T24] audit: type=1400 audit(1785176013.359:213): avc:  denied  { sys_module } for  pid=4680 comm="syz.3.1956" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  123.929036][   T24] audit: type=1400 audit(1785176013.378:214): avc:  denied  { module_load } for  pid=4680 comm="syz.3.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  123.965827][   T53] ftdi_sio 1-1:129.29: FTDI USB Serial Device converter detected
[  123.973903][   T53] usb 1-1: Detected FT2232C
[  124.008085][   T53] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  124.040205][   T53] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  124.047622][   T53] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  124.056502][   T53] ftdi_sio 1-1:129.1: FTDI USB Serial Device converter detected
[  124.064600][   T53] usb 1-1: Detected FT2232C
[  124.082987][ T2400] usb 5-1: New USB device found, idVendor=17cc, idProduct=4711, bcdDevice= 0.40
[  124.092085][ T2400] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.100176][   T53] ftdi_sio ttyUSB1: Unable to read latency timer: -71
[  124.107036][ T2400] usb 5-1: Product: syz
[  124.111231][ T2400] usb 5-1: Manufacturer: syz
[  124.116072][ T2400] usb 5-1: SerialNumber: syz
[  124.125670][   T53] ftdi_sio ttyUSB1: Unable to write latency timer: -71
[  124.133089][   T53] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB1
[  124.146569][   T53] usb 1-1: USB disconnect, device number 39
[  124.154008][   T53] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  124.163733][   T53] ftdi_sio 1-1:129.29: device disconnected
[  124.170432][   T53] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1
[  124.179975][   T53] ftdi_sio 1-1:129.1: device disconnected
[  124.286001][  T431] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  124.296723][   T15] usb 3-1: 1:0 : does not exist
[  124.301636][   T15] usb 3-1: 1:2 : does not exist
[  124.306545][   T15] usb 3-1: 1:3 : does not exist
[  124.311627][   T15] usb 3-1: BAAD HEADPHONE p_chmask mismatch
[  124.317712][   T15] snd-usb-audio: probe of 3-1:1.1 failed with error -22
[  124.325366][   T15] usb 3-1: USB disconnect, device number 43
[  124.413989][   T24] audit: type=1326 audit(1785176013.827:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4694 comm="syz.1.1963" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a47505e99 code=0x0
[  124.492707][   T24] audit: type=1400 audit(1785176013.902:216): avc:  denied  { write } for  pid=4706 comm="syz.0.1969" name="pfkey" dev="proc" ino=4026532429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  124.564005][ T2400] usb 5-1: MIDIStreaming interface descriptor not found
[  124.573831][ T2400] usb 5-1: USB disconnect, device number 42
[  124.584714][ T4715] EXT4-fs warning (device loop1): ext4_multi_mount_protect:300: Invalid MMP block in superblock
[  124.709516][ T4729] SELinux:  Context system_u:object_r:man_t:s0 is not valid (left unmapped).
[  124.719202][   T24] audit: type=1400 audit(1785176014.117:217): avc:  denied  { relabelto } for  pid=4727 comm="syz.0.1979" name="455" dev="tmpfs" ino=2349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0"
[  124.735357][  T431] usb 4-1: unable to get BOS descriptor or descriptor too short
[  124.787951][   T24] audit: type=1400 audit(1785176014.155:218): avc:  denied  { associate } for  pid=4727 comm="syz.0.1979" name="455" dev="tmpfs" ino=2349 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:man_t:s0"
[  124.815248][   T24] audit: type=1400 audit(1785176014.164:219): avc:  denied  { write } for  pid=281 comm="syz-executor" name="455" dev="tmpfs" ino=2349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0"
[  124.820879][  T431] usb 4-1: not running at top speed; connect to a high speed hub
[  124.928239][  T431] usb 4-1: config 29 has an invalid interface number: 206 but max is 0
[  124.943004][  T431] usb 4-1: config 29 has no interface number 0
[  124.953001][  T431] usb 4-1: config 29 interface 206 has no altsetting 0
[  125.011771][ T4757] cgroup2: Unknown parameter 'defcontext÷ŸÕL'
[  125.147676][ T4775] EXT4-fs (loop2): Ignoring removed nobh option
[  125.178195][ T4775] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27
[  125.187416][ T4775] EXT4-fs error (device loop2): ext4_dirty_inode:6181: inode #3: comm syz.2.2002: mark_inode_dirty error
[  125.202642][ T4775] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27
[  125.211183][ T4775] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #3: comm syz.2.2002: mark_inode_dirty error
[  125.222504][  T431] usb 4-1: string descriptor 0 read error: -22
[  125.223940][ T4775] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.2002: Failed to acquire dquot type 0
[  125.228905][  T431] usb 4-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=76.af
[  125.243152][ T4775] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27
[  125.249501][  T431] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.258418][ T4775] EXT4-fs error (device loop2): ext4_dirty_inode:6181: inode #16: comm syz.2.2002: mark_inode_dirty error
[  125.276841][ T4775] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27
[  125.285271][ T4775] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #16: comm syz.2.2002: mark_inode_dirty error
[  125.296864][ T4775] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27
[  125.305246][ T4775] EXT4-fs error (device loop2) in ext4_orphan_del:3292: error 27
[  125.313276][ T4775] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27
[  125.315259][  T431] uvcvideo: Found UVC 0.00 device <unnamed> (05ac:8514)
[  125.322041][ T4775] EXT4-fs error (device loop2): ext4_truncate:4403: inode #16: comm syz.2.2002: mark_inode_dirty error
[  125.339763][  T431] uvcvideo: No valid video chain found.
[  125.345624][ T4775] EXT4-fs error (device loop2) in ext4_orphan_cleanup:3106: error 27
[  125.354223][ T4775] EXT4-fs (loop2): 1 truncate cleaned up
[  125.355966][ T2400] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  125.360645][ T4775] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,nobh,,errors=continue
[  125.377918][ T4775] ext4 filesystem being mounted at /424/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.494025][   T25] usb 5-1: new low-speed USB device number 43 using dummy_hcd
[  125.538846][   T53] usb 4-1: USB disconnect, device number 38
[  125.622291][ T2400] usb 2-1: Using ep0 maxpacket: 32
[  125.707878][  T431] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  125.921708][   T25] usb 5-1: unable to get BOS descriptor or descriptor too short
[  125.921756][ T2400] usb 2-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40
[  125.938901][ T2400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.947125][ T2400] usb 2-1: Product: syz
[  125.951294][ T2400] usb 2-1: Manufacturer: syz
[  125.955951][ T2400] usb 2-1: SerialNumber: syz
[  126.028624][   T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 8
[  126.092741][  T431] usb 3-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30
[  126.103795][  T431] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 181, changing to 11
[  126.115350][  T431] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  126.128575][  T431] usb 3-1: config 0 interface 0 has no altsetting 0
[  126.135205][  T431] usb 3-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00
[  126.144437][  T431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.153416][  T431] usb 3-1: config 0 descriptor??
