last executing test programs:

1m2.991348622s ago: executing program 0 (id=1268):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0xff8d, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000140)="128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587304800"/76, 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x24044801)

1m1.950288565s ago: executing program 0 (id=1272):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp={0xd, 0x0, 0x0, 0x2, 0x5, 0x8000, 0xaf31, 0x81}}}}}, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
r4 = syz_mount_image$bfs(&(0x7f0000000140), &(0x7f0000000400)='./file0\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x8, 0xac, &(0x7f0000000040)="$eJzs17ttAkEUBdC7H/mT2AW4B7sGp85dASEhESQQUQIhHdAKJdABASnJoNUuBYCEQOgcaWZuMMGVXvS2x81XPpIyT0op5SXJe/o8mc7G/3/d3STJum7zmlSpwrOoh/PWzfyzz/vfLBfnDz+r/q0y2h3K4I6FAQCAq9X5HtIFW12bpLlVIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHcgoAAP//QkofjQ==")
mount$bind(0x0, 0x0, 0x0, 0x1000021, 0x0)
openat(r4, &(0x7f0000000280)='./file1\x00', 0x630001, 0x0)

1m0.814976542s ago: executing program 0 (id=1276):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast1}, 0x1c)
setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000080)=0x53, 0x4)
recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)

59.253115852s ago: executing program 0 (id=1279):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa145cf, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
lseek(r4, 0xfff, 0x0)

58.185887477s ago: executing program 0 (id=1283):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x800)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
madvise(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x65)

57.169935799s ago: executing program 0 (id=1288):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0xa6a, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x33, 0xff, 0x64}, 0x2c)

41.974423957s ago: executing program 32 (id=1288):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0xa6a, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x33, 0xff, 0x64}, 0x2c)

14.156126641s ago: executing program 1 (id=1386):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

13.26452306s ago: executing program 1 (id=1392):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040), 0x1, 0x51d, &(0x7f0000000e00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
open_by_handle_at(r0, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x4000)

12.472457226s ago: executing program 3 (id=1397):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$inet(r4, 0x0, 0x4000000)

11.08296763s ago: executing program 1 (id=1408):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14)

10.383558462s ago: executing program 3 (id=1400):
open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e3793dba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007df3a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff18e0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5000000008d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6d49cba517b0563c14fcd6ba38ef32bc48a00643416d7e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a203c991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0xfffffffffffffd8a, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0), 0xce4, r3}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r3, 0x0, 0x100000000000000}, 0x38)

10.378713543s ago: executing program 4 (id=1401):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000280)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',sys_tz,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=cp850,umask=00000000000000000000011,zero_size_dir,discard,gid=', @ANYRESHEX=0x0, @ANYBLOB=',keep_last_dots,dmask=00000000000000000111742,\x00ocharset=macromanian,zero_size_dir,discard,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x1536, &(0x7f0000006800)="$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")
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6)

9.260791869s ago: executing program 1 (id=1403):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x10, 0x803, 0x2)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r6})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

8.831307273s ago: executing program 2 (id=1404):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=<r3=>r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe6c11ffe4afd7b0e, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, r3, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30)
r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=<r7=>r6, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r8, r7, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30)
getsockopt$inet6_buf(r0, 0x29, 0xca, 0x0, 0xfffffffffffffffe)

8.830742963s ago: executing program 2 (id=1405):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0xcc, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x5}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040081}, 0x0)

8.796622984s ago: executing program 4 (id=1406):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0)
r1 = dup(r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0xc000)
socket$unix(0x1, 0x2, 0x0)
r3 = userfaultfd(0x1)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0)
ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000})
write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[], 0x118)

8.550524942s ago: executing program 3 (id=1407):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4)

8.470495585s ago: executing program 4 (id=1409):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x34}}, 0x20000050)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

8.446428786s ago: executing program 2 (id=1410):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_dev$audion(&(0x7f0000000280), 0x2, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360)

7.580071154s ago: executing program 4 (id=1411):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x3, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

7.551345905s ago: executing program 3 (id=1420):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}]}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'erspan0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
getsockopt$sock_buf(r3, 0x1, 0x37, &(0x7f0000001f40)=""/4096, &(0x7f0000000280)=0x1000)
sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x105d6, &(0x7f0000010640)="$eJzs3E1rY1UYB/AnU+fVcRxkXnTlBREaMKFpO0VBpOoMOmCH4svClaZJGjKT5JYmfXHWuho/gltBxJ2fwY1fY3AhiAvB3YiSe29lqrNwOmlT298Pbv/nnpz75JxLNie3JIBj62Ly+2+luBBnI2IqIs5HZO1ScWQW83g+Il6MiBMPHaWi/++OUxFxLiIujIrnNUvFSwt/3H/w9Qs3X7/37f1y7edvvprcqoFJezkiemt5e6uXZ9rO83bRX9/sZNmb3ywyf6F3pzhP89xqrWQVtuo74+pZzrXz8enaxmCUq916Y5TtzmrWv9bP33Cw2d6pk11wu76enTdbK1l2BmmW7bv5vLaLvDsY5nWaRb3PsvIxHO5k3t/abuXrWbuTZaM/LPrzummztT3KzSKLt4tG2m1m81jZ820+9N7r9De2k83W+qCT9pNr1dqr1dpCpbaeNlvD1nyl3msuzCfT7e5oWGXYqvcW22na7raqjbRXTqbbjUalVkumr7dWOvV+UqtV56ozlWvlovVK8s6tj5JuM5ke5Vud/saw0x0kq+l6kl9RTmarc6+Vk5dqyQdLy8ny+zduLC1/+Mn1j2+9uXTz7WLQv6aVTM/OzM5WajOV2Vr5cK7/VFF/jOufin1Yf+nJLue48wECeGz2/8Ak2P8/zv4/2fN9PuyOyP7/13vHe/17ZvvGE/EBAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4tn46+f27WeNifv500f9M0fVcRFyNiCsRcTki/nyEqTi1q+aliCgV7UeNP/mPOfxQiqzC6JrTxXEuIhaL48Gz+30XAAAA4Oj67sfPv4iYGjWzP29MekIcpOJLmzPjqpd95fPUuKpdyoptj6na5Z2SY3ElIk5e/GVM1a5GxInzn46p2n8ytSvOPBSlPE4c5GwAAICDsXsnMLbdGwAAAIfOl5OeAJORPa8t/he/eBZ8Oo/igeDZXWcAAADA/1Bp0hMAAAAA9l22//f7fwAAAHC05b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwF/s3E+uEjEcB/Af4Aj4JxLDn6uwMi5ZcAiP4NID6G3ccQYTwjlw5xEMGDqVAOLmTXlM3vt8kplOJ/Bth4RFWygAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAt/axWi++br9+a5uz2zZR5GgAAAOCabbVapItRXX+d77/Nt95HxCwiphExiYhrY/devDxJ7MQ4nWvXXl9d9OFHREo4vKefj1cR8TEfv9/d/nMAAACAp2qzni8jeofLdPpwvOIZyJM2g1J5acrnRam0cQr7Uiht8jeyiGlEVKNfhdJmEdF98ynX/vv9GxZq7qSRXAxOik5ddAs2BgAAtMT5SKDY6A0AAIDW+XzvDnAfab02/xY/rwX36yIvCA7PagAAAEB7Xf7b/qjzuP0AAAAA7iCN///Z/y/PCjx8/7+w/x8AAAC0SL3/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALe0rVaLzXq+bJqz2zdT5mkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4w/68o0AIhEEY7F3fdxq8/7GkQVNTkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDe/+8v/ialxJpl7bSw9jyRrp8bWqbF3bhz9YXz9GgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn/uTiAEgiAM9p3/OS3mH5Y0aAwiVMHCxwzzsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX/S7X/5PTI0zydxpY+l4JFm7amxdNfYeNI4ejLd/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdife9uEgTCOw6+dRInbZIT0Fh8z0FAhGIEPCcmSZ2AAFqKhorVYBFYAAQctnSl4nub/0+mKOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgPZ2e3viIiOzzkXnkw9Xf4XLwFfm6aQbf18w2x339c8vJdjdK+Rvj/yIiisha+A0AQPvK+6ZYLKt5J203bS9tP205ravZKx8NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwZucOWqJ4wwCAv7s6699/p44qRNChLrmpWQZeOgjeg6BuoptIa4XuQcWLnyDqtNe+Qt7qK/QFgg4leOjgoaBLEMXuzuq7pKIEM4P7+8Ez8+jCzPvuwrDPPO8sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAuBzvhUjcvhRBGB4/ylo/ftheP279/+Wm0G1/vv7sSH7N1iCSE8GSlXruV4VyKbn1z6+lCvV5bk/RDMpR+7EUZj6SwSXyVKOVzcQIA4EJJ0mh9u/yS7M63/leaDeH3m976/3qUh1Pq//3mSBKaI2P7zZGxXxsfGvG54vp/IrMZFsbQSS9UG6svquubWzdXVheWa8u1Z1NTk9N3pm/fuztZbd8rqbpjAgAAwL+ppBHX/+XZv/v//0d5OL3+H+vGw7nHj+JzDfR3/X+io6Zf3iMBAADob5ev/vh+3OrLUqUSNhYajbWJzvbw78nONoehnttQGnH9PzCb96gAAACALBzslHr6/0tRHs7Y/x9/u70XH3MghDCc9v/HF5/Xl7KbTqFl8Thx3nMEAAAgX8NpxP3/pL3+v3y45KEcQrhxrZOnPwN4pvr/8+sHPQ+tx+v/p7KbYiGVZzrvR3s/E8LgTN4jAgAA4CL7L41Wsb+X7M6v/Xw1V7H+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4w44dozQQRGEA3uxmtRIDVmrlBUQvELEQxMZDiILgCUQQDyC2lt7B0jukVrCxsEzhDeTN7qikCVjsKvk+mLxHGDIvkyb/AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNd0/7uv4mXU9GX73vPH1UnUl5ka3u/XN2NFP+hy6H9nr+8BAAAAWBBVzvdFUbzVj4dRy3HK/3XeE5n/YaXpc56fzf25Pt29buT8f328dfl10Kg5Jz707PzidKezb/j3rc7dMUw3n569VOkHKY9u1qZ1us/B7WRysJTa5S6mBQB+YzvXtsn/h6Lu9jkYAAtj2K7iR/6vxv3OBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCFzwAAAP//9JxdmQ==")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143542, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0)

7.07025617s ago: executing program 3 (id=1412):
socket$nl_audit(0x10, 0x3, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001})
epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000)

7.068964741s ago: executing program 2 (id=1422):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44880)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x4, @random="1a772955a77a", 'gre0\x00'}}, 0x1e)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

436.753746ms ago: executing program 5 (id=1317):
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0xa, 0x3, 0x87)
socket$l2tp6(0xa, 0x2, 0x73)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
inotify_init1(0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2)
socket(0x1e, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x48640)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000080), 0x0, 0x1})

435.388006ms ago: executing program 2 (id=1424):
r0 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x3, 0xfb})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000380), 0x0, 0x8812, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10122, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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")
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000000c0)={0x60, 0x1, &(0x7f00004f4000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x5, 0x0, 0x0, 0x3, 0xa, 0x8, 0x40, 0x22})
r2 = open(&(0x7f00000001c0)='./file1\x00', 0x4000, 0xd7)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10)
preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