[  126.200521][  T431] usbhid 3-1:0.0: can't add hid device: -22
[  126.206948][  T431] usbhid: probe of 3-1:0.0 failed with error -22
[  126.220975][  T367] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  126.254084][ T4798]  loop3: p1 p3 < p5 p6 >
[  126.295877][ T2400] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  126.306572][   T25] usb 5-1: string descriptor 0 read error: -22
[  126.312814][   T25] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  126.317375][ T2400] usb 2-1: 2:1: invalid format type 0x1003 is detected, processed as PCM
[  126.330608][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.330996][ T2400] usb 2-1: 2:1 : sample bitwidth 127 in over sample bytes 6
[  126.346293][ T2400] usb 2-1: 2:1 : unsupported sample bitwidth 127 in 6 bytes
[  126.373164][ T2400] usb 2-1: USB disconnect, device number 40
[  126.381426][ T4788] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  126.403328][   T25] usb 5-1: selecting invalid altsetting 1
[  126.427288][  T274] usb 3-1: USB disconnect, device number 44
[  126.433890][   T25] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  126.512185][ T4801] F2FS-fs (loop3): Invalid log_blocksize (2060), supports only 12
[  126.520344][ T4801] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  126.529024][ T4801] F2FS-fs (loop3): invalid crc value
[  126.534779][ T4801] F2FS-fs (loop3): invalid crc value
[  126.540102][ T4801] F2FS-fs (loop3): Failed to get valid F2FS checkpoint
[  126.616658][  T367] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  126.633458][   T25] usb 5-1: USB disconnect, device number 43
[  126.809046][  T367] usb 1-1: New USB device found, idVendor=0499, idProduct=1008, bcdDevice= 0.40
[  126.818121][  T367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.830534][  T367] usb 1-1: Product: syz
[  126.834745][  T367] usb 1-1: Manufacturer: syz
[  126.839404][  T367] usb 1-1: SerialNumber: syz
[  126.894496][ T1036] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[  127.078968][ T4826] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled
[  127.089158][ T4826] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=./file1,quota,,errors=continue
[  127.108828][ T2400] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  127.183642][  T367] snd-usb-audio: probe of 1-1:1.0 failed with error -2
[  127.191911][  T367] usb 1-1: USB disconnect, device number 40
[  127.279484][ T1036] usb 4-1: config 127 has an invalid interface number: 57 but max is 0
[  127.288186][ T1036] usb 4-1: config 127 has no interface number 0
[  127.294093][ T4842] EXT4-fs (loop4): bad block size 16384
[  127.295887][ T1036] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  127.386895][ T2400] usb 2-1: Using ep0 maxpacket: 32
[  127.428996][  T274] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  127.482550][ T1036] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[  127.491747][ T1036] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.499835][ T1036] usb 4-1: Product: syz
[  127.504186][ T1036] usb 4-1: Manufacturer: syz
[  127.508802][ T1036] usb 4-1: SerialNumber: syz
[  127.525276][ T4810] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  127.536147][ T2400] usb 2-1: config 0 has an invalid interface number: 151 but max is 0
[  127.544484][ T2400] usb 2-1: config 0 has no interface number 0
[  127.550852][ T2400] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11
[  127.562472][ T2400] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024
[  127.614422][ T4859] F2FS-fs (loop4): invalid crc value
[  127.621751][ T4859] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  127.663222][ T4859] F2FS-fs (loop4): recover fsync data on readonly fs
[  127.670311][ T4859] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[  127.677137][ T4859] F2FS-fs (loop4): checkpoint=disable on readonly fs
[  127.685714][  T274] usb 3-1: Using ep0 maxpacket: 8
[  127.695228][ T4865] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  127.707109][ T4865] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  127.717684][ T4865] EXT4-fs (loop0): orphan cleanup on readonly fs
[  127.724698][ T4865] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3357: comm syz.0.2042: Allocating blocks 41-42 which overlap fs metadata
[  127.739170][ T4865] __quota_error: 4 callbacks suppressed
[  127.739180][ T4865] Quota error (device loop0): write_blk: dquota write failed
[  127.752595][ T4865] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  127.762614][ T2400] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  127.762706][ T4865] EXT4-fs error (device loop0): ext4_acquire_dquot:6230: comm syz.0.2042: Failed to acquire dquot type 0
[  127.771715][ T2400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.771726][ T2400] usb 2-1: Product: syz
[  127.771735][ T2400] usb 2-1: Manufacturer: syz
[  127.771749][ T2400] usb 2-1: SerialNumber: syz
[  127.807283][ T4865] EXT4-fs error (device loop0): mb_free_blocks:1540: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  127.822027][ T2400] usb 2-1: config 0 descriptor??
[  127.827637][ T4865] EXT4-fs (loop0): 1 truncate cleaned up
[  127.833376][ T4865] EXT4-fs (loop0): pa ffff8881107dc1f8: logic 1, phys. 41, len 23
[  127.841243][ T4865] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4367: group 0, free 22, pa_free 23
[  127.846459][ T1036] asix: probe of 4-1:127.57 failed with error -71
[  127.851824][ T4818] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  127.858840][ T4865] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,noblock_validity,noquota,nolazytime,nogrpid,errors=continue,jqfmt=vfsold,i_version,resuid=0x00000000000000002,errors=continue
[  127.886446][  T274] usb 3-1: unable to get BOS descriptor or descriptor too short
[  127.895975][ T1036] usb 4-1: USB disconnect, device number 39
[  127.974357][  T274] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  128.105260][ T4875] erofs: (device loop4): erofs_read_superblock: invalid sb_extslots 4192 (more than a fs block)
[  128.157863][ T4869] F2FS-fs (loop0): Invalid log_blocksize (64), supports only 12
[  128.165630][ T4869] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  128.189072][ T2400] usb 2-1: USB disconnect, device number 41
[  128.241541][  T274] usb 3-1: string descriptor 0 read error: -22
[  128.247784][  T274] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40
[  128.257534][  T274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.306497][  T274] snd-usb-audio: probe of 3-1:1.0 failed with error -2
[  128.405850][ T4899] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  128.425221][ T4899] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3357: comm syz.3.2057: Allocating blocks 41-42 which overlap fs metadata
[  128.440799][ T4899] Quota error (device loop3): write_blk: dquota write failed
[  128.448369][ T4899] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[  128.458008][ T4899] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3357: comm syz.3.2057: Allocating blocks 41-42 which overlap fs metadata
[  128.472217][ T4899] Quota error (device loop3): write_blk: dquota write failed
[  128.479787][ T4899] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  128.490051][ T4899] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.2057: Failed to acquire dquot type 1
[  128.501692][ T4899] EXT4-fs error (device loop3): mb_free_blocks:1540: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  128.516428][ T4899] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27
[  128.524931][ T4899] EXT4-fs error (device loop3): ext4_dirty_inode:6181: inode #12: comm syz.3.2057: mark_inode_dirty error
[  128.536606][ T4899] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27
[  128.545052][ T4899] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #12: comm syz.3.2057: mark_inode_dirty error
[  128.549627][ T2400] usb 3-1: USB disconnect, device number 45
[  128.557280][ T4899] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27
[  128.570768][ T4899] EXT4-fs error (device loop3) in ext4_orphan_del:3292: error 27
[  128.582735][ T4899] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27
[  128.590979][ T1036] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[  128.598790][ T4899] EXT4-fs error (device loop3): ext4_truncate:4403: inode #12: comm syz.3.2057: mark_inode_dirty error
[  128.610495][ T4899] EXT4-fs error (device loop3) in ext4_orphan_cleanup:3106: error 27
[  128.618850][ T4899] EXT4-fs (loop3): 1 truncate cleaned up
[  128.624599][ T4899] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,errors=continue,resgid=0x00000000000000002
[  128.802611][ T4895] F2FS-fs (loop4): Not support 134217728, larger than 256
[  128.819346][   T24] audit: type=1400 audit(1785176017.952:222): avc:  denied  { read write } for  pid=4906 comm="syz.1.2060" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  128.849542][   T24] audit: type=1400 audit(1785176017.952:223): avc:  denied  { open } for  pid=4906 comm="syz.1.2060" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  128.983719][   T24] audit: type=1326 audit(1785176018.102:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4930 comm="syz.3.2071" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e6882be99 code=0x0
[  129.011398][ T1036] usb 1-1: not running at top speed; connect to a high speed hub
[  129.096789][ T1036] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.107280][ T1036] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  129.116814][ T1036] usb 1-1: config 1 has no interface number 0
[  129.193891][ T4955] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5
[  129.193891][ T4955] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  129.193891][ T4955] 
[  129.213632][ T4955] EXT4-fs error (device loop2): ext4_quota_enable:6451: inode #4: comm syz.2.2083: iget: immutable or append flags not allowed on symlinks
[  129.228345][ T4955] EXT4-fs error (device loop2): ext4_quota_enable:6454: comm syz.2.2083: Bad quota inode: 4, type: 1
[  129.239667][ T4955] EXT4-fs warning (device loop2): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  129.254728][ T4955] EXT4-fs (loop2): mount failed
[  129.257365][  T274] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  129.259799][  T431] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  129.321298][ T1036] usb 1-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40
[  129.330402][ T1036] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.338602][ T1036] usb 1-1: Product: syz
[  129.343014][ T1036] usb 1-1: Manufacturer: syz
[  129.347624][ T1036] usb 1-1: SerialNumber: syz
[  129.449544][   T53] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  129.643198][ T1036] usb 1-1: USB disconnect, device number 41
[  129.652777][  T431] usb 5-1: config 1 has an invalid interface association descriptor of length 2, skipping
[  129.662795][  T431] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.672972][  T431] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  129.674354][  T274] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.682529][ T2400] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  129.692805][  T274] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[  129.708947][  T274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.717816][  T274] usb 2-1: config 0 descriptor??
[  129.834423][   T53] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.844610][   T53] usb 4-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  129.877254][  T431] usb 5-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40
[  129.886358][  T431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.894404][  T431] usb 5-1: Product: syz
[  129.898736][  T431] usb 5-1: Manufacturer: syz
[  129.903339][  T431] usb 5-1: SerialNumber: syz
[  129.951986][ T2400] usb 3-1: Using ep0 maxpacket: 32
[  130.005583][  T274] usb 2-1: string descriptor 0 read error: -71
[  130.012118][  T274] rndis_host 2-1:0.0: skipping garbage
[  130.017852][  T274] usb 2-1: bad CDC descriptors
[  130.025615][  T274] usb 2-1: USB disconnect, device number 42
[  130.027174][   T53] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  130.040915][   T53] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.049002][   T53] usb 4-1: Product: syz
[  130.053255][   T53] usb 4-1: Manufacturer: syz
[  130.057890][   T53] usb 4-1: SerialNumber: syz
[  130.102229][   T53] usb-storage 4-1:1.0: USB Mass Storage device detected
[  130.110109][   T53] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[  130.118134][   T53] scsi host1: usb-storage 4-1:1.0
[  130.123343][ T2400] usb 3-1: unable to get BOS descriptor or descriptor too short
[  130.162442][   T53] usb 5-1: USB disconnect, device number 44
[  130.208621][ T2400] usb 3-1: config 251 has an invalid interface number: 87 but max is 2
[  130.220672][ T2400] usb 3-1: config 251 has an invalid interface number: 99 but max is 2
[  130.229278][ T2400] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  130.244021][ T2400] usb 3-1: config 251 has 2 interfaces, different from the descriptor's value: 3
[  130.253470][ T2400] usb 3-1: config 251 has no interface number 0
[  130.264462][ T2400] usb 3-1: config 251 has no interface number 1
[  130.270964][ T2400] usb 3-1: config 251 interface 87 altsetting 14 has an invalid endpoint with address 0x0, skipping
[  130.282146][ T2400] usb 3-1: config 251 interface 87 altsetting 14 has an invalid endpoint with address 0x0, skipping
[  130.297650][ T2400] usb 3-1: config 251 interface 87 altsetting 14 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  130.310019][ T2400] usb 3-1: config 251 interface 87 has no altsetting 0
[  130.324241][  T274] usb 4-1: USB disconnect, device number 40
[  130.339456][ T4982] EXT4-fs error (device loop0): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  130.353787][ T4982] EXT4-fs (loop0): Remounting filesystem read-only
[  130.360743][ T4982] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27
[  130.369128][ T4982] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #16: comm syz.0.2094: mark_inode_dirty error
[  130.380646][ T4982] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27
[  130.389050][ T4982] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #16: comm syz.0.2094: mark_inode_dirty error
[  130.400711][ T4982] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27
[  130.409270][ T4982] EXT4-fs error (device loop0) in ext4_orphan_del:3292: error 27
[  130.417428][ T4982] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27
[  130.425851][ T4982] EXT4-fs error (device loop0): ext4_truncate:4403: inode #16: comm syz.0.2094: mark_inode_dirty error
[  130.437135][ T4982] EXT4-fs error (device loop0) in ext4_orphan_cleanup:3106: error 27
[  130.445471][ T4982] EXT4-fs (loop0): 1 truncate cleaned up
[  130.451180][ T4982] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,minixdf,
[  130.461031][ T4982] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.486569][ T2400] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=9d.e7
[  130.495615][ T2400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.503867][ T2400] usb 3-1: Product: syz
[  130.508056][ T2400] usb 3-1: Manufacturer: syz
[  130.512639][ T2400] usb 3-1: SerialNumber: syz
[  130.529434][ T4961] raw-gadget.4 gadget: fail, usb_ep_enable returned -22
[  130.600808][ T4999] incfs: Options parsing error. -22
[  130.606194][ T4999] incfs: mount failed -22
[  130.796240][ T5019] EXT4-fs error (device loop4): ext4_ext_check_inode:500: inode #4: comm syz.4.2110: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0)
[  130.814361][ T5019] EXT4-fs error (device loop4): ext4_quota_enable:6454: comm syz.4.2110: Bad quota inode: 4, type: 1
[  130.825580][ T5019] EXT4-fs warning (device loop4): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  130.840915][ T5019] EXT4-fs (loop4): mount failed
[  130.864028][ T2400] usb 3-1: USB disconnect, device number 46
[  131.016424][ T5030] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  131.031855][ T5030] SELinux: security_context_str_to_sid(user_u) failed for (dev loop4, type ext4) errno=-22
[  131.063841][   T53] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  131.077463][   T24] audit: type=1326 audit(1785176020.066:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.3.2119" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e6882be99 code=0x0
[  131.102594][  T556] udevd[556]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:251.87/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  131.406533][ T5058] EXT4-fs (loop3): Ignoring removed oldalloc option
[  131.414436][ T5058] EXT4-fs (loop3): Ignoring removed oldalloc option
[  131.421454][ T5058] EXT4-fs (loop3): Ignoring removed oldalloc option
[  131.429823][ T5058] EXT4-fs (loop3): filesystem is read-only
[  131.436026][ T5058] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  131.447844][ T5058] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=9816c018, mo2=0002]
[  131.456457][ T5058] EXT4-fs (loop3): filesystem is read-only
[  131.466957][ T5058] EXT4-fs (loop3): orphan cleanup on readonly fs
[  131.477086][ T5052] F2FS-fs (loop4): Invalid uid value -1
[  131.502152][   T53] usb 2-1: unable to get BOS descriptor or descriptor too short
[  131.509940][ T5058] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2128: bg 0: block 64: padding at end of block bitmap is not set
[  131.534363][ T5058] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5650: Corrupt filesystem
[  131.543336][ T5058] EXT4-fs (loop3): 1 orphan inode deleted
[  131.553924][ T5058] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,data_err=abort,debug,stripe=0x0000000000000002,stripe=0x0000000000000009,noblock_validity,grpquota,journal_ioprio=0x0000000000000002,dioread_lock,oldalloc,oldalloc,max_dir_size_kb=0x0000000000000008,,errors=continue
[  131.643213][ T2400] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  131.844278][   T53] usb 2-1: string descriptor 0 read error: -22
[  131.850569][   T53] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[  131.859802][   T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.908424][ T2400] usb 3-1: Using ep0 maxpacket: 16
[  131.951160][ T1036] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  131.972538][  T431] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  132.036735][ T2400] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  132.046916][ T2400] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 49212, setting to 1024
[  132.058067][  T300] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  132.065656][ T2400] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024
[  132.075641][ T2400] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  132.085365][ T2400] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  132.143649][   T53] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  132.186485][   T53] usb 2-1: 2:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  132.195028][   T53] usb 2-1: found format II with max.bitrate = 3, frame size=257
[  132.202898][   T53] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  132.232065][   T53] usb 2-1: USB disconnect, device number 43
[  132.261240][ T2400] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  132.270333][ T2400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.278541][ T2400] usb 3-1: Product: syz
[  132.282758][ T2400] usb 3-1: Manufacturer: syz
[  132.287378][ T2400] usb 3-1: SerialNumber: syz
[  132.303988][ T5061] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  132.325335][  T300] usb 5-1: Using ep0 maxpacket: 32
[  132.378802][ T1036] usb 4-1: config 1 descriptor has 1 excess byte, ignoring
[  132.386145][ T1036] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  132.400186][  T431] usb 1-1: unable to get BOS descriptor or descriptor too short
[  132.442925][  T431] usb 1-1: not running at top speed; connect to a high speed hub
[  132.453715][  T300] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  132.464043][  T556] udevd[556]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  132.539305][  T431] usb 1-1: config 174 has an invalid interface number: 1 but max is 0
[  132.547594][  T431] usb 1-1: config 174 has no interface number 0
[  132.553977][  T431] usb 1-1: config 174 interface 1 altsetting 184 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  132.565248][  T431] usb 1-1: config 174 interface 1 altsetting 184 endpoint 0xA has invalid maxpacket 512, setting to 64
[  132.576355][  T431] usb 1-1: config 174 interface 1 has no altsetting 0