433.044446ms ago: executing program 3 (id=1425):
socket$packet(0x11, 0x3, 0x300)
r0 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x1, 0x0, "6606ca7ce41b346ac33e74fc00d9165a44e86835fec0b518269fd4c21a897da3d787c09dcb8216a272aea67961649d1590065253e07bd0b461b349eb64746d76c42fb2623034078188f0009f9f10d5f0"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0)
wait4(r0, 0x0, 0x80000000, 0x0)
ptrace(0x10, r0)
r2 = syz_pidfd_open(r0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mprotect(&(0x7f000000c000/0xe000)=nil, 0xe000, 0x3000009)
waitid$P_PIDFD(0x3, r2, 0x0, 0xa000000c, 0x0)

425.641197ms ago: executing program 1 (id=1426):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0xd18e, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f00000063c0)="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", 0x2000, &(0x7f000000ac00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a900)=ANY=[@ANYBLOB="b0000000000000000700000000000000050000000000000002000000000000000900000000000000060000000000000000100000ff7f00000000000000000000f89f0000000000000d00000000000000010400000000000009000000000000000d00000000000000e4880000ffffffff090000702fbe8a83df519fe6", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="d600000004000000000000000500000000000000060000000000000005"], 0x0, 0x0, 0x0})
getdents64(r5, 0x0, 0x0)

422.949906ms ago: executing program 4 (id=1427):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0)
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0)
write(r2, &(0x7f0000000180)="01010101", 0x4)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
close(r3)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0)

356.886908ms ago: executing program 5 (id=1413):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xfffffffffffffdff, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0800}, 0x20040040)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', <r6=>0x0})
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0xba01}, 0x0)

258.141322ms ago: executing program 4 (id=1414):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

246.813172ms ago: executing program 1 (id=1415):
unshare(0xa000200)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000140)={0x1, 0x1})
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r4=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}})
accept4$inet6(r1, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}})

148.576615ms ago: executing program 2 (id=1416):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r6, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}, 0xd}], 0x1, 0x10022, 0x0)

0s ago: executing program 5 (id=1417):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

kernel console output (not intermixed with test programs):