[  132.582236][ T1036] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  132.592276][ T1036] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.600323][ T1036] usb 4-1: Product: syz
[  132.604563][ T1036] usb 4-1: Manufacturer: syz
[  132.609332][ T1036] usb 4-1: SerialNumber: syz
[  132.624763][  T300] usb 5-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40
[  132.634382][  T300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.642443][  T300] usb 5-1: Product: syz
[  132.646750][  T300] usb 5-1: Manufacturer: syz
[  132.651339][  T300] usb 5-1: SerialNumber: syz
[  132.667470][ T5089] raw-gadget.4 gadget: fail, usb_ep_enable returned -22
[  132.669543][ T1036] rtl8150 4-1:1.0: couldn't find required endpoints
[  132.681477][ T1036] rtl8150: probe of 4-1:1.0 failed with error -5
[  132.710260][ T2400] usb 3-1: MIDIStreaming interface descriptor not found
[  132.721963][ T2400] usb 3-1: USB disconnect, device number 47
[  132.753047][  T431] usb 1-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=a8.e5
[  132.762162][  T431] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.770836][  T431] usb 1-1: Product: syz
[  132.775068][  T431] usb 1-1: Manufacturer: syz
[  132.779672][  T431] usb 1-1: SerialNumber: syz
[  132.806476][ T5073] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  132.883433][   T15] usb 4-1: USB disconnect, device number 41
[  132.977477][   T53] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  133.077879][  T300] usb 5-1: USB disconnect, device number 45
[  133.125983][ T5095] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[  133.135290][  T431] hub 1-1:174.1: bad descriptor, ignoring hub
[  133.136170][   T24] audit: type=1400 audit(1785176021.993:226): avc:  denied  { relabelto } for  pid=5094 comm="syz.2.2145" name="439" dev="tmpfs" ino=2266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0"
[  133.145318][  T431] hub: probe of 1-1:174.1 failed with error -5
[  133.178269][   T24] audit: type=1400 audit(1785176021.993:227): avc:  denied  { associate } for  pid=5094 comm="syz.2.2145" name="439" dev="tmpfs" ino=2266 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0"
[  133.213164][  T431] usb 1-1: USB disconnect, device number 42
[  133.234008][   T53] usb 2-1: Using ep0 maxpacket: 16
[  133.313916][ T5107] EXT4-fs (loop2): Ignoring removed bh option
[  133.321663][ T5107] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.2151: invalid indirect mapped block 234881024 (level 0)
[  133.336021][ T5107] EXT4-fs (loop2): Remounting filesystem read-only
[  133.342713][ T5107] EXT4-fs (loop2): 1 truncate cleaned up
[  133.348403][ T5107] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,dioread_lock,i_version,stripe=0x00000000000000f0,journal_ioprio=0x0000000000000001,bh,noblock_validity,
[  133.533386][   T53] usb 2-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40
[  133.542571][   T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.556826][   T53] usb 2-1: Product: syz
[  133.561031][   T53] usb 2-1: Manufacturer: syz
[  133.565872][   T53] usb 2-1: SerialNumber: syz
[  133.725838][  T300] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  133.765320][ T5163] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  133.793301][ T5163] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c128, mo2=0002]
[  133.802021][ T5163] EXT4-fs (loop3): orphan cleanup on readonly fs
[  133.809109][ T5163] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3357: comm syz.3.2178: Allocating blocks 41-42 which overlap fs metadata
[  133.823219][ T5163] EXT4-fs (loop3): Remounting filesystem read-only
[  133.829772][ T5163] Quota error (device loop3): write_blk: dquota write failed
[  133.837336][ T5163] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  133.847500][ T5163] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.2178: Failed to acquire dquot type 0
[  133.858962][ T5163] EXT4-fs (loop3): 1 truncate cleaned up
[  133.864770][ T5163] EXT4-fs (loop3): pa ffff8881107dcf18: logic 1, phys. 41, len 23
[  133.872589][ T5163] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4367: group 0, free 22, pa_free 23
[  133.882931][ T5163] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,errors=remount-ro,data_err=ignore,debug,noload,journal_dev=0x0000000000000002,noinit_itable,journal_dev=0x00000000000000102
[  133.961030][   T53] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  133.984070][   T53] usb 2-1: found format II with max.bitrate = 0, frame size=1
[  133.991939][   T53] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  133.998455][  T300] usb 3-1: Using ep0 maxpacket: 8
[  134.028053][   T53] usb 2-1: USB disconnect, device number 44
[  134.078621][   T15] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  134.089260][ T1036] usb 1-1: new low-speed USB device number 43 using dummy_hcd
[  134.217607][  T300] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  134.227787][  T300] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  134.236696][  T300] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  134.335152][   T15] usb 5-1: Using ep0 maxpacket: 16
[  134.367198][   T25] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  134.420848][  T300] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  134.430130][  T300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.438480][  T300] usb 3-1: Product: syz
[  134.442777][  T300] usb 3-1: Manufacturer: syz
[  134.447396][  T300] usb 3-1: SerialNumber: syz
[  134.495523][ T1036] usb 1-1: No LPM exit latency info found, disabling LPM.
[  134.496983][  T300] cdc_ncm 3-1:1.0: bind() failure
[  134.581091][ T1036] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  134.590878][ T1036] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 60, changing to 4
[  134.601936][ T1036] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0
[  134.623785][   T25] usb 4-1: Using ep0 maxpacket: 16
[  134.634523][   T15] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  134.643709][   T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.651772][   T15] usb 5-1: Product: syz
[  134.655961][   T15] usb 5-1: Manufacturer: syz
[  134.660559][   T15] usb 5-1: SerialNumber: syz
[  134.666247][   T15] usb 5-1: config 0 descriptor??
[  134.711361][  T300] usb 3-1: USB disconnect, device number 48
[  134.718022][   T15] ums-onetouch 5-1:0.0: USB Mass Storage device detected
[  134.741376][  T431] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[  134.773544][   T25] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  134.880375][ T1036] usb 1-1: string descriptor 0 read error: -22
[  134.886707][ T1036] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40
[  134.895832][ T1036] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.927430][   T15] usb 5-1: USB disconnect, device number 46
[  134.945417][ T1036] usb 1-1: low speed audio streaming not supported
[  134.952035][ T1036] usb 1-1: low speed audio streaming not supported
[  134.958722][   T25] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  134.968437][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.978529][   T25] usb 4-1: Product: syz
[  134.982715][   T25] usb 4-1: Manufacturer: syz
[  134.987372][   T25] usb 4-1: SerialNumber: syz
[  135.147672][  T431] usb 2-1: config index 0 descriptor too short (expected 8475, got 27)
[  135.156023][  T431] usb 2-1: config 0 has an invalid interface number: 200 but max is 0
[  135.164462][  T431] usb 2-1: config 0 has no interface number 0
[  135.170652][  T431] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  135.172487][ T1036] usb 1-1: USB disconnect, device number 43
[  135.180510][  T431] usb 2-1: config 0 interface 200 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  135.180543][  T431] usb 2-1: config 0 interface 200 has no altsetting 0
[  135.297481][   T25] usb 4-1: __uac_clock_find_source(): recursive clock topology detected, id 0.
[  135.298732][ T5209] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled
[  135.315785][   T25] usb 4-1: __uac_clock_find_source(): recursive clock topology detected, id 0.
[  135.316289][ T5209] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  135.340463][   T25] usb 4-1: __uac_clock_find_source(): recursive clock topology detected, id 0.
[  135.346386][ T5209] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  135.349642][   T25] usb 4-1: __uac_clock_find_source(): recursive clock topology detected, id 0.
[  135.360487][ T5209] EXT4-fs error (device loop2): ext4_quota_enable:6447: comm syz.2.2199: Bad quota inum: 1027, type: 0
[  135.378532][  T431] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.1a
[  135.387765][ T5209] EXT4-fs warning (device loop2): ext4_enable_quotas:6495: Failed to enable quota tracking (type=0, err=-117, ino=1027). Please run e2fsck to fix.
[  135.402706][  T431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.410722][  T431] usb 2-1: Product: syz
[  135.414996][  T431] usb 2-1: Manufacturer: syz
[  135.416052][ T5209] EXT4-fs (loop2): mount failed
[  135.419615][  T431] usb 2-1: SerialNumber: syz
[  135.429860][   T25] usb 4-1: USB disconnect, device number 42
[  135.436382][  T431] usb 2-1: config 0 descriptor??
[  135.618584][ T5238] fuseblk: Bad value for 'source'
[  135.768390][ T5249] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  135.781617][  T431] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input13
[  135.803065][  T431] usb 2-1: USB disconnect, device number 45
[  135.810941][ T5249] EXT4-fs (loop0): orphan cleanup on readonly fs
[  135.817381][ T5249] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.2218: Block bitmap for bg 0 marked uninitialized
[  135.832116][ T5249] EXT4-fs (loop0): Remounting filesystem read-only
[  135.840960][ T5249] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5650: Corrupt filesystem
[  135.851542][ T5249] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.2218: Block bitmap for bg 0 marked uninitialized
[  135.877743][ T1036] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  135.885817][ T5249] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5650: Corrupt filesystem
[  135.896218][ T5249] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.2218: Block bitmap for bg 0 marked uninitialized
[  135.912543][ T5249] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5650: Corrupt filesystem
[  135.926110][ T5249] EXT4-fs (loop0): 1 orphan inode deleted
[  135.931954][ T5249] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,
[  136.014530][ T5279] erofs: (device loop4): erofs_read_inode: unsupported i_format 516 of nid 36
[  136.091025][ T5288] 9pnet_virtio: no channels available for device 127.0.0.1
[  136.140559][   T24] audit: type=1400 audit(1785176024.802:228): avc:  denied  { create } for  pid=5295 comm="syz.4.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  136.162969][ T1036] usb 3-1: Using ep0 maxpacket: 8
[  136.206120][ T5306] 9pnet: Could not find request transport: xen
[  136.276627][ T1036] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.287654][ T1036] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  136.309489][ T5320] FAT-fs (loop0): Directory bread(block 64) failed
[  136.318332][ T5320] FAT-fs (loop0): Directory bread(block 65) failed
[  136.325217][ T5320] FAT-fs (loop0): Directory bread(block 66) failed
[  136.331811][ T5320] FAT-fs (loop0): Directory bread(block 67) failed
[  136.338520][ T5320] FAT-fs (loop0): Directory bread(block 68) failed
[  136.345503][ T5320] FAT-fs (loop0): Directory bread(block 69) failed
[  136.352215][ T5320] FAT-fs (loop0): Directory bread(block 70) failed
[  136.358970][ T5320] FAT-fs (loop0): Directory bread(block 71) failed
[  136.365721][ T5320] FAT-fs (loop0): Directory bread(block 72) failed
[  136.372375][ T5320] FAT-fs (loop0): Directory bread(block 73) failed
[  136.379455][ T5325] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  136.402935][ T5325] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start ffffffff)
[  136.444313][ T1036] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  136.453573][ T1036] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.461550][ T1036] usb 3-1: Product: syz
[  136.465819][ T1036] usb 3-1: Manufacturer: syz
[  136.470420][ T1036] usb 3-1: SerialNumber: syz
[  136.500054][  T431] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  136.519918][  T367] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  136.619268][ T5334] EXT4-fs (loop4): Test dummy encryption mode enabled
[  136.626423][ T5334] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  136.637418][ T5334] EXT4-fs (loop4): group descriptors corrupted!
[  136.742525][  T431] usb 2-1: Using ep0 maxpacket: 32
[  136.751963][  T367] usb 4-1: Using ep0 maxpacket: 32
[  136.807585][ T1036] usb 3-1: unit 0 not found!
[  136.815405][ T1036] usb 3-1: USB disconnect, device number 49
[  136.863648][  T367] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 66, changing to 7
[  136.874704][  T367] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  136.957050][  T274] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  136.975275][  T300] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  137.022561][  T431] usb 2-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40
[  137.031922][  T556] udevd[556]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  137.047623][  T431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.050771][  T367] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  137.055676][  T431] usb 2-1: Product: syz
[  137.069292][  T431] usb 2-1: Manufacturer: syz
[  137.073908][  T431] usb 2-1: SerialNumber: syz
[  137.079370][  T367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.087623][  T367] usb 4-1: Product: syz
[  137.091796][  T367] usb 4-1: Manufacturer: syz
[  137.096375][  T367] usb 4-1: SerialNumber: syz
[  137.208813][  T300] usb 1-1: Using ep0 maxpacket: 32
[  137.255580][ T5353] EXT4-fs (loop2): Unsupported encryption level 8
[  137.338909][  T300] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.339580][  T274] usb 5-1: unable to get BOS descriptor or descriptor too short
[  137.413859][  T431] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  137.423100][  T274] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.433293][  T274] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  137.441655][  T431] usb 2-1: unit 5 not found!
[  137.442445][  T274] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  137.460663][  T431] usb 2-1: USB disconnect, device number 46
[  137.516512][  T300] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  137.525673][  T300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.533733][  T300] usb 1-1: Product: syz
[  137.537970][  T300] usb 1-1: Manufacturer: syz
[  137.542598][  T300] usb 1-1: SerialNumber: syz
[  137.547267][   T53] usb 3-1: new full-speed USB device number 50 using dummy_hcd
[  137.555545][  T300] usb 1-1: config 0 descriptor??
[  137.563136][  T367] usb 4-1: 1:1: cannot get freq (v2/v3): err -71
[  137.581245][  T367] usb 4-1: 1:1: cannot set freq 48000 (v2/v3): err -71
[  137.592082][  T367] usb 4-1: USB disconnect, device number 43
[  137.599798][  T274] usb 5-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40
[  137.600495][  T300] smsc75xx v1.0.0
[  137.608887][  T274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.613043][  T300] smsc75xx 1-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  137.626775][  T274] usb 5-1: Product: syz
[  137.638176][  T274] usb 5-1: Manufacturer: syz
[  137.643447][  T274] usb 5-1: SerialNumber: syz
[  137.644764][  T300] smsc75xx: probe of 1-1:0.0 failed with error -22
[  137.778109][  T302] udevd[302]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  137.799755][  T431] usb 1-1: USB disconnect, device number 44
[  137.823982][  T562] udevd[562]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  137.848564][ T5362]  loop1: p1 < >
[  137.887269][   T95]  loop1: p1 < >
[  137.917263][   T53] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  137.925495][   T53] usb 3-1: config 0 has no interface number 0
[  137.927174][  T274] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  137.958316][  T274] usb 5-1: USB disconnect, device number 47
[  137.976448][  T556] udevd[556]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  138.131351][   T53] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23
[  138.140572][   T53] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.148571][   T53] usb 3-1: Product: syz
[  138.151918][  T302] udevd[302]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  138.153738][   T53] usb 3-1: Manufacturer: syz
[  138.173236][   T53] usb 3-1: SerialNumber: syz
[  138.178741][   T53] usb 3-1: config 0 descriptor??
[  138.208096][ T5391]  loop1: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 
[  138.208741][ T5391] loop1: p3 size 2581760 extends beyond EOD, truncated
[  138.301901][   T53] ftdi_sio 3-1:0.188: FTDI USB Serial Device converter detected
[  138.318494][   T53] usb 3-1: Detected FT8U232AM
[  138.329305][   T53] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  138.343416][ T5394] EXT4-fs (loop0): Test dummy encryption mode enabled
[  138.353747][ T5394] EXT4-fs (loop0): Invalid commit interval 1120355697, must be smaller than 21474836
[  138.374809][  T431] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  138.441474][ T5399] EXT4-fs (loop4): Ignoring removed nobh option
[  138.448158][ T5399] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  138.461460][ T5399] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  138.471521][ T5399] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  138.491064][   T53] usb 3-1: USB disconnect, device number 50
[  138.498938][ T5399] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  138.503785][   T53] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  138.513155][ T5399] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000]
[  138.530271][   T53] ftdi_sio 3-1:0.188: device disconnected
[  138.549286][ T5399] EXT4-fs (loop4): failed to initialize system zone (-117)
[  138.559191][ T5399] EXT4-fs (loop4): mount failed
[  138.778691][  T431] usb 4-1: unable to get BOS descriptor or descriptor too short
[  138.881898][  T431] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  138.893067][  T302] udevd[302]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  138.893632][  T558] udevd[558]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  138.905799][  T561] udevd[561]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  138.912422][  T300] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  138.915952][  T307] udevd[307]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  138.925241][  T562] udevd[562]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory
[  138.950665][  T431] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  139.128878][ T2400] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  139.139543][  T431] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  139.152828][  T431] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.161089][  T431] usb 4-1: Product: syz
[  139.166401][  T431] usb 4-1: Manufacturer: syz
[  139.171210][  T431] usb 4-1: SerialNumber: syz
[  139.473333][  T300] usb 1-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40
[  139.484786][  T300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.493619][  T300] usb 1-1: Product: syz
[  139.497813][  T300] usb 1-1: Manufacturer: syz
[  139.503282][  T431] usb 4-1: selecting invalid altsetting 1
[  139.509138][  T431] usb 4-1: unit 3 not found!
[  139.514516][  T300] usb 1-1: SerialNumber: syz
[  139.548355][ T2400] usb 2-1: config index 0 descriptor too short (expected 13015, got 31)
[  139.557111][  T431] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  139.564194][ T2400] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  139.581813][  T431] usb 4-1: USB disconnect, device number 44
[  139.588437][ T5433] F2FS-fs (loop2): Invalid segment/section count (24 != 24 * 3)
[  139.596238][ T2400] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  139.596592][ T5433] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  139.622578][ T5419] F2FS-fs (loop4): Test dummy encryption mode enabled
[  139.630083][ T5433] F2FS-fs (loop2): invalid crc value
[  139.639840][ T5433] F2FS-fs (loop2): Mismatch valid blocks 5 vs. 7
[  139.646686][ T5419] F2FS-fs (loop4): invalid crc value
[  139.652180][ T5433] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117)
[  139.668141][ T5419] F2FS-fs (loop4): Invalid segment type: 8, segno: 0
[  139.675137][ T5419] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117)
[  139.775291][ T2400] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  139.784904][ T2400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.804215][ T2400] usb 2-1: Product: syz
[  139.808428][ T2400] usb 2-1: Manufacturer: syz
[  139.814686][ T2400] usb 2-1: SerialNumber: syz
[  139.858504][ T2400] rtl8150 2-1:1.0: couldn't find required endpoints
[  139.865287][ T2400] rtl8150: probe of 2-1:1.0 failed with error -5
[  139.875965][  T300] usb 1-1: USB disconnect, device number 45
[  140.054007][ T2400] usb 2-1: USB disconnect, device number 47
[  140.062749][ T5459] erofs: (device loop4): mounted with root inode @ nid 36.