822673][ T4966] tipc: Enabled bearer <udp:syz2>, priority 10
[   61.825598][ T4966] tipc: Enabled bearer <eth:veth0_macvtap>, priority 0
[   63.733199][ T4484] tipc: Node number set to 2886997162
[   64.494553][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[   64.495909][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[   66.737096][ T5027] loop4: detected capacity change from 0 to 4096
[   66.754911][ T5027] EXT4-fs: Ignoring removed mblk_io_submit option
[   66.848951][ T5027] EXT4-fs (loop4): Test dummy encryption mode enabled
[   66.861031][ T5027] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   66.905113][ T5027] netlink: 5 bytes leftover after parsing attributes in process `syz.4.186'.
[   66.907154][ T5027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.984571][ T4338] EXT4-fs (loop4): unmounting filesystem.
[   67.060685][ T5051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.192'.
[   67.102699][ T5051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.192'.
[   67.976856][ T5066] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.197'.
[   68.048337][ T5072] loop4: detected capacity change from 0 to 4096
[   68.104112][ T5072] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   68.347715][ T5088] netlink: 'syz.3.203': attribute type 13 has an invalid length.
[   68.390868][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   68.391929][ T4338] EXT4-fs (loop4): unmounting filesystem.
[   68.422973][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.428221][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.499897][ T5093] loop4: detected capacity change from 0 to 512
[   68.515994][ T5093] EXT4-fs: Ignoring removed oldalloc option
[   68.539553][ T5091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.204'.
[   68.547543][ T5093] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   68.563563][ T5091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.204'.
[   68.576998][ T4338] EXT4-fs (loop4): unmounting filesystem.
[   69.553417][ T5118] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.209'.
[   69.555292][ T5118] netlink: zone id is out of range
[   71.228807][    T7] cfg80211: failed to load regulatory.db
[   71.690337][ T5140] loop3: detected capacity change from 0 to 4096
[   71.719691][ T5140] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   71.753749][ T5148] netlink: 'syz.1.217': attribute type 13 has an invalid length.
[   72.159056][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   72.175088][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   72.176518][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   72.326335][ T4328] EXT4-fs (loop3): unmounting filesystem.
[   72.489530][ T5170] netlink: 'syz.0.224': attribute type 1 has an invalid length.
[   72.517694][ T5170] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.863067][ T5170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'.
[   72.865722][ T5170] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[   72.899722][ T5170] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   73.684236][ T5186] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.226'.
[   73.685672][ T5186] netlink: zone id is out of range
[   74.066441][ T5190] syz.2.228 sent an empty control message without MSG_MORE.
[   75.187806][ T5214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.234'.
[   75.795706][ T5226] loop3: detected capacity change from 0 to 256
[   75.819934][ T5226] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   76.291750][    C0] sched: RT throttling activated
[   77.653983][ T5257] netlink: 32 bytes leftover after parsing attributes in process `syz.2.251'.
[   77.664689][ T5257] netlink: 32 bytes leftover after parsing attributes in process `syz.2.251'.
[   78.314177][ T5276] loop3: detected capacity change from 0 to 512
[   78.336163][ T5276] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   78.337526][ T5276] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[   78.338943][ T5276] System zones: 0-1, 15-15, 18-18, 34-34
[   78.340839][ T5276] EXT4-fs (loop3): orphan cleanup on readonly fs
[   78.346684][ T5276] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[   78.350836][ T5279] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   78.352665][ T5276] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   78.352706][ T5276] EXT4-fs (loop3): Cannot turn on quotas: error -22
[   78.355407][ T5279] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   78.357883][ T5279] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   78.359612][ T5279] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   78.361516][ T5279] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   78.363354][ T5279] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   78.364968][ T5279] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   78.366735][ T5279] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   78.368406][ T5279] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   78.375716][ T5276] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.257: bg 0: block 40: padding at end of block bitmap is not set
[   78.390167][ T5276] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem
[   78.399554][ T5276] EXT4-fs (loop3): 1 truncate cleaned up
[   78.403817][ T5276] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   78.574049][ T5282] netlink: 'syz.2.260': attribute type 1 has an invalid length.
[   78.575666][ T5282] netlink: 'syz.2.260': attribute type 3 has an invalid length.
[   78.577003][ T5282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'.
[   78.691764][ T5279] net_ratelimit: 15397 callbacks suppressed
[   78.691778][ T5279] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   78.694425][ T5279] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   78.699340][ T5279] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   78.700909][ T5279] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   78.709498][ T5279] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   78.711135][ T5279] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   78.715361][ T5279] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   78.717028][ T5279] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   78.718716][ T5279] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   78.730858][ T5279] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   79.659083][ T4328] EXT4-fs (loop3): unmounting filesystem.
[   81.377777][ T5312] mmap: syz.4.267 (5312) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   81.616940][ T5311] netlink: 'syz.1.269': attribute type 4 has an invalid length.
[   81.654610][ T5311] netlink: 'syz.1.269': attribute type 4 has an invalid length.
[   81.757438][ T5317] netlink: 132 bytes leftover after parsing attributes in process `syz.4.271'.
[   81.778068][ T5311] netlink: 'syz.1.269': attribute type 4 has an invalid length.
[   82.250610][ T5331] netlink: 'syz.1.276': attribute type 8 has an invalid length.
[   82.260604][ T5333] fuse: Bad value for 'fd'
[   82.338585][ T5338] netlink: 'syz.2.279': attribute type 1 has an invalid length.
[   82.352162][ T5338] device bond1 entered promiscuous mode
[   82.354114][ T5338] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.372958][ T5338] device bridge1 entered promiscuous mode
[   82.374442][ T5338] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[   82.387811][ T5338] device veth7 entered promiscuous mode
[   82.390344][ T5338] bond1: (slave veth7): Enslaving as a backup interface with a down link
[   82.448825][ T5340] Invalid option length (57448) for dns_resolver key
[   82.709583][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[   83.298989][ T5346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'.
[   83.711275][ T5372] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   83.711275][ T5372] The task syz.1.287 (5372) triggered the difference, watch for misbehavior.
[   84.211297][ T5386] Invalid option length (57448) for dns_resolver key
[   86.784082][ T5425] netlink: 'syz.2.305': attribute type 4 has an invalid length.
[   86.821202][ T5425] netlink: 'syz.2.305': attribute type 4 has an invalid length.
[   86.829142][ T5425] netlink: 'syz.2.305': attribute type 4 has an invalid length.
[   87.011424][ T5438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'.
[   87.292976][ T5441] Invalid option length (57448) for dns_resolver key
[   88.111182][ T5459] Invalid option length (57448) for dns_resolver key
[   90.445557][ T5482] netlink: 'syz.4.320': attribute type 4 has an invalid length.
[   90.514734][ T5485] netlink: 'syz.4.320': attribute type 4 has an invalid length.
[   90.557315][ T5482] netlink: 'syz.4.320': attribute type 4 has an invalid length.
[   90.632658][ T5494] netlink: 'syz.3.327': attribute type 10 has an invalid length.
[   90.644303][ T5494] device netdevsim0 entered promiscuous mode
[   90.645838][ T5494] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   92.687892][   T27] audit: type=1326 audit(92.670:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.3.337" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f177a28 code=0x7ffc0000
[   92.706020][   T27] audit: type=1326 audit(92.690:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.3.337" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f177a28 code=0x7ffc0000
[   92.711866][   T27] audit: type=1326 audit(92.690:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.3.337" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=8 compat=0 ip=0xffff7f177a28 code=0x7ffc0000
[   92.732361][   T27] audit: type=1326 audit(92.690:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.3.337" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f177a28 code=0x7ffc0000
[   92.761510][   T27] audit: type=1326 audit(92.690:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.3.337" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f177a28 code=0x7ffc0000
[   92.780706][   T27] audit: type=1326 audit(92.690:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.3.337" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff7f15a8ec code=0x7ffc0000
[   92.800954][   T27] audit: type=1326 audit(92.690:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.3.337" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff7f15a8ec code=0x7ffc0000
[   92.835852][   T27] audit: type=1326 audit(92.690:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.3.337" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f177a28 code=0x7ffc0000
[   92.839802][   T27] audit: type=1326 audit(92.690:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.3.337" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f177a28 code=0x7ffc0000
[   92.940347][   T27] audit: type=1326 audit(92.700:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.3.337" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff7f177a28 code=0x7ffc0000
[   93.871865][ T5555] netlink: 'syz.2.344': attribute type 10 has an invalid length.
[   94.487327][ T5555] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   96.399075][ T5591] netlink: 'syz.0.357': attribute type 4 has an invalid length.
[   96.404570][ T5591] netlink: 17 bytes leftover after parsing attributes in process `syz.0.357'.
[   96.538133][ T5597] Invalid ELF header magic: != ELF
[   96.826883][ T5595] binder: 5590:5595 IncRefs 0 refcount change on invalid ref 0 ret -22
[   96.855880][ T5595] binder: 5590:5595 got transaction to invalid handle, 1
[   96.862031][ T5595] binder: 5595:5590 cannot find target node
[   96.863047][ T5595] binder: 5590:5595 transaction async to 0:0 failed 21/29201/-22, size 72-24 line 3045
[   96.884298][ T5595] binder: 5590:5595 DecRefs 0 refcount change on invalid ref 1 ret -22
[   96.885803][ T5595] binder: 5590:5595 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   96.888110][ T5595] binder: 5595 RLIMIT_NICE not set
[   97.052732][ T5607] xt_hashlimit: size too large, truncated to 1048576
[   97.054096][ T5607] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[   97.334237][   T24] binder: undelivered TRANSACTION_ERROR: 29201
[   97.335423][ T5608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'.
[   97.341556][ T5608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.361'.
[   97.876247][ T5624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'.
[   98.554071][ T5640] fuse: Bad value for 'fd'
[   98.617430][ T5644] loop3: detected capacity change from 0 to 8
[   98.635509][ T5644] SQUASHFS error: lzo decompression failed, data probably corrupt
[   98.637033][ T5644] SQUASHFS error: Failed to read block 0x62b: -5
[   98.638224][ T5644] SQUASHFS error: Unable to read metadata cache entry [629]
[   98.639601][ T5644] SQUASHFS error: Unable to read inode 0x11f
[   98.933737][ T5644] 9pnet_fd: Insufficient options for proto=fd
[   99.137018][ T5661] netlink: 'syz.2.381': attribute type 2 has an invalid length.
[   99.289110][ T5677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   99.290831][ T5677] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.345043][ T5677] net_ratelimit: 13344 callbacks suppressed
[   99.345054][ T5677] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   99.352437][ T5678] netlink: 'syz.4.386': attribute type 39 has an invalid length.
[   99.839830][ T5698] loop4: detected capacity change from 0 to 512
[   99.847521][ T5698] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   99.849799][ T5698] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   99.857693][ T5698] EXT4-fs (loop4): 1 truncate cleaned up
[   99.858785][ T5698] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   99.868018][ T5700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.393'.
[  100.020711][ T4338] EXT4-fs (loop4): unmounting filesystem.
[  101.433929][ T5732] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  101.436047][ T5732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  101.437483][ T5732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  101.445802][ T5732] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  101.447909][ T5732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  101.449171][ T5732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  105.169864][ T5781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'.
[  105.365702][ T5786] wireguard: wireguard0: Could not create IPv6 socket
[  105.476328][ T5798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'.
[  105.522017][ T5803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.423'.
[  105.534001][ T5803] device ip6gre1 entered promiscuous mode
[  105.647138][ T5803] netlink: 'syz.0.423': attribute type 6 has an invalid length.
[  105.648428][ T5803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.423'.
[  107.179466][ T5832] capability: warning: `syz.0.429' uses deprecated v2 capabilities in a way that may be insecure
[  107.887009][ T5841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.434'.
[  107.901473][ T5843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.435'.
[  107.917986][ T5843] bridge2: port 1(veth9) entered blocking state
[  107.919275][ T5843] bridge2: port 1(veth9) entered disabled state
[  107.921006][ T5843] device veth9 entered promiscuous mode
[  107.936328][ T5843] bridge2: port 2(veth0_to_bond) entered blocking state
[  107.937699][ T5843] bridge2: port 2(veth0_to_bond) entered disabled state
[  107.939407][ T5843] device veth0_to_bond entered promiscuous mode
[  107.940967][ T5843] bridge2: port 2(veth0_to_bond) entered blocking state
[  107.942235][ T5843] bridge2: port 2(veth0_to_bond) entered forwarding state
[  109.118352][ T5796] Set syz1 is full, maxelem 65536 reached
[  110.322581][ T5889] netlink: 'syz.1.447': attribute type 39 has an invalid length.
[  111.550085][ T5901] netlink: 'syz.4.452': attribute type 3 has an invalid length.
[  111.964444][   T27] kauditd_printk_skb: 21 callbacks suppressed
[  111.964468][   T27] audit: type=1107 audit(111.950:37): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  113.699702][ T5942] sch_tbf: burst 1023 is lower than device lo mtu (65550) !
[  114.911210][ T5957] netlink: 'syz.3.467': attribute type 3 has an invalid length.
[  115.369637][   T27] audit: type=1107 audit(115.340:38): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  115.984703][ T5980] dns_resolver: Unsupported server list version (6)
[  117.233676][ T5994] loop3: detected capacity change from 0 to 512
[  117.249581][ T5994] EXT4-fs: Ignoring removed oldalloc option
[  117.280614][ T5994] EXT4-fs (loop3): 1 truncate cleaned up
[  117.288331][ T5994] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  117.330591][ T5994] EXT4-fs (loop3): unmounting filesystem.
[  120.389632][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'.
[  120.400913][ T6035] 8021q: adding VLAN 0 to HW filter on device team1
[  120.428591][ T5968] Set syz1 is full, maxelem 65536 reached
[  122.101207][ T6062] 9pnet: p9_errstr2errno: server reported unknown error �0x0000000000000009
[  122.176752][ T6072] netlink: 'syz.2.506': attribute type 4 has an invalid length.
[  122.215674][ T6074] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  122.263723][ T6074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  122.265188][ T6074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  122.267183][ T6074] device bridge_slave_0 left promiscuous mode
[  122.272216][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.569973][ T6074] device bridge_slave_1 left promiscuous mode
[  122.571459][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.646609][ T6074] bond0: (slave bond_slave_0): Releasing backup interface
[  122.687739][ T6074] bond0: (slave bond_slave_1): Releasing backup interface
[  123.126347][ T6074] team0: Port device team_slave_0 removed
[  123.135109][ T6074] team0: Port device team_slave_1 removed