[  140.378300][ T5479] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  141.857421][  T300] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  141.980356][ T5536] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  141.998464][ T5536] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.242446][  T300] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.261138][  T300] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  142.374025][ T2400] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  142.382810][ T5517] F2FS-fs (loop0): Found nat_bits in checkpoint
[  142.401659][  T300] usb 4-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice= 0.00
[  142.421076][  T300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  142.429098][  T300] usb 4-1: Product: syz
[  142.452892][  T300] usb 4-1: Manufacturer: syz
[  142.501691][ T5517] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  142.510263][  T300] ums-sddr55 4-1:1.0: USB Mass Storage device detected
[  142.531879][  T300] ums-sddr55 4-1:1.0: Quirks match for vid 07c4 pid a103: 8
[  142.539924][  T300] ums-sddr55 4-1:1.0: This device (07c4,a103,0000 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  142.539924][  T300]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  142.586091][ T5521] F2FS-fs (loop4): Found nat_bits in checkpoint
[  142.625866][ T5521] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  142.633715][ T2400] usb 2-1: Using ep0 maxpacket: 16
[  142.717341][  T300] usb 4-1: USB disconnect, device number 45
[  142.936622][ T2400] usb 2-1: New USB device found, idVendor=0582, idProduct=00eb, bcdDevice= 0.40
[  142.950732][ T2400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.959117][ T2400] usb 2-1: Product: syz
[  142.963306][ T2400] usb 2-1: Manufacturer: syz
[  142.968221][ T2400] usb 2-1: SerialNumber: syz
[  143.330775][ T2400] usb 2-1: 1:1: invalid format type 0x1001 is detected, processed as PCM
[  143.350378][ T2400] usb 2-1: 1:1 : sample bitwidth 194 in over sample bytes 4
[  143.374807][ T2400] usb 2-1: 1:1 : invalid channels 0
[  143.405760][ T2400] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  143.433430][ T2400] usb 2-1: USB disconnect, device number 48
[  143.481017][  T366] usb 5-1: new full-speed USB device number 48 using dummy_hcd
[  143.575003][  T300] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[  143.659462][  T367] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[  143.878969][ T5580] F2FS-fs (loop1): Invalid segment/section count (24 != 24 * 3)
[  143.897568][ T5580] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  143.912675][ T5580] F2FS-fs (loop1): Invalid gid value -1
[  143.959785][  T300] usb 1-1: config 1 has an invalid interface descriptor of length 8, skipping
[  143.968677][  T300] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  143.978345][  T366] usb 5-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23
[  143.978966][  T300] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  143.998637][  T300] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping
[  143.999128][  T366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.017979][  T300] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  144.034685][  T367] usb 3-1: unable to get BOS descriptor or descriptor too short
[  144.052519][  T366] usb 5-1: Product: syz
[  144.062506][  T366] usb 5-1: Manufacturer: syz
[  144.067137][  T366] usb 5-1: SerialNumber: syz
[  144.081444][  T366] usb 5-1: config 0 descriptor??
[  144.086961][  T367] usb 3-1: not running at top speed; connect to a high speed hub
[  144.128460][  T300] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  144.129927][  T366] ftdi_sio 5-1:0.0: Ignoring interface reserved for JTAG
[  144.144898][  T300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  144.163094][  T300] usb 1-1: SerialNumber: syz
[  144.165856][  T367] usb 3-1: config 2 has an invalid interface number: 212 but max is 1
[  144.184874][  T367] usb 3-1: config 2 has an invalid interface number: 226 but max is 1
[  144.202590][  T367] usb 3-1: config 2 has no interface number 0
[  144.209438][  T367] usb 3-1: config 2 has no interface number 1
[  144.222906][  T300] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  144.228893][  T367] usb 3-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  144.241291][  T300] cdc_acm 1-1:1.0: This needs exactly 3 endpoints
[  144.248657][  T300] cdc_acm: probe of 1-1:1.0 failed with error -22
[  144.265788][  T367] usb 3-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  144.276830][  T367] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  144.288657][  T367] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  144.300004][  T367] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  144.310115][  T367] usb 3-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  144.332297][   T53] usb 5-1: USB disconnect, device number 48
[  144.338295][  T367] usb 3-1: config 2 interface 212 has no altsetting 0
[  144.353876][  T274] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  144.417927][  T274] usb 1-1: USB disconnect, device number 46
[  144.494601][  T367] usb 3-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  144.508727][  T367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.526773][  T367] usb 3-1: Product: syz
[  144.536557][  T367] usb 3-1: Manufacturer: syz
[  144.546350][  T367] usb 3-1: SerialNumber: syz
[  144.586546][   T24] audit: type=1400 audit(2000000007.786:229): avc:  denied  { create } for  pid=5597 comm="syz.1.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  144.629482][   T24] audit: type=1400 audit(2000000007.797:230): avc:  denied  { setopt } for  pid=5597 comm="syz.1.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  144.726978][ T5608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2367'.
[  144.737377][ T5608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2367'.
[  144.775556][   T24] audit: type=1400 audit(2000000007.978:231): avc:  denied  { setopt } for  pid=5615 comm="syz.1.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  144.811669][ T5620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2372'.
[  144.841162][   T24] audit: type=1400 audit(2000000008.063:232): avc:  denied  { getopt } for  pid=5622 comm="syz.3.2373" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  144.901850][  T367] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.226/input/input14
[  144.937448][  T367] usb 3-1: USB disconnect, device number 51
[  145.011972][   T24] audit: type=1400 audit(2000000008.244:233): avc:  denied  { create } for  pid=5653 comm="syz.0.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  145.033155][ T5655] netlink: 404 bytes leftover after parsing attributes in process `syz.0.2388'.
[  145.042153][   T24] audit: type=1400 audit(2000000008.266:234): avc:  denied  { write } for  pid=5653 comm="syz.0.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  145.067550][ T5645] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.2384: bad orphan inode 11862016
[  145.090639][   T24] audit: type=1404 audit(2000000008.319:235): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  145.095573][ T5645] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  145.125346][   T24] audit: type=1400 audit(2000000008.361:236): avc:  denied  { mount } for  pid=5644 comm="syz.3.2384" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=0
[  145.155760][   T24] audit: type=1400 audit(2000000008.393:237): avc:  denied  { read write } for  pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  145.191488][   T24] audit: type=1400 audit(2000000008.425:238): avc:  denied  { read write } for  pid=284 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  145.211090][ T5667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2392'.
[  145.306423][ T5685] 
: renamed from team_slave_1
[  145.385072][ T5701] x_tables: unsorted entry at hook 3
[  145.406847][ T5705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2412'.
[  145.845756][ T5757] netlink: 'syz.3.2438': attribute type 46 has an invalid length.
[  145.853662][ T5757] netlink: 'syz.3.2438': attribute type 28 has an invalid length.
[  145.891850][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2438'.
[  146.236400][ T5813] netlink: 'syz.0.2465': attribute type 24 has an invalid length.
[  146.361073][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2473'.
[  146.428793][ T5833] mmap: syz.0.2475 (5833) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  146.575670][ T5853] IPv6: Can't replace route, no match found
[  146.643542][ T5867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2493'.
[  146.671198][ T5867] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2493'.
[  146.870752][ T5893] syz.1.2506 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  147.071246][ T5944] device vlan0 entered promiscuous mode
[  147.213533][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  147.224269][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  147.253421][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  147.269311][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  147.289687][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  147.306897][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  147.317705][ T5988] xt_hashlimit: max too large, truncated to 1048576
[  147.324513][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  147.341623][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  147.378675][ T5996] xt_ecn: cannot match TCP bits for non-tcp packets
[  147.481145][ T6018] netlink: 'syz.3.2568': attribute type 9 has an invalid length.
[  147.899527][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  148.026706][ T6179] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  148.226232][ T6241] xt_TCPMSS: Only works on TCP SYN packets
[  148.234329][ T6233] netlink: 'syz.3.2676': attribute type 2 has an invalid length.
[  148.248636][ T6233] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  148.282449][ T6247] ipt_REJECT: TCP_RESET invalid for non-tcp
[  148.309292][ T6251] netlink: 'syz.1.2684': attribute type 24 has an invalid length.