[  123.136544][ T6074] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.137764][ T6074] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.139899][ T6074] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.141222][ T6074] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.147985][ T6078] team0: Mode changed to "random"
[  123.156111][ T6088] netlink: 'syz.2.506': attribute type 4 has an invalid length.
[  123.243016][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.513'.
[  123.245106][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.513'.
[  124.199092][ T6122] loop4: detected capacity change from 0 to 8
[  124.203196][ T6122] SQUASHFS error: Corrupted symlink
[  124.352928][ T6124] loop4: detected capacity change from 0 to 32768
[  124.372197][ T6124] XFS (loop4): Mounting V5 Filesystem
[  124.399089][ T6124] XFS (loop4): Ending clean mount
[  124.408373][ T6124] XFS (loop4): Quotacheck needed: Please wait.
[  124.774306][ T6124] XFS (loop4): Quotacheck: Done.
[  124.952418][ T4889] udevd[4889]: incorrect xfs checksum on /dev/loop4
[  125.646124][ T4338] XFS (loop4): Unmounting Filesystem
[  125.720516][ T4889] udevd[4889]: incorrect xfs checksum on /dev/loop4
[  125.811684][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.536'.
[  125.829365][ T6170] device team1 entered promiscuous mode
[  125.833425][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.536'.
[  125.835001][ T6170] team2 (uninitialized): Failed to send options change via netlink (err -105)
[  125.845079][ T6170] device team2 entered promiscuous mode
[  125.934664][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[  125.935831][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[  126.021987][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.540'.
[  126.023573][ T6182] netlink: 10 bytes leftover after parsing attributes in process `syz.2.540'.
[  126.930600][ T6210] loop4: detected capacity change from 0 to 512
[  126.932710][ T6210] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  127.293378][ T6210] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  128.285855][ T4338] EXT4-fs (loop4): unmounting filesystem.
[  128.853174][ T6250] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.854534][ T6250] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.733010][ T6250] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.753504][ T6250] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.939072][ T6250] tipc: Resetting bearer <eth:veth0_macvtap>
[  130.001502][ T6284] MPTCP: kernel_bind error, err=-99
[  130.080678][ T6250] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.083206][ T6250] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.084818][ T6250] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.311990][ T6250] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.313552][ T6250] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.315159][ T6250] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.406992][ T6273] netlink: 24 bytes leftover after parsing attributes in process `syz.2.570'.
[  130.429512][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'.
[  130.637019][ T6298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.640279][ T6298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.120867][ T6314] netlink: 64 bytes leftover after parsing attributes in process `syz.3.582'.
[  131.529239][ T6323] netlink: 'syz.4.587': attribute type 10 has an invalid length.
[  131.533487][ T6323] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  131.544626][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'.
[  131.546164][ T6317] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  131.552098][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  133.315434][ T6353] netlink: 'syz.1.605': attribute type 4 has an invalid length.
[  133.334703][ T6353] netlink: 'syz.1.605': attribute type 17 has an invalid length.
[  133.360036][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  134.587819][ T6394] tipc: Started in network mode
[  134.588700][ T6394] tipc: Node identity 4, cluster identity 4711
[  134.589789][ T6394] tipc: Node number set to 4
[  134.993038][ T6403] bridge0: port 1(vxlan0) entered blocking state
[  134.994224][ T6403] bridge0: port 1(vxlan0) entered disabled state
[  134.995872][ T6403] device vxlan0 entered promiscuous mode
[  135.441215][ T6418] netlink: 'syz.3.619': attribute type 1 has an invalid length.
[  135.463082][ T6418] bond2: (slave bridge1): Enslaving as a backup interface with an up link
[  135.475259][ T6418] bond2 (unregistering): (slave bridge1): Releasing backup interface
[  135.517481][ T6418] bond2 (unregistering): Released all slaves
[  136.361296][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'.
[  136.437499][ T6439] bond2: (slave veth11): Enslaving as an active interface with an up link
[  136.527240][ T6439] bond2 (unregistering): (slave veth11): Releasing backup interface
[  136.531697][ T6450] loop4: detected capacity change from 0 to 512
[  136.548380][ T6450] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.630: missing EA_INODE flag
[  136.555938][ T6450] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.630: error while reading EA inode 12 err=-117
[  136.558302][ T6450] EXT4-fs (loop4): 1 orphan inode deleted
[  136.559306][ T6450] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  136.832226][ T6439] bond2 (unregistering): Released all slaves
[  137.522510][ T4338] EXT4-fs (loop4): unmounting filesystem.
[  137.627468][ T6471] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  137.632256][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.635'.
[  137.933418][ T6495] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  137.975814][ T6499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.643'.
[  138.806340][ T6531] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  139.226531][ T6545] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  139.729198][   T27] audit: type=1326 audit(139.710:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.660" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef77a28 code=0x7ffc0000
[  139.737038][ T6557] loop4: detected capacity change from 0 to 512
[  139.739051][   T27] audit: type=1326 audit(139.720:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.660" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef77a28 code=0x7ffc0000
[  139.753849][   T27] audit: type=1326 audit(139.740:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.660" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffaef77a28 code=0x7ffc0000
[  139.776418][ T6559] netlink: 1343 bytes leftover after parsing attributes in process `syz.1.660'.
[  139.782314][ T6557] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  139.782534][   T27] audit: type=1326 audit(139.740:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.660" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef77a28 code=0x7ffc0000
[  139.788221][ T6557] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.662: corrupted in-inode xattr
[  139.791217][ T6557] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.662: couldn't read orphan inode 15 (err -117)
[  139.792273][   T27] audit: type=1326 audit(139.740:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.660" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef77a28 code=0x7ffc0000
[  139.800387][   T27] audit: type=1326 audit(139.740:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.660" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffaef77a28 code=0x7ffc0000
[  139.805285][ T6557] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  139.818040][   T27] audit: type=1326 audit(139.740:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.660" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef77a28 code=0x7ffc0000
[  139.841924][   T27] audit: type=1326 audit(139.740:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.660" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef77a28 code=0x7ffc0000
[  139.845956][   T27] audit: type=1326 audit(139.740:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.660" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffffaef77a28 code=0x7ffc0000
[  139.849345][   T27] audit: type=1326 audit(139.740:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.660" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef77a28 code=0x7ffc0000
[  139.876051][ T6564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.663'.
[  139.902806][ T6568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.665'.
[  139.944785][ T6572] netlink: 'syz.1.666': attribute type 1 has an invalid length.
[  139.957518][ T6572] device bond1 entered promiscuous mode
[  139.958771][ T6572] 8021q: adding VLAN 0 to HW filter on device bond1
[  139.987972][ T6572] bond1: (slave bridge1): making interface the new active one
[  139.989334][ T6572] device bridge1 entered promiscuous mode
[  139.991317][ T6572] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  139.993516][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  140.773503][ T4338] EXT4-fs (loop4): unmounting filesystem.
[  142.868164][ T6620] netlink: 'syz.2.681': attribute type 1 has an invalid length.
[  142.876212][ T6620] 8021q: adding VLAN 0 to HW filter on device bond2
[  142.890449][ T6620] bond2: (slave veth17): Enslaving as an active interface with a down link
[  142.897529][ T6624] netlink: 'syz.1.682': attribute type 10 has an invalid length.
[  143.014882][ T6624] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  143.024734][ T6620] bond2: (slave vlan2): making interface the new active one
[  143.033553][ T6620] device vlan2 entered promiscuous mode
[  143.039780][ T6620] bond2: (slave vlan2): Enslaving as an active interface with an up link
[  143.085765][ T6626] debugfs: Directory 'netdev:syzkaller0' with parent 'phy9' already present!
[  143.108471][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  144.772658][ T6669] netlink: 24 bytes leftover after parsing attributes in process `syz.4.693'.
[  146.321423][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.693'.
[  147.668310][ T6711] loop4: detected capacity change from 0 to 512
[  147.676380][ T6713] lo: Caught tx_queue_len zero misconfig
[  147.677344][ T6713] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  148.518358][ T6711] EXT4-fs: inline encryption not supported
[  148.519348][ T6711] ext4: Bad value for 'resuid'
[  150.579473][ T6747] tipc: Started in network mode
[  150.580468][ T6747] tipc: Node identity 080211000001, cluster identity 4711
[  150.582685][ T6747] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.792587][ T4737] tipc: Node number set to 134418688
[  151.963829][ T6782] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  151.965476][ T6782] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  151.966904][ T6782] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  151.968275][ T6782] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  151.969583][ T6782] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  151.970712][ T6782] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  151.971923][ T6782] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  151.973118][ T6782] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  151.974340][ T6782] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  151.975551][ T6782] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  153.613085][ T4343] Bluetooth: hci3: command 0x0406 tx timeout
[  153.614044][ T4343] Bluetooth: hci0: command 0x0406 tx timeout
[  153.615064][ T4343] Bluetooth: hci4: command 0x0406 tx timeout
[  153.616098][ T4343] Bluetooth: hci1: command 0x0406 tx timeout
[  153.617151][ T4343] Bluetooth: hci2: command 0x0406 tx timeout
[  154.135330][ T6824] 9pnet_fd: Insufficient options for proto=fd
[  154.171185][ T6826] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  155.394682][ T6849] netlink: 'syz.1.747': attribute type 1 has an invalid length.
[  155.402092][ T6849] 8021q: adding VLAN 0 to HW filter on device bond2
[  155.777299][ T6849] bond2: (slave veth7): Enslaving as an active interface with a down link
[  155.795450][ T6849] device veth0_to_bond entered promiscuous mode
[  155.797010][ T6849] device veth0_to_bond left promiscuous mode
[  155.799450][ T6849] bond2: (slave vlan3): Enslaving as an active interface with a down link
[  157.095324][ T4333] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  157.097003][ T4333] CPU: 1 PID: 4333 Comm: kworker/u5:3 Not tainted syzkaller #0
[  157.098320][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  157.099998][ T4333] Workqueue: hci1 hci_rx_work
[  157.100785][ T4333] Call trace:
[  157.101370][ T4333]  dump_backtrace+0x1c0/0x1ec
[  157.102233][ T4333]  show_stack+0x2c/0x3c
[  157.102933][ T4333]  __dump_stack+0x30/0x40
[  157.103648][ T4333]  dump_stack_lvl+0xf4/0x15c
[  157.104418][ T4333]  dump_stack+0x1c/0x5c
[  157.105144][ T4333]  sysfs_create_dir_ns+0x244/0x264
[  157.106042][ T4333]  kobject_add_internal+0x598/0xb08
[  157.106918][ T4333]  kobject_add+0x140/0x20c
[  157.107717][ T4333]  device_add+0x3f0/0xf90
[  157.108509][ T4333]  hci_conn_add_sysfs+0xbc/0x1c8
[  157.109358][ T4333]  le_conn_complete_evt+0xcc8/0x1244
[  157.110275][ T4333]  hci_le_conn_complete_evt+0x114/0x3f4
[  157.111272][ T4333]  hci_le_meta_evt+0x2c0/0x4a0
[  157.112126][ T4333]  hci_event_packet+0x6b8/0xf18
[  157.113002][ T4333]  hci_rx_work+0x328/0xa84
[  157.113792][ T4333]  process_one_work+0x7f8/0x13a4
[  157.114669][ T4333]  worker_thread+0x8c4/0xfec
[  157.115429][ T4333]  kthread+0x250/0x2d8
[  157.116179][ T4333]  ret_from_fork+0x10/0x20
[  157.118490][ T4333] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  157.120560][ T4333] Bluetooth: hci1: failed to register connection device
[  158.244190][ T6894] loop4: detected capacity change from 0 to 128
[  162.003704][   T39] device vlan2 left promiscuous mode
[  162.135997][   T27] kauditd_printk_skb: 22 callbacks suppressed
[  162.136006][   T27] audit: type=1326 audit(162.120:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6953 comm="syz.1.774" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef77a28 code=0x7fc00000
[  162.161261][   T27] audit: type=1326 audit(162.140:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6953 comm="syz.1.774" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffaef77a28 code=0x7fc00000
[  162.371527][ T6969] 8021q: adding VLAN 0 to HW filter on device bond2
[  162.373475][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.779'.
[  162.385289][ T6967] 8021q: adding VLAN 0 to HW filter on device bond2
[  162.747009][ T6974] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  162.751567][ T6975] bond2: (slave macvlan2): making interface the new active one
[  162.753773][ T6975] bond2: (slave macvlan2): Enslaving as an active interface with an up link
[  162.755395][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  162.757131][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  163.564028][ T7006] 9pnet: p9_errstr2errno: server reported unknown error ÈVmI®LÓâ—…N
[  167.195782][ T7052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.109867][ T7049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.151856][ T7049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.230365][ T7076] binder: 7075:7076 tried to acquire reference to desc 0, got 1 instead
[  168.283922][ T7078] net_ratelimit: 5268 callbacks suppressed
[  168.283944][ T7078] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  168.286196][ T7078] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  168.287572][ T7078] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  168.289015][ T7078] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  168.290275][ T7078] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  168.291682][ T7078] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  168.293103][ T7078] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  168.294524][ T7078] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  168.295798][ T7078] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  168.297176][ T7078] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  168.682780][ T7076] binder: 7075:7076 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  168.706695][ T7076] binder: 7076 RLIMIT_NICE not set
[  168.707652][ T7076] binder: 7076 RLIMIT_NICE not set
[  168.714616][   T24] binder: release 7075:7076 transaction 26 out, still active
[  168.715959][   T24] binder: undelivered TRANSACTION_COMPLETE
[  168.729790][ T4735] binder: release 7075:7076 transaction 26 in, still active
[  168.731089][ T4735] binder: send failed reply for transaction 26, target dead
[  170.594308][ T7101] loop4: detected capacity change from 0 to 164
[  171.223877][ T7123] overlayfs: failed to clone upperpath
[  171.292210][ T4889] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  171.419649][ T7130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.479871][ T7130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.484479][ T7130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  172.490235][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.830'.
[  174.507281][ T7176] team0 (unregistering): Port device team_slave_0 removed
[  174.527342][ T7176] team0 (unregistering): Failed to send options change via netlink (err -105)
[  174.529459][ T7176] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  174.542145][ T7176] team0 (unregistering): Port device team_slave_1 removed
[  174.557593][ T7176] team0 (unregistering): Failed to send options change via netlink (err -105)
[  174.567776][ T7176] team0 (unregistering): Failed to send port change of device netdevsim0 via netlink (err -105)
[  174.575827][ T7176] team0 (unregistering): Port device netdevsim0 removed