[  148.369974][ T6261] xt_limit: Overflow, try lower: 268435456/13
[  148.699448][ T6314] x_tables: duplicate underflow at hook 4
[  148.940542][ T6364] ipt_REJECT: TCP_RESET invalid for non-tcp
[  148.965419][ T6373] xt_CT: You must specify a L4 protocol and not use inversions on it
[  149.100770][ T6398] device veth0 entered promiscuous mode
[  149.114612][ T6403] netlink: 'syz.0.2758': attribute type 12 has an invalid length.
[  149.279918][   T24] kauditd_printk_skb: 491 callbacks suppressed
[  149.279941][   T24] audit: type=1400 audit(2000000012.797:730): avc:  denied  { read write } for  pid=280 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  149.360915][   T24] audit: type=1400 audit(2000000012.807:731): avc:  denied  { read write } for  pid=283 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  149.387155][   T24] audit: type=1400 audit(2000000012.829:732): avc:  denied  { read write } for  pid=6426 comm="syz.3.2770" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  149.451022][   T24] audit: type=1400 audit(2000000012.850:733): avc:  denied  { read write } for  pid=283 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  149.475773][   T24] audit: type=1400 audit(2000000012.850:734): avc:  denied  { read write } for  pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  149.504239][   T24] audit: type=1400 audit(2000000012.861:735): avc:  denied  { read write } for  pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  149.534449][ T6454] IPv6: NLM_F_REPLACE set, but no existing node found!
[  149.554530][   T24] audit: type=1400 audit(2000000012.871:736): avc:  denied  { read write } for  pid=283 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  149.588685][   T24] audit: type=1400 audit(2000000012.871:737): avc:  denied  { read write } for  pid=280 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  149.634791][   T24] audit: type=1400 audit(2000000012.935:738): avc:  denied  { read write } for  pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  149.669301][   T24] audit: type=1400 audit(2000000012.946:739): avc:  denied  { read write } for  pid=283 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  149.799255][ T6493] __nla_validate_parse: 13 callbacks suppressed
[  149.799265][ T6493] netlink: 5412 bytes leftover after parsing attributes in process `syz.0.2804'.
[  149.837212][ T6499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2807'.
[  149.887106][ T6508] netlink: 'syz.3.2811': attribute type 10 has an invalid length.
[  149.905716][ T6510] x_tables: duplicate underflow at hook 2
[  149.920965][ T6508] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2811'.
[  150.068280][ T6537] bridge0: port 1(bridge_slave_0) entered listening state
[  150.076638][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.245664][ T6554] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  150.340337][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.348577][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.518912][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2841'.
[  150.543815][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2841'.
[  150.553636][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2841'.
[  150.613577][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2846'.
[  150.627732][ T6579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2846'.
[  150.641457][ T6579] device ip6tnl1 entered promiscuous mode
[  150.650039][ T6580] device erspan1 entered promiscuous mode
[  150.743746][ T6594] netlink: 'syz.2.2852': attribute type 9 has an invalid length.
[  151.000665][ T6634] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2873'.
[  151.020423][ T6634] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2873'.
[  151.031961][ T6634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  151.585633][ T6726] ==================================================================
[  151.593879][ T6726] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x9dc/0xac0
[  151.602199][ T6726] Read of size 4 at addr ffff88810ac11470 by task syz.4.2918/6726
[  151.610030][ T6726] 
[  151.612393][ T6726] CPU: 1 PID: 6726 Comm: syz.4.2918 Tainted: G        W         syzkaller #0
[  151.621161][ T6726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  151.631258][ T6726] Call Trace:
[  151.634575][ T6726]  __dump_stack+0x21/0x24
[  151.638931][ T6726]  dump_stack_lvl+0x1a7/0x208
[  151.643635][ T6726]  ? show_regs_print_info+0x18/0x18
[  151.648859][ T6726]  ? thaw_kernel_threads+0x220/0x220
[  151.654213][ T6726]  print_address_description+0x7f/0x2c0
[  151.659779][ T6726]  ? unaccount_page_cache_page+0x9dc/0xac0
[  151.665609][ T6726]  kasan_report+0x100/0x140
[  151.670141][ T6726]  ? xas_store+0xd0c/0x18d0
[  151.674677][ T6726]  ? unaccount_page_cache_page+0x9dc/0xac0
[  151.680505][ T6726]  __asan_report_load4_noabort+0x14/0x20
[  151.686159][ T6726]  unaccount_page_cache_page+0x9dc/0xac0
[  151.691828][ T6726]  __delete_from_page_cache+0xc3/0x470
[  151.697423][ T6726]  ? memset+0x35/0x40
[  151.701436][ T6726]  ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30
[  151.708486][ T6726]  ? _raw_spin_lock_irqsave+0xc2/0x130
[  151.713969][ T6726]  ? __kasan_check_read+0x11/0x20
[  151.719023][ T6726]  ? workingset_eviction+0x3dc/0x940
[  151.724332][ T6726]  __remove_mapping+0x581/0x6b0
[  151.729220][ T6726]  shrink_page_list+0x21ee/0x4160
[  151.734262][ T6726]  ? shrink_page_list+0x1f41/0x4160
[  151.739491][ T6726]  ? reclaim_clean_pages_from_list+0x740/0x740
[  151.745671][ T6726]  ? shrink_inactive_list+0xef0/0xef0
[  151.751077][ T6726]  ? _raw_spin_lock_irq+0x95/0xf0
[  151.756127][ T6726]  ? __count_memcg_events+0x89/0x210
[  151.761442][ T6726]  shrink_inactive_list+0x90c/0xef0
[  151.766663][ T6726]  ? shrink_active_list+0xe00/0xe00
[  151.771972][ T6726]  ? __update_load_avg_cfs_rq+0xb1/0x2f0
[  151.777632][ T6726]  ? __kasan_check_read+0x11/0x20
[  151.782684][ T6726]  ? lruvec_lru_size+0x230/0x250
[  151.787687][ T6726]  ? blk_start_plug+0x5a/0x170
[  151.792575][ T6726]  shrink_lruvec+0x2806/0x2d70
[  151.797403][ T6726]  ? set_next_entity+0xb4/0x5d0
[  151.802289][ T6726]  ? finish_task_switch+0x1b7/0x5a0
[  151.807514][ T6726]  ? __switch_to_asm+0x3a/0x60
[  151.812396][ T6726]  ? __schedule+0xc0b/0x13e0
[  151.814534][ T6744] x_tables: unsorted underflow at hook 2
[  151.817052][ T6726]  ? mem_cgroup_shrink_node+0x4c0/0x4c0
[  151.828202][ T6726]  ? __sched_text_start+0x8/0x8
[  151.833071][ T6726]  ? __this_cpu_preempt_check+0x13/0x20
[  151.838638][ T6726]  ? tracing_record_taskinfo+0x7c/0x220
[  151.844219][ T6726]  ? preempt_schedule_common+0xbe/0xf0
[  151.849704][ T6726]  ? __kasan_check_read+0x11/0x20
[  151.854751][ T6726]  ? inactive_is_low+0x17a/0x2f0
[  151.859713][ T6726]  ? __kasan_check_write+0x14/0x20
[  151.864846][ T6726]  shrink_node+0xee0/0x2690
[  151.869378][ T6726]  ? ktime_get+0x10e/0x140
[  151.873820][ T6726]  do_try_to_free_pages+0x602/0x1590
[  151.879223][ T6726]  ? try_to_free_pages+0xc20/0xc20
[  151.884389][ T6726]  try_to_free_mem_cgroup_pages+0x261/0x610
[  151.890310][ T6726]  ? shrink_lruvec+0x2d70/0x2d70
[  151.895314][ T6726]  mem_cgroup_resize_max+0x309/0x3e0
[  151.900625][ T6726]  mem_cgroup_write+0x1ed/0x230
[  151.905506][ T6726]  ? mem_cgroup_reset+0x130/0x130
[  151.910555][ T6726]  ? mem_cgroup_reset+0x130/0x130
[  151.915685][ T6726]  cgroup_file_write+0x294/0x560
[  151.920646][ T6726]  ? cgroup_seqfile_stop+0xc0/0xc0
[  151.925779][ T6726]  ? mutex_lock+0x92/0xf0
[  151.930128][ T6726]  ? mutex_trylock+0xb0/0xb0