[  176.833411][ T7207] loop4: detected capacity change from 0 to 4096
[  176.892310][ T7207] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  176.942538][ T7207] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  176.951057][ T7207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.235196][ T7207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.796760][ T4338] EXT4-fs (loop4): unmounting filesystem.
[  177.878503][ T7229] netlink: 'syz.3.854': attribute type 27 has an invalid length.
[  180.474275][ T7290] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  180.475954][ T7290] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  182.075584][ T7310] loop4: detected capacity change from 0 to 256
[  182.116548][ T7310] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  182.118322][ T7310] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  183.034414][ T7310] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  183.661377][ T7326] binder: 7322:7326 tried to acquire reference to desc 0, got 1 instead
[  184.592476][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.885'.
[  184.790544][ T4315] binder: release 7322:7326 transaction 31 out, still active
[  184.823282][ T7338] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  184.852042][ T4315] binder: undelivered TRANSACTION_COMPLETE
[  184.853052][ T4315] binder: send failed reply for transaction 38 to 7322:7332
[  184.854353][ T4315] binder: undelivered TRANSACTION_COMPLETE
[  184.855899][ T4315] binder: undelivered TRANSACTION_ERROR: 29189
[  184.859163][ T7358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.866129][ T7339] bond2: (slave gretap1): Error: Slave device does not support XDP
[  184.869916][ T4315] binder: send failed reply for transaction 31, target dead
[  185.285739][ T7367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.294543][ T7358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.338155][ T7361] netlink: 'syz.1.901': attribute type 1 has an invalid length.
[  185.371458][ T7368] bond3: (slave bridge2): Enslaving as a backup interface with an up link
[  185.373977][ T7369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.901'.
[  185.377504][ T7369] 8021q: adding VLAN 0 to HW filter on device bond3
[  185.378760][ T5395] net_ratelimit: 5266 callbacks suppressed
[  185.378766][ T5395] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  185.383465][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  185.404862][ T7360] loop4: detected capacity change from 0 to 40427
[  185.410518][ T7360] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  185.412155][ T7360] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  185.422085][ T7360] F2FS-fs (loop4): invalid crc value
[  185.437815][ T7360] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  185.491878][ T5395] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  185.509843][ T7360] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  185.511292][ T7360] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  186.149858][ T7360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.151476][ T7360] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.102695][ T7400] netlink: 'syz.4.900': attribute type 1 has an invalid length.
[  187.109548][ T7400] device bond3 entered promiscuous mode
[  187.110725][ T7400] 8021q: adding VLAN 0 to HW filter on device bond3
[  187.417134][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[  187.418270][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[  187.998812][ T7400] 8021q: adding VLAN 0 to HW filter on device bond4
[  188.005041][ T7400] bond3: (slave bond4): making interface the new active one
[  188.006218][ T7400] device bond4 entered promiscuous mode
[  188.007476][ T7400] bond3: (slave bond4): Enslaving as an active interface with an up link
[  188.026763][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  188.075469][ T7400] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  188.077589][ T7400] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  189.197601][ T7423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.905'.
[  189.199670][ T7423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.905'.
[  189.201385][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.905'.
[  189.241006][ T7425] loop4: detected capacity change from 0 to 2048
[  189.609060][ T7425] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  189.611554][ T7441] bridge0: port 1(vlan4) entered blocking state
[  189.616957][ T7441] bridge0: port 1(vlan4) entered disabled state
[  189.659442][ T7445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.911'.
[  190.165363][ T4333] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1
[  190.225432][ T4333] Bluetooth: hci2: Malformed Event: 0x48
[  190.539444][ T7457] loop4: detected capacity change from 0 to 32768
[  190.542658][ T7457] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.916 (7457)
[  190.609783][ T7457] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  190.613954][ T7457] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm
[  190.616296][ T7457] BTRFS warning (device loop4): the 'inode_cache' option is deprecated and has no effect since 5.11
[  190.619254][ T7457] BTRFS info (device loop4): disabling tree log
[  190.623922][ T7457] BTRFS info (device loop4): force zlib compression, level 3
[  190.625664][ T7457] BTRFS info (device loop4): turning on sync discard
[  190.627349][ T7457] BTRFS info (device loop4): using free space tree
[  191.001730][ T5463] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x7798d919 level 0
[  191.004832][ T7457] BTRFS warning (device loop4): couldn't read tree root
[  191.126252][ T7457] BTRFS error (device loop4): open_ctree failed: -22
[  191.130496][ T4889] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4889)
[  192.102053][ T7457] loop4: detected capacity change from 0 to 32768
[  192.107965][ T7457] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  192.109362][ T7457] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  192.880970][ T7457] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  192.889181][    T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  192.890406][    T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  192.927963][    T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms
[  192.930618][    T7] gfs2: fsid=syz:syz.0: jid=0: Done
[  192.932074][ T7457] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  193.292498][ T7457] gfs2: fsid=syz:syz.0: can't start logd thread: -4
[  194.066339][ T7526] overlayfs: failed to resolve './file0': -2
[  194.626099][ T7549] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  194.627408][ T7549] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  194.628616][ T7549] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  194.629774][ T7549] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  194.630922][ T7549] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  194.632275][ T7549] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  194.633689][ T7549] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  194.634868][ T7549] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  194.636006][ T7549] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  194.637234][ T7549] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  195.263418][ T4333] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  195.265910][ T4333] Bluetooth: hci0: Injecting HCI hardware error event
[  195.274764][ T4343] Bluetooth: hci0: hardware error 0x00
[  195.712062][ T7563] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  195.713718][ T7563] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  195.904958][ T7574] netlink: 'syz.1.941': attribute type 1 has an invalid length.
[  195.928117][ T7574] bond4: (slave gretap1): making interface the new active one
[  195.932926][ T7574] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  195.978450][ T7574] bond4: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  198.333527][ T4343] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  199.400658][ T7606] netlink: 'syz.3.952': attribute type 1 has an invalid length.
[  199.413835][ T7606] device bond3 entered promiscuous mode
[  199.415171][ T7606] 8021q: adding VLAN 0 to HW filter on device bond3
[  199.730932][ T7613] loop4: detected capacity change from 0 to 256
[  199.871652][ T7613] FAT-fs (loop4): Directory bread(block 64) failed
[  199.873040][ T7613] FAT-fs (loop4): Directory bread(block 65) failed
[  199.874408][ T7613] FAT-fs (loop4): Directory bread(block 66) failed
[  199.875627][ T7613] FAT-fs (loop4): Directory bread(block 67) failed
[  199.876993][ T7613] FAT-fs (loop4): Directory bread(block 68) failed
[  199.878150][ T7613] FAT-fs (loop4): Directory bread(block 69) failed
[  199.879499][ T7613] FAT-fs (loop4): Directory bread(block 70) failed
[  199.880668][ T7613] FAT-fs (loop4): Directory bread(block 71) failed
[  199.881858][ T7613] FAT-fs (loop4): Directory bread(block 72) failed
[  199.883133][ T7613] FAT-fs (loop4): Directory bread(block 73) failed
[  200.325990][ T7606] 8021q: adding VLAN 0 to HW filter on device bond4
[  200.331380][ T7606] bond3: (slave bond4): making interface the new active one
[  200.343441][ T7606] device bond4 entered promiscuous mode
[  200.344750][ T7606] bond3: (slave bond4): Enslaving as an active interface with an up link
[  200.347748][ T5463] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  200.372964][ T7608] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  200.375007][ T7608] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  201.501697][ T7643] loop4: detected capacity change from 0 to 512
[  201.505200][ T7643] EXT4-fs: Ignoring removed orlov option
[  201.508273][ T7643] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  201.515936][ T7643] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  201.525088][ T7643] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.959: corrupted in-inode xattr
[  201.528642][ T7643] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.959: couldn't read orphan inode 15 (err -117)
[  201.532731][ T7643] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  202.445061][ T4338] EXT4-fs (loop4): unmounting filesystem.
[  203.291912][ T7670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.352429][ T7670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.356462][ T7670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.085302][ T7716] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4338] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      
[  208.247679][ T7701] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.263665][ T7701] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.265199][ T7701] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.266599][ T7701] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.313593][ T7745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.371458][ T7745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.376577][ T7745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.481168][ T7771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.996'.
[  210.505579][ T7771] netlink: 20 bytes leftover after parsing attributes in process `syz.1.996'.
[  210.719313][ T7787] batman_adv: batadv0: Adding interface: dummy0
[  210.720397][ T7787] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.740548][ T7787] batman_adv: batadv0: Interface activated: dummy0
[  210.752515][ T7785] net_ratelimit: 5266 callbacks suppressed
[  210.752527][ T7785] batadv0: mtu less than device minimum
[  210.756079][ T7785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  210.759502][ T7785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  210.762583][ T7785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  210.765556][ T7785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  210.768605][ T7785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  210.771627][ T7785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  210.774951][ T7785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  210.778026][ T7785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  210.781147][ T7785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  211.796767][ T7802] netlink: 'syz.1.1005': attribute type 4 has an invalid length.
[  211.836667][ T7806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  211.861239][ T7810] overlayfs: failed to clone upperpath
[  212.866437][ T7817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.877633][ T7817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.709992][ T7855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.717463][ T7855] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.523152][ T7881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1027'.
[  217.406053][ T7890] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  218.495248][ T7917] netlink: 'syz.4.1037': attribute type 1 has an invalid length.
[  218.496940][ T7917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1037'.
[  221.383767][ T7976] netlink: 'syz.3.1055': attribute type 1 has an invalid length.
[  221.431510][ T7976] 8021q: adding VLAN 0 to HW filter on device bond5
[  221.447981][ T7982] bond5: (slave gretap2): making interface the new active one
[  221.450388][ T7982] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  221.451434][ T7981] process 'syz.2.1056' launched './file1' with NULL argv: empty string added
[  221.454492][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  222.920222][ T7994] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  222.924816][ T7994] batman_adv: batadv0: Interface deactivated: dummy0
[  222.926027][ T7994] batman_adv: batadv0: Removing interface: dummy0
[  222.927533][ T7994] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  222.929306][ T7994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  222.930698][ T7994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  222.933189][ T7994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  222.934820][ T7994] device bridge_slave_1 left promiscuous mode
[  222.936018][ T7994] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.010002][ T7994] bond0: (slave bond_slave_0): Releasing backup interface
[  223.243532][ T7994] device bond_slave_0 left promiscuous mode
[  223.256014][ T7994] bond0: (slave bond_slave_1): Releasing backup interface
[  223.340896][ T7994] device bond_slave_1 left promiscuous mode
[  223.368770][ T7994] team0: Port device team_slave_0 removed
[  223.383965][ T7994] team0: Port device team_slave_1 removed
[  223.385484][ T7994] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.390876][ T7994] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.143786][ T7994] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.145028][ T7994] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.149585][ T7994] bond0: (slave netdevsim0): Releasing backup interface
[  224.379310][ T7994] device netdevsim0 left promiscuous mode
[  224.386121][ T7994] bond1: (slave macvlan2): Removing an active aggregator
[  224.387793][ T7994] bond1: (slave macvlan2): Releasing backup interface
[  224.734562][ T7994] device vxlan0 left promiscuous mode
[  224.737440][ T7994] bridge0: port 1(vxlan0) entered disabled state
[  224.782962][ T7994] bond2: (slave gretap1): Releasing backup interface
[  224.837373][ T7994] bond3: (slave bond4): Releasing backup interface
[  224.838749][ T7994] device bond4 left promiscuous mode
[  224.876086][ T7994] bond5: (slave gretap2): Releasing active interface
[  225.198092][ T7992] netlink: 'syz.3.1059': attribute type 10 has an invalid length.
[  225.217159][ T7992] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  225.226496][ T8004] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1059'.
[  225.816288][ T8004] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  225.915655][ T8004] bond0 (unregistering): Released all slaves
[  225.923684][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1063'.
[  226.436497][ T8045] overlayfs: failed to resolve './file0': -2
[  228.536880][ T8084] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  228.695987][ T8089] overlayfs: failed to clone upperpath
[  229.132753][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'.
[  230.163945][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1098'.
[  230.201512][ T8149] netlink: 'syz.0.1101': attribute type 11 has an invalid length.
[  230.223563][ T8128] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  231.763280][ T8181] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  231.776699][ T8181] bond2: (slave macvlan3): Enslaving as a backup interface with an up link
[  232.102674][ T8181] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  232.288281][ T8191] infiniband syz0: set active
[  232.292939][ T8191] infiniband syz0: added bond_slave_1
[  232.314663][ T8191] RDS/IB: syz0: added
[  232.316596][ T8191] smc: adding ib device syz0 with port count 1
[  232.317803][ T8191] smc:    ib device syz0 port 1 has pnetid 
[  232.723149][ T8210] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  232.724667][ T8210] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  232.726104][ T8210] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  232.728462][ T8210] device vxlan1 entered promiscuous mode
[  232.846381][ T8215] netlink: 1355 bytes leftover after parsing attributes in process `syz.4.1120'.
[  236.441289][ T8263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1135'.
[  236.478828][ T8263] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.551057][ T8263] device vlan3 entered promiscuous mode
[  236.564192][ T8263] device bond0 entered promiscuous mode
[  236.582309][ T8263] bond0: (slave ip6tnl1): refused to change device type
[  236.596760][ T8274] MPTCP: kernel_bind error, err=-99
[  237.389396][ T8294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1146'.
[  237.393534][ T8294] device ip6gre2 entered promiscuous mode
[  238.340520][ T8305] netlink: 'syz.0.1146': attribute type 6 has an invalid length.
[  238.382993][ T8305] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1146'.
[  239.312361][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'.
[  244.122816][ T4343] Bluetooth: Wrong link type (-22)
[  245.977865][ T8440] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1183'.
[  246.190169][ T8448] sctp: [Deprecated]: syz.3.1184 (pid 8448) Use of struct sctp_assoc_value in delayed_ack socket option.
[  246.190169][ T8448] Use struct sctp_sack_info instead
[  247.072398][ T8446] fuse: Bad value for 'fd'
[  247.120796][ T8454] netlink: 'syz.0.1188': attribute type 1 has an invalid length.
[  247.214194][ T8457] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  247.215716][ T8457] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  247.328689][ T8457] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  247.330083][ T8457] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  247.353133][ T8457] bond3: (slave geneve2): making interface the new active one
[  247.732887][ T8457] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  247.740934][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1191'.
[  247.755900][ T8454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1188'.
[  247.759491][ T8454] 8021q: adding VLAN 0 to HW filter on device bond3
[  247.765826][ T8462] bridge2: port 1(erspan0) entered blocking state
[  247.767095][ T8462] bridge2: port 1(erspan0) entered disabled state
[  247.768689][ T8462] device erspan0 entered promiscuous mode
[  247.770343][ T8462] bridge2: port 1(erspan0) entered blocking state
[  247.771424][ T8462] bridge2: port 1(erspan0) entered forwarding state
[  248.119528][ T8476] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1193'.
[  248.275696][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  248.766632][ T8485] netlink: 'syz.3.1200': attribute type 1 has an invalid length.
[  248.774583][ T8485] 8021q: adding VLAN 0 to HW filter on device bond6
[  248.781600][ T8485] bond6: (slave geneve2): making interface the new active one
[  248.784586][ T8485] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  248.786054][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready
[  248.812378][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[  248.892057][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[  250.355391][ T4333] Bluetooth: hci3: command 0x0406 tx timeout
[  250.586246][ T4333] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  250.589131][ T4333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  250.591018][ T4333] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  250.596859][ T4333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  250.598778][ T4333] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  250.600100][ T4333] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  250.765204][ T5463] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  250.873314][ T5463] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  250.924413][ T5463] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  250.940845][ T8503] chnl_net:caif_netlink_parms(): no params data found
[  250.958967][ T4343] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  250.961737][ T4343] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  250.964085][ T4343] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  250.970915][ T4343] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  250.972605][ T4343] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  250.973929][ T4343] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  250.995953][ T4343] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  250.998194][ T4343] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  250.999804][ T4343] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  251.001721][ T4343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  251.003887][ T4343] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  251.005261][ T4343] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  251.017363][ T5463] bond0: (slave netdevsim0): Releasing backup interface
[  251.084286][ T8503] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.085569][ T8503] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.087255][ T8503] device bridge_slave_0 entered promiscuous mode
[  251.090146][ T8503] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.091322][ T8503] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.093608][ T8503] device bridge_slave_1 entered promiscuous mode
[  251.101156][ T8503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.104103][ T8503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.112930][ T8503] team0: Port device team_slave_0 added
[  251.115448][ T8503] team0: Port device team_slave_1 added
[  251.122242][ T8503] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.123360][ T8503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.127786][ T8503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  251.130818][ T8503] batman_adv: batadv0: Adding interface: batadv_slave_1
[  251.132359][ T8503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.136486][ T8503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.184065][ T8503] device hsr_slave_0 entered promiscuous mode
[  251.232060][ T8503] device hsr_slave_1 entered promiscuous mode
[  251.271866][ T8503] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  251.274170][ T8503] Cannot create hsr debugfs directory
[  251.397166][ T5463] tipc: Disabling bearer <udp:syz2>
[  251.399414][ T5463] tipc: Disabling bearer <eth:veth0_macvtap>
[  251.401519][ T5463] tipc: Left network mode
[  251.492401][ T8523] chnl_net:caif_netlink_parms(): no params data found
[  251.508209][ T8525] chnl_net:caif_netlink_parms(): no params data found
[  252.053109][ T5463] bond2: (slave ip6gretap1): Releasing backup interface
[  252.493398][ T8523] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.494836][ T8523] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.496521][ T8523] device bridge_slave_0 entered promiscuous mode
[  252.663042][ T4333] Bluetooth: hci4: command 0x0409 tx timeout
[  252.811056][ T8525] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.812731][ T8525] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.814460][ T8525] device bridge_slave_0 entered promiscuous mode
[  252.816694][ T8525] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.817862][ T8525] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.819517][ T8525] device bridge_slave_1 entered promiscuous mode
[  252.823860][ T8523] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.825073][ T8523] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.826838][ T8523] device bridge_slave_1 entered promiscuous mode
[  252.934372][ T8525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  253.014540][ T8575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1214'.
[  253.238098][ T4333] Bluetooth: hci3: command 0x0409 tx timeout
[  253.240262][ T4343] Bluetooth: hci2: command 0x0409 tx timeout
[  253.276880][ T8525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  253.288050][ T8523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  253.307182][ T8525] team0: Port device team_slave_0 added
[  253.310300][ T8523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  253.327441][ T8525] team0: Port device team_slave_1 added
[  253.492405][   T27] audit: type=1326 audit(253.470:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8576 comm="syz.0.1215" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c577a28 code=0x0
[  253.765464][ T8523] team0: Port device team_slave_0 added
[  253.814625][ T8525] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.815992][ T8525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.820550][ T8525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.824916][ T8523] team0: Port device team_slave_1 added
[  253.832375][ T8523] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.833679][ T8523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.838057][ T8523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.840421][ T8525] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.841695][ T8525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.849795][ T8525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.870678][ T8523] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.872263][ T8523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.876921][ T8523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  254.023486][ T8525] device hsr_slave_0 entered promiscuous mode
[  254.072238][ T8525] device hsr_slave_1 entered promiscuous mode
[  254.101842][ T8525] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  254.103070][ T8525] Cannot create hsr debugfs directory
[  254.742144][ T4343] Bluetooth: hci4: command 0x041b tx timeout
[  255.291889][ T4335] Bluetooth: hci2: command 0x041b tx timeout
[  255.292900][ T4335] Bluetooth: hci3: command 0x041b tx timeout
[  256.573114][ T8523] device hsr_slave_0 entered promiscuous mode
[  256.612085][ T8523] device hsr_slave_1 entered promiscuous mode
[  256.651877][ T8523] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  256.653157][ T8523] Cannot create hsr debugfs directory
[  256.812544][ T4343] Bluetooth: hci4: command 0x040f tx timeout
[  256.944578][ T5463] bond0: (slave wlan1): Releasing backup interface
[  257.372006][ T4335] Bluetooth: hci2: command 0x040f tx timeout
[  257.372034][ T4343] Bluetooth: hci3: command 0x040f tx timeout
[  257.477777][ T8503] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  257.513936][ T8503] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  257.766260][ T8503] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  257.803118][ T8503] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  257.954467][ T8628] netlink: 'syz.0.1225': attribute type 1 has an invalid length.
[  257.968850][ T8628] 8021q: adding VLAN 0 to HW filter on device bond4
[  258.017889][ T5463] device hsr_slave_0 left promiscuous mode
[  258.062097][ T5463] device hsr_slave_1 left promiscuous mode
[  258.421966][ T5463] batman_adv: batadv0: Removing interface: batadv_slave_0
[  258.423789][ T5463] batman_adv: batadv0: Removing interface: batadv_slave_1
[  258.425268][ T5463] device bridge_slave_1 left promiscuous mode
[  258.427803][ T5463] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.462712][ T5463] device bridge_slave_0 left promiscuous mode
[  258.463831][ T5463] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.622389][ T5463] bond2 (unregistering): (slave macvlan3): Releasing backup interface
[  258.891914][ T4343] Bluetooth: hci4: command 0x0419 tx timeout
[  259.461872][ T4335] Bluetooth: hci3: command 0x0419 tx timeout
[  259.462889][ T4335] Bluetooth: hci2: command 0x0419 tx timeout
[  259.643072][ T5463] bond3 (unregistering): (slave bond4): Releasing backup interface
[  259.644465][ T5463] device bond4 left promiscuous mode
[  259.683126][ T5463] bond4 (unregistering): Released all slaves
[  260.383644][ T5463] bond3 (unregistering): Released all slaves
[  260.712594][ T5463] bond2 (unregistering): (slave macvlan2): Releasing backup interface
[  261.434192][ T5463] bond2 (unregistering): Released all slaves
[  262.134465][ T5463] bond1 (unregistering): Released all slaves
[  264.225276][ T5463] team0 (unregistering): Port device team_slave_1 removed
[  264.404160][ T5463] team0 (unregistering): Port device team_slave_0 removed
[  264.562418][ T5463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  264.762306][ T5463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  266.102733][ T5463] bond0 (unregistering): Released all slaves
[  266.407675][ T8628] bond4: (slave geneve3): making interface the new active one
[  266.410292][ T8628] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  266.462455][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  266.893468][ T8503] 8021q: adding VLAN 0 to HW filter on device bond0
[  266.897540][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  266.899145][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  266.903672][ T8503] 8021q: adding VLAN 0 to HW filter on device team0
[  266.906396][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  266.908055][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  266.909656][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.910815][ T5577] bridge0: port 1(bridge_slave_0) entered forwarding state
[  266.912880][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  266.915813][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  266.917345][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  266.918798][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.919990][ T5577] bridge0: port 2(bridge_slave_1) entered forwarding state
[  266.926588][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  267.202189][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  267.205397][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  267.207703][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  267.209484][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  267.220992][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  267.222834][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  267.225385][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  267.226849][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  267.229852][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  267.231475][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  267.237964][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  267.383696][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  267.385058][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  267.388891][ T8503] 8021q: adding VLAN 0 to HW filter on device batadv0
[  267.774421][ T8523] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.070452][ T8523] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.307929][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  268.309816][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  268.320285][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  268.322019][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  268.324015][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  268.325588][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  268.328146][ T8503] device veth0_vlan entered promiscuous mode
[  268.331494][ T8503] device veth1_vlan entered promiscuous mode
[  268.340194][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  268.342296][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  268.344446][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  268.346033][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  268.348749][ T8503] device veth0_macvtap entered promiscuous mode
[  268.351226][ T8503] device veth1_macvtap entered promiscuous mode
[  268.422951][ T8523] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.430930][ T8503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  268.433439][ T8503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.435103][ T8503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  268.436740][ T8503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.439664][ T8503] batman_adv: batadv0: Interface activated: batadv_slave_0
[  268.440812][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  268.443064][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  268.444565][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  268.446138][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  268.449111][ T8503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.450913][ T8503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.453264][ T8503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.455106][ T8503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.457590][ T8503] batman_adv: batadv0: Interface activated: batadv_slave_1
[  268.459209][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  268.461014][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  268.466154][ T8503] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.467829][ T8503] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.469519][ T8503] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.471030][ T8503] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.547011][ T8523] bond0: (slave netdevsim0): Releasing backup interface
[  268.595002][ T8523] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.613437][ T4542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.614910][ T4542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.616259][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  268.640672][ T4542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.642379][ T4542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.643880][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  268.705958][ T8698] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  268.707454][ T8698] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  268.708862][ T8698] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  268.710388][ T8698] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  268.713481][ T8698] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  270.414772][ T8712] xt_CT: No such helper "snmp_trap"