[  151.934922][ T6726]  ? __kasan_check_write+0x14/0x20
[  151.940048][ T6726]  ? cgroup_seqfile_stop+0xc0/0xc0
[  151.945197][ T6726]  kernfs_fop_write_iter+0x2bd/0x400
[  151.950504][ T6726]  vfs_write+0x770/0xd70
[  151.954775][ T6726]  ? kernel_write+0x3c0/0x3c0
[  151.959477][ T6726]  ? mutex_trylock+0xb0/0xb0
[  151.964104][ T6726]  ? __fget_files+0x2e1/0x340
[  151.968824][ T6726]  ? __fdget_pos+0x2d2/0x380
[  151.973433][ T6726]  ? ksys_write+0x70/0x260
[  151.977877][ T6726]  ksys_write+0x14a/0x260
[  151.982317][ T6726]  ? __ia32_sys_read+0x90/0x90
[  151.987122][ T6726]  ? __kasan_check_read+0x11/0x20
[  151.992175][ T6726]  __x64_sys_write+0x7b/0x90
[  151.996789][ T6726]  do_syscall_64+0x31/0x40
[  152.001401][ T6726]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  152.007314][ T6726] RIP: 0033:0x7fc369ee5e99
[  152.011756][ T6726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  152.031678][ T6726] RSP: 002b:00007fc36893f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  152.040121][ T6726] RAX: ffffffffffffffda RBX: 00007fc36a16dfa0 RCX: 00007fc369ee5e99
[  152.048121][ T6726] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003
[  152.056119][ T6726] RBP: 00007fc369f7beaf R08: 0000000000000000 R09: 0000000000000000
[  152.064122][ T6726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  152.072133][ T6726] R13: 00007fc36a16e038 R14: 00007fc36a16dfa0 R15: 00007ffe3fbfd6e8
[  152.080144][ T6726] 
[  152.082497][ T6726] Allocated by task 5494:
[  152.086848][ T6726]  __kasan_kmalloc+0xd4/0x100
[  152.091550][ T6726]  kmem_cache_alloc_trace+0x179/0x2e0
[  152.096945][ T6726]  alloc_super+0x5a/0x7d0
[  152.101297][ T6726]  sget+0x1e2/0x4c0
[  152.105160][ T6726]  mount_bdev+0xec/0x380
[  152.109421][ T6726]  msdos_mount+0x34/0x40
[  152.113690][ T6726]  legacy_get_tree+0xed/0x190
[  152.118384][ T6726]  vfs_get_tree+0x89/0x260
[  152.122818][ T6726]  do_new_mount+0x25a/0xa30
[  152.127355][ T6726]  path_mount+0x581/0xca0
[  152.131709][ T6726]  __se_sys_mount+0x320/0x390
[  152.136410][ T6726]  __x64_sys_mount+0xbf/0xd0
[  152.141122][ T6726]  do_syscall_64+0x31/0x40
[  152.145565][ T6726]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  152.151470][ T6726] 
[  152.153813][ T6726] Freed by task 2400:
[  152.157820][ T6726]  kasan_set_track+0x4a/0x70
[  152.162433][ T6726]  kasan_set_free_info+0x23/0x40
[  152.167408][ T6726]  ____kasan_slab_free+0x125/0x160
[  152.172554][ T6726]  __kasan_slab_free+0x11/0x20
[  152.177341][ T6726]  slab_free_freelist_hook+0xc5/0x190
[  152.182822][ T6726]  kfree+0xc0/0x270
[  152.186675][ T6726]  destroy_super_work+0x40/0x50
[  152.191552][ T6726]  process_one_work+0x6fd/0xbc0
[  152.196425][ T6726]  worker_thread+0xa8e/0x13c0
[  152.201120][ T6726]  kthread+0x324/0x3b0
[  152.205206][ T6726]  ret_from_fork+0x1f/0x30
[  152.209639][ T6726] 
[  152.211984][ T6726] Last potentially related work creation:
[  152.217752][ T6726]  kasan_save_stack+0x3a/0x60
[  152.222574][ T6726]  __kasan_record_aux_stack+0xd2/0x100
[  152.228239][ T6726]  kasan_record_aux_stack_noalloc+0xb/0x10
[  152.234050][ T6726]  insert_work+0x51/0x320
[  152.238376][ T6726]  __queue_work+0x91f/0xca0
[  152.242873][ T6726]  queue_work_on+0xe6/0x140
[  152.247368][ T6726]  destroy_super_rcu+0xd1/0xe0
[  152.252120][ T6726]  rcu_do_batch+0x488/0xaf0
[  152.256618][ T6726]  rcu_core+0x50a/0xca0
[  152.260762][ T6726]  rcu_core_si+0x9/0x10
[  152.264923][ T6726]  __do_softirq+0x255/0x563
[  152.269521][ T6726] 
[  152.271846][ T6726] Second to last potentially related work creation:
[  152.278451][ T6726]  kasan_save_stack+0x3a/0x60
[  152.283160][ T6726]  __kasan_record_aux_stack+0xd2/0x100
[  152.288743][ T6726]  kasan_record_aux_stack_noalloc+0xb/0x10
[  152.294657][ T6726]  call_rcu+0x11a/0x1090
[  152.298896][ T6726]  __put_super+0x254/0x2b0
[  152.303307][ T6726]  deactivate_locked_super+0xd4/0x100
[  152.308849][ T6726]  deactivate_super+0xaf/0xe0
[  152.313603][ T6726]  cleanup_mnt+0x44f/0x500
[  152.318012][ T6726]  __cleanup_mnt+0x19/0x20
[  152.322419][ T6726]  task_work_run+0x127/0x190
[  152.327001][ T6726]  exit_to_user_mode_loop+0xcb/0xe0
[  152.332192][ T6726]  exit_to_user_mode_prepare+0x76/0xa0
[  152.337655][ T6726]  syscall_exit_to_user_mode+0x1d/0x40
[  152.343102][ T6726]  do_syscall_64+0x3d/0x40
[  152.347514][ T6726]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  152.353391][ T6726] 
[  152.355717][ T6726] The buggy address belongs to the object at ffff88810ac11000
[  152.355717][ T6726]  which belongs to the cache kmalloc-2k of size 2048
[  152.369763][ T6726] The buggy address is located 1136 bytes inside of
[  152.369763][ T6726]  2048-byte region [ffff88810ac11000, ffff88810ac11800)
[  152.383223][ T6726] The buggy address belongs to the page:
[  152.388884][ T6726] page:ffffea00042b0400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10ac10
[  152.399111][ T6726] head:ffffea00042b0400 order:3 compound_mapcount:0 compound_pincount:0
[  152.407426][ T6726] flags: 0x4000000000010200(slab|head)
[  152.412879][ T6726] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042d80
[  152.421459][ T6726] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[  152.430035][ T6726] page dumped because: kasan: bad access detected
[  152.436438][ T6726] page_owner tracks the page as allocated
[  152.442167][ T6726] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 2383222302, free_ts 0
[  152.460124][ T6726]  prep_new_page+0x176/0x190
[  152.464708][ T6726]  get_page_from_freelist+0x225f/0x23f0
[  152.470243][ T6726]  __alloc_pages_nodemask+0x29a/0x640
[  152.475627][ T6726]  new_slab+0x84/0x3f0
[  152.479704][ T6726]  ___slab_alloc+0x2f8/0x4c0
[  152.484288][ T6726]  __slab_alloc+0x63/0xa0
[  152.488634][ T6726]  kmem_cache_alloc_trace+0x1a8/0x2e0
[  152.493998][ T6726]  bdi_alloc+0x4e/0x110
[  152.498171][ T6726]  blk_alloc_queue+0xf8/0x5f0
[  152.502846][ T6726]  blk_mq_init_queue+0x37/0xd0
[  152.507604][ T6726]  scsi_mq_alloc_queue+0x42/0x140
[  152.512619][ T6726]  scsi_alloc_sdev+0x611/0x920
[  152.517378][ T6726]  scsi_probe_and_add_lun+0x17d/0x3370
[  152.523094][ T6726]  __scsi_scan_target+0x1d2/0xbf0
[  152.528206][ T6726]  scsi_scan_host_selected+0x34e/0x600
[  152.533657][ T6726]  scsi_scan_host+0x39e/0x670
[  152.538341][ T6726] page_owner free stack trace missing
[  152.543802][ T6726] 
[  152.546120][ T6726] Memory state around the buggy address:
[  152.551743][ T6726]  ffff88810ac11300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  152.559794][ T6726]  ffff88810ac11380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  152.567847][ T6726] >ffff88810ac11400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  152.575899][ T6726]                                                              ^
[  152.583605][ T6726]  ffff88810ac11480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  152.591658][ T6726]  ffff88810ac11500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  152.599726][ T6726] ==================================================================
[  152.607860][ T6726] Disabling lock debugging due to kernel taint
May 18 03:33:36 syzkaller kern.alert kernel: [  152.436438][ T6726] page_owner tracks the page as allocated
May 18 03:33:36 syzkaller kern.alert kernel: [  152.442167][ T6726] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 2383222302, free_ts 0
May 18 03:33:36 syzkaller kern.alert kernel: [  152.538341][ T6726] page_owner free stack trace missing
[  155.196623][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!