[  270.580382][ T8525] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  270.753071][ T8525] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  270.865909][ T8525] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  270.923206][ T8525] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  270.992572][ T8523] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  271.074388][ T8523] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  271.116076][ T8523] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  271.443215][ T8523] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  271.525112][ T8525] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.540177][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  271.542101][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  271.551329][ T8525] 8021q: adding VLAN 0 to HW filter on device team0
[  271.563298][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  271.566250][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  271.568927][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.570260][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.574163][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  271.588083][ T8523] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.589507][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  271.591404][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  271.593670][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.594861][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.601742][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  271.612114][ T5463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  271.616438][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  271.618016][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  271.619894][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  271.623921][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  271.629041][ T8523] 8021q: adding VLAN 0 to HW filter on device team0
[  271.631303][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  271.638687][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  271.640521][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  271.661133][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  271.662949][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  271.664506][ T4482] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.665703][ T4482] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.667092][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  271.668741][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  271.685989][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  271.765224][   T11] tipc: Disabling bearer <eth:syzkaller0>
[  271.766538][   T11] tipc: Left network mode
[  271.771067][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  271.782247][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  271.787694][ T4482] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.788835][ T4482] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.790264][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  271.792717][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  271.795129][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  271.798758][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  271.800669][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  272.094260][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  272.096115][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  272.097766][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  272.099635][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  272.258419][ T8752] xt_CT: You must specify a L4 protocol and not use inversions on it
[  274.665486][ T8764] 9pnet_fd: Insufficient options for proto=fd
[  285.087087][ T8525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  285.089189][ T5463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  285.090829][ T5463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  285.092584][ T5463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  285.094580][ T5463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  285.150309][ T8523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  285.152881][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1259'.
[  285.309943][ T8786] device syzkaller0 entered promiscuous mode
[  285.889780][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  285.891304][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  285.898225][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  285.900819][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  285.908256][ T8523] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.910917][ T8525] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.923788][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  285.925410][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  285.929730][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  285.931402][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  285.933917][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  285.935482][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  286.383974][ T8525] device veth0_vlan entered promiscuous mode
[  286.390558][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  286.392675][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  286.395615][ T8525] device veth1_vlan entered promiscuous mode
[  286.410288][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  286.412071][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  286.414348][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  286.415894][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  286.421077][ T8523] device veth0_vlan entered promiscuous mode
[  286.518022][   T11] bond4: (slave gretap1): Releasing active interface
[  286.577418][ T8523] device veth1_vlan entered promiscuous mode
[  286.580487][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  286.582928][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  286.584611][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  286.587412][ T8525] device veth0_macvtap entered promiscuous mode
[  286.590339][ T8525] device veth1_macvtap entered promiscuous mode
[  286.832458][ T8525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.838364][ T8525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.839981][ T8525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.855366][ T8525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.857066][ T8525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.858695][ T8525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.861355][ T8525] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.866555][ T8523] device veth0_macvtap entered promiscuous mode
[  286.869711][ T8523] device veth1_macvtap entered promiscuous mode
[  286.875668][ T8523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.877503][ T8523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.879215][ T8523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.880928][ T8523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.883207][ T8523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.886205][ T8523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.887802][ T8523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.889558][ T8523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.894596][ T8523] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.897157][ T8523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.898912][ T8523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.900533][ T8523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.902653][ T8523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.904305][ T8523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.906146][ T8523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.908571][ T8523] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.911050][ T8523] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.935244][ T8523] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.936965][ T8523] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.938441][ T8523] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  286.944906][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  286.946584][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  286.948197][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  286.949662][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  286.951200][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  286.956981][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  286.958752][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  286.961536][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  286.966102][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  286.968777][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  286.971547][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  287.031130][ T8818] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1267'.
[  287.233450][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  287.272397][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  287.284718][ T8525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.287573][ T8525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.289255][ T8525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.293236][ T8525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.294840][ T8525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.296556][ T8525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.298110][ T8525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.299822][ T8525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.319386][ T8525] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.365064][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  287.366744][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  287.396581][ T8525] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.400514][ T8525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.403100][ T8525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.406711][ T8525] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.933252][   T11] bond0: (slave wlan1): Releasing backup interface
[  288.599901][ T5577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.601350][ T5577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.140849][ T5463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  289.259680][ T5577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.265042][ T5577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.266906][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  289.741557][ T4725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.746202][ T8849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.746552][ T4725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.762228][ T8849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.793573][ T4725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.794950][ T4725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.829395][ T4725] Bluetooth: hci5: Frame reassembly failed (-84)
[  289.851076][ T8849] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2
[  290.237393][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  290.238965][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  290.243843][ T8853] netlink: 'syz.3.1277': attribute type 1 has an invalid length.
[  290.264373][ T8853] 8021q: adding VLAN 0 to HW filter on device bond7
[  290.295324][ T8856] device macvlan2 entered promiscuous mode
[  290.296702][ T8856] device bond7 entered promiscuous mode
[  290.298030][ T8856] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  290.300621][ T8856] team0: Port device macvlan2 added
[  290.374789][ T8858] bond7: (slave ip6gretap1): making interface the new active one
[  290.376158][ T8858] device ip6gretap1 entered promiscuous mode
[  290.394462][ T8858] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link
[  290.396958][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready
[  290.433603][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready
[  290.455145][ T8865] loop4: detected capacity change from 0 to 256
[  291.773407][   T11] device hsr_slave_0 left promiscuous mode
[  291.812369][   T11] device hsr_slave_1 left promiscuous mode
[  291.816020][ T8875] overlayfs: './file0' not a directory
[  291.862048][ T4335] Bluetooth: hci5: command 0x1003 tx timeout
[  291.874240][ T4343] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  291.903430][   T11] bridge0: port 1(vlan4) entered disabled state
[  292.060142][ T8884] loop4: detected capacity change from 0 to 8
[  292.346460][   T11] bond4 (unregistering): Released all slaves
[  292.447683][   T11] bond3 (unregistering): (slave bridge2): Removing an active aggregator
[  292.535167][ T8898] Soft offlining pfn 0x143ce9 at process virtual address 0x20000000
[  292.539577][ T8898] Soft offlining pfn 0x143cea at process virtual address 0x20001000
[  292.541014][ T8898] Soft offlining pfn 0x143ceb at process virtual address 0x20002000
[  292.542486][ T8898] Soft offlining pfn 0x143cec at process virtual address 0x20003000
[  292.543876][ T8898] Soft offlining pfn 0x143ced at process virtual address 0x20004000
[  292.545268][ T8898] Soft offlining pfn 0x143cee at process virtual address 0x20005000
[  292.546646][ T8898] Soft offlining pfn 0x143cef at process virtual address 0x20006000
[  292.548023][ T8898] Soft offlining pfn 0x14bf98 at process virtual address 0x20007000
[  292.549476][ T8898] Soft offlining pfn 0x14bf99 at process virtual address 0x20008000
[  292.550779][ T8898] Soft offlining pfn 0x14bf9a at process virtual address 0x20009000
[  292.552251][ T8898] Soft offlining pfn 0x14bf9b at process virtual address 0x2000a000
[  292.553585][ T8898] Soft offlining pfn 0x141136 at process virtual address 0x2000b000
[  292.555256][ T8898] Soft offlining pfn 0x141137 at process virtual address 0x2000c000
[  292.556663][ T8898] Soft offlining pfn 0x122c81 at process virtual address 0x2000d000
[  292.557989][ T8898] Soft offlining pfn 0x13f928 at process virtual address 0x2000e000
[  292.559449][ T8898] Soft offlining pfn 0x13f929 at process virtual address 0x2000f000
[  292.560788][ T8898] Soft offlining pfn 0x13f92a at process virtual address 0x20010000
[  292.562149][ T8898] Soft offlining pfn 0x13f92b at process virtual address 0x20011000
[  292.617449][   T11] bond3 (unregistering): (slave bridge2): Releasing backup interface
[  293.849841][ T4343] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  293.852227][ T4343] CPU: 1 PID: 4343 Comm: kworker/u5:8 Not tainted syzkaller #0
[  293.853406][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  293.855160][ T4343] Workqueue: hci4 hci_rx_work
[  293.855990][ T4343] Call trace:
[  293.856582][ T4343]  dump_backtrace+0x1c0/0x1ec
[  293.857447][ T4343]  show_stack+0x2c/0x3c
[  293.858177][ T4343]  __dump_stack+0x30/0x40
[  293.858921][ T4343]  dump_stack_lvl+0xf4/0x15c
[  293.859709][ T4343]  dump_stack+0x1c/0x5c
[  293.860484][ T4343]  sysfs_create_dir_ns+0x244/0x264
[  293.861341][ T4343]  kobject_add_internal+0x598/0xb08
[  293.862212][ T4343]  kobject_add+0x140/0x20c
[  293.862933][ T4343]  device_add+0x3f0/0xf90
[  293.863697][ T4343]  hci_conn_add_sysfs+0xbc/0x1c8
[  293.864606][ T4343]  le_conn_complete_evt+0xcc8/0x1244
[  293.865530][ T4343]  hci_le_conn_complete_evt+0x114/0x3f4
[  293.866469][ T4343]  hci_le_meta_evt+0x2c0/0x4a0
[  293.867242][ T4343]  hci_event_packet+0x6b8/0xf18
[  293.868097][ T4343]  hci_rx_work+0x328/0xa84
[  293.868888][ T4343]  process_one_work+0x7f8/0x13a4
[  293.869737][ T4343]  worker_thread+0x8c4/0xfec
[  293.870518][ T4343]  kthread+0x250/0x2d8
[  293.871183][ T4343]  ret_from_fork+0x10/0x20
[  293.922419][ T4343] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  293.924791][ T4343] Bluetooth: hci4: failed to register connection device
[  293.942294][    C0] net_ratelimit: 10 callbacks suppressed
[  293.942305][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  295.833019][   T11] bond3 (unregistering): Released all slaves
[  295.877738][   T11] bond2 (unregistering): (slave vlan3): Releasing active interface
[  296.355743][   T11] bond2 (unregistering): (slave veth7): Releasing active interface
[  296.574760][ T8960] loop2: detected capacity change from 0 to 32768
[  296.578859][ T8960] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.1299 (8960)
[  296.979084][ T8960] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  296.980873][ T8960] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[  296.983335][ T8960] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  296.984857][ T8960] BTRFS info (device loop2): use zstd compression, level 3
[  296.986052][ T8960] BTRFS info (device loop2): force clearing of disk cache
[  296.987225][ T8960] BTRFS info (device loop2): enabling disk space caching
[  296.988396][ T8960] BTRFS info (device loop2): disk space caching is enabled
[  297.087604][ T8960] BTRFS info (device loop2): enabling ssd optimizations
[  297.090762][ T8960] BTRFS info (device loop2): rebuilding free space tree
[  297.103681][ T8960] BTRFS info (device loop2): disabling free space tree
[  297.104956][ T8960] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  297.106644][ T8960] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  298.343703][   T11] bond2 (unregistering): Released all slaves
[  298.422654][   T11] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  298.424018][   T11] device bridge1 left promiscuous mode
[  298.811617][ T8523] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  299.502599][ T9016] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  300.786461][ T4335] Bluetooth: hci4: command 0x0406 tx timeout
[  303.456872][ T9043] loop1: detected capacity change from 0 to 512
[  303.772950][   T11] bond1 (unregistering): Released all slaves
[  308.537029][   T11] bond0 (unregistering): Released all slaves
[  308.579901][ T4335] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  308.582543][ T4335] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  308.585921][ T4335] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  308.587631][ T4335] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  308.589069][ T4335] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  308.590425][ T4335] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  309.439950][ T9086] loop2: detected capacity change from 0 to 1024
[  309.925194][ T9065] chnl_net:caif_netlink_parms(): no params data found
[  310.512001][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[  310.513249][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[  310.655984][ T4335] Bluetooth: hci5: command 0x0409 tx timeout
[  310.864694][ T9108] loop1: detected capacity change from 0 to 4096
[  310.911544][ T9065] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.920337][ T9065] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.923004][ T9108] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  310.929328][ T9065] device bridge_slave_0 entered promiscuous mode
[  310.933149][ T9065] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.934676][ T9065] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.944376][ T9065] device bridge_slave_1 entered promiscuous mode
[  311.213616][ T9065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  311.217227][ T9065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.218982][ T9108] EXT4-fs (loop1): unmounting filesystem.
[  311.253890][ T9065] team0: Port device team_slave_0 added
[  311.256088][ T9065] team0: Port device team_slave_1 added
[  311.288533][ T9065] batman_adv: batadv0: Adding interface: batadv_slave_0
[  311.289604][ T9065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.294401][ T9065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.296907][ T9065] batman_adv: batadv0: Adding interface: batadv_slave_1
[  311.298086][ T9065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.318491][ T9065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  312.763563][ T4335] Bluetooth: hci5: command 0x041b tx timeout
[  312.791106][ T9065] device hsr_slave_0 entered promiscuous mode
[  312.902743][ T4335] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  312.904417][ T4335] CPU: 0 PID: 4335 Comm: kworker/u5:4 Not tainted syzkaller #0
[  312.905563][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  312.907208][ T4335] Workqueue: hci2 hci_rx_work
[  312.908025][ T4335] Call trace:
[  312.908619][ T4335]  dump_backtrace+0x1c0/0x1ec
[  312.909415][ T4335]  show_stack+0x2c/0x3c
[  312.910141][ T4335]  __dump_stack+0x30/0x40
[  312.910858][ T4335]  dump_stack_lvl+0xf4/0x15c
[  312.911639][ T4335]  dump_stack+0x1c/0x5c
[  312.912381][ T4335]  sysfs_create_dir_ns+0x244/0x264
[  312.913265][ T4335]  kobject_add_internal+0x598/0xb08
[  312.914167][ T4335]  kobject_add+0x140/0x20c
[  312.914880][ T4335]  device_add+0x3f0/0xf90
[  312.915663][ T4335]  hci_conn_add_sysfs+0xbc/0x1c8
[  312.916481][ T4335]  le_conn_complete_evt+0xcc8/0x1244
[  312.917387][ T4335]  hci_le_enh_conn_complete_evt+0x114/0x3f4
[  312.918359][ T4335]  hci_le_meta_evt+0x2c0/0x4a0
[  312.919176][ T4335]  hci_event_packet+0x6b8/0xf18
[  312.920008][ T4335]  hci_rx_work+0x328/0xa84
[  312.920776][ T4335]  process_one_work+0x7f8/0x13a4
[  312.921542][ T4335]  worker_thread+0x8c4/0xfec
[  312.922353][ T4335]  kthread+0x250/0x2d8
[  312.923027][ T4335]  ret_from_fork+0x10/0x20
[  312.924269][ T9065] device hsr_slave_1 entered promiscuous mode
[  312.925727][ T4335] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  312.927817][ T4335] Bluetooth: hci2: failed to register connection device
[  313.191141][ T9148] loop2: detected capacity change from 0 to 128
[  313.192408][ T9065] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  313.193596][ T9065] Cannot create hsr debugfs directory
[  313.221415][ T9148] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  313.224711][ T9148] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  313.957174][ T9065] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  314.050230][ T8523] EXT4-fs (loop2): unmounting filesystem.
[  314.068018][ T9160] tipc: Started in network mode
[  314.068905][ T9160] tipc: Node identity 080211000001, cluster identity 4711
[  314.070185][ T9160] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  314.071264][ T9065] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  314.143956][ T9168] PKCS7: Unknown OID: [4] 0.0
[  314.144758][ T9168] PKCS7: Only support pkcs7_signedData type
[  314.812761][ T4335] Bluetooth: hci5: command 0x040f tx timeout
[  315.021871][ T9184] loop4: detected capacity change from 0 to 512
[  315.102944][ T9184] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1342: inode has both inline data and extents flags
[  315.105488][ T9184] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1342: couldn't read orphan inode 15 (err -117)
[  315.107690][ T9184] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  315.573038][ T9187] loop2: detected capacity change from 0 to 40427
[  315.576230][ T9187] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288)
[  315.578967][ T9187] F2FS-fs (loop2): invalid crc value
[  315.591040][ T9187] F2FS-fs (loop2): Found nat_bits in checkpoint
[  315.604784][ T9187] F2FS-fs (loop2): recover fsync data on readonly fs
[  315.606684][ T9187] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1
[  315.607758][ T9187] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[  315.609953][ T9187] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  315.669405][ T9065] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  315.703889][ T9179] device erspan0 left promiscuous mode
[  315.705059][ T9179] bridge2: port 1(erspan0) entered disabled state
[  316.686098][ T9179] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  316.687887][ T9179] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  316.708475][ T9179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  316.709926][ T9179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  316.736233][ T9179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  316.794134][ T9179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  316.799732][ T9179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  316.801412][ T9179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  317.242442][ T4343] Bluetooth: hci5: command 0x0419 tx timeout
[  317.287143][ T9179] bond6: (slave geneve2): Releasing active interface
[  317.327639][ T9179] device bond7 left promiscuous mode
[  317.328935][ T9179] device ip6gretap1 left promiscuous mode
[  317.389302][ T9179] team0: Port device macvlan2 removed
[  317.421119][ T9179] bond7: (slave ip6gretap1): Releasing active interface
[  317.479499][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1343'.
[  317.516351][ T9211] fuse: Bad value for 'fd'
[  317.653697][ T4832] tipc: Node number set to 134418688
[  317.655147][ T9065] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  317.751687][ T9206] device syzkaller0 entered promiscuous mode
[  317.754589][   T11] tipc: Disabling bearer <udp:syz2>
[  317.755600][   T11] tipc: Disabling bearer <eth:veth0_macvtap>
[  317.757876][   T11] tipc: Left network mode
[  318.500439][ T9065] 8021q: adding VLAN 0 to HW filter on device bond0
[  319.929095][ T8503] EXT4-fs (loop4): unmounting filesystem.
[  330.560601][ T9238] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.561995][ T9238] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.221418][ T9238] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  331.239916][ T9238] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  331.899796][ T9238] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  331.901363][ T9238] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  331.902856][ T9238] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  331.904497][ T9238] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  332.126893][ T9238] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.128439][ T9238] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.130037][ T9238] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.131574][ T9238] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.307308][ T9284] overlayfs: failed to clone upperpath
[  332.680472][ T9065] 8021q: adding VLAN 0 to HW filter on device team0
[  332.683689][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  332.685302][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  332.687642][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  332.689351][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  332.691263][ T4658] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.692509][ T4658] bridge0: port 1(bridge_slave_0) entered forwarding state
[  332.703666][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  332.705312][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  332.707216][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  332.708825][ T4658] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.710045][ T4658] bridge0: port 2(bridge_slave_1) entered forwarding state
[  332.712224][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  332.781152][ T9065] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  332.792331][ T9065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  332.798022][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  332.799878][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  332.805083][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  332.807234][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  333.268395][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  333.276166][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  333.279075][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  333.281169][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  333.287655][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  333.291386][ T9294] bridge0: port 1(vlan6) entered blocking state
[  333.295835][ T9294] bridge0: port 1(vlan6) entered disabled state
[  333.297535][ T9294] device vlan6 entered promiscuous mode
[  333.340941][ T9306] loop4: detected capacity change from 0 to 512
[  333.353444][ T9306] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  333.367372][ T9306] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1367: inode has both inline data and extents flags
[  333.370021][ T9306] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1367: couldn't read orphan inode 15 (err -117)
[  333.375579][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  333.375605][ T9306] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  333.377360][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  333.460334][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  333.461966][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  333.475009][ T9065] 8021q: adding VLAN 0 to HW filter on device batadv0
[  333.486152][ T8503] EXT4-fs (loop4): unmounting filesystem.
[  333.771740][ T9326] device team0 entered promiscuous mode
[  333.773592][ T9326] device team_slave_0 entered promiscuous mode
[  334.061833][ T9326] device team_slave_1 entered promiscuous mode
[  334.063456][ T9326] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  334.080448][ T9326] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  334.209675][ T9330] bridge0: port 3(vlan2) entered blocking state
[  334.210943][ T9330] bridge0: port 3(vlan2) entered disabled state
[  334.213913][ T9330] device vlan2 entered promiscuous mode
[  334.215006][ T9330] device bond0 entered promiscuous mode
[  334.216010][ T9330] device bond_slave_0 entered promiscuous mode
[  334.217216][ T9330] device bond_slave_1 entered promiscuous mode
[  334.218452][ T9330] device macvlan2 entered promiscuous mode
[  334.618071][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  334.619767][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  334.641143][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  334.642914][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  334.644565][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  334.646438][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  334.648756][ T9065] device veth0_vlan entered promiscuous mode
[  334.771012][ T9065] device veth1_vlan entered promiscuous mode
[  335.178753][ T9348] overlayfs: failed to clone upperpath
[  336.237164][ T9065] device veth0_macvtap entered promiscuous mode
[  336.242148][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  336.244217][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  336.247043][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  336.252651][ T9065] device veth1_macvtap entered promiscuous mode
[  336.340560][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.343886][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.345681][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.347903][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.349602][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.351568][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.356691][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.358601][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.361611][ T9065] batman_adv: batadv0: Interface activated: batadv_slave_0
[  336.363494][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  336.365333][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  336.368670][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.370581][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.664959][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.666982][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.668687][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.670526][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.672796][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.674529][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.677905][ T9065] batman_adv: batadv0: Interface activated: batadv_slave_1
[  337.246840][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  337.414959][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  337.575104][ T9065] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  337.580149][ T9065] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  337.581738][ T9065] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  337.588445][ T9065] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  337.593598][ T9386] device team0 entered promiscuous mode
[  337.594524][ T9386] device team_slave_0 entered promiscuous mode
[  337.595654][ T9386] device team_slave_1 entered promiscuous mode
[  337.596926][ T9386] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  337.598755][ T9386] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  337.693249][ T9386] bridge0: port 3(vlan2) entered blocking state
[  337.694619][ T9386] bridge0: port 3(vlan2) entered disabled state
[  337.696220][ T9386] device vlan2 entered promiscuous mode
[  337.697210][ T9386] device bond0 entered promiscuous mode
[  337.698115][ T9386] device bond_slave_0 entered promiscuous mode
[  337.699253][ T9386] device bond_slave_1 entered promiscuous mode
[  337.700390][ T9386] device vxlan0 entered promiscuous mode
[  337.701409][ T9386] device macvlan2 entered promiscuous mode
[  337.707197][   T11] bridge2: port 2(veth0_to_bond) entered disabled state
[  337.822328][   T11] device veth9 left promiscuous mode
[  337.823882][   T11] bridge2: port 1(veth9) entered disabled state
[  338.024686][   T11] device hsr_slave_0 left promiscuous mode
[  338.123169][   T11] device hsr_slave_1 left promiscuous mode
[  340.142901][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  340.144356][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  340.148190][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  340.152009][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  340.163834][   T11] device bridge_slave_1 left promiscuous mode
[  340.166089][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.603276][ T9429] loop4: detected capacity change from 0 to 256
[  340.610351][ T9429] exfat: Unknown parameter 'zero_size_dir'
[  341.278922][ T9248] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  341.954173][   T11] device bridge_slave_0 left promiscuous mode
[  341.955770][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.010939][   T11] device veth0_to_bond left promiscuous mode
[  342.632219][   T11] device veth1_macvtap left promiscuous mode
[  342.633449][   T11] device veth0_macvtap left promiscuous mode
[  342.634527][   T11] device veth1_vlan left promiscuous mode
[  342.635454][   T11] device veth0_vlan left promiscuous mode
[  342.686686][   T11] infiniband syz0: set down
[  342.753742][   T11] bond2 (unregistering): (slave vlan2): Releasing active interface
[  342.882447][   T11] bond2 (unregistering): (slave veth17): Releasing active interface
[  343.983422][   T11] bond2 (unregistering): Released all slaves
[  344.372831][   T11] bond1 (unregistering): (slave veth7): Releasing backup interface
[  344.452358][   T11] bond1 (unregistering): (slave bridge1): Removing an active aggregator
[  344.453940][   T11] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  344.492268][   T11] device bridge1 left promiscuous mode
[  345.224073][   T11] bond1 (unregistering): Released all slaves
[  347.355187][   T11] team0 (unregistering): Port device team_slave_1 removed
[  347.537170][   T11] team0 (unregistering): Port device team_slave_0 removed
[  347.712635][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  347.769209][ T4459] smc: removing ib device syz0
[  347.942855][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  349.473324][   T11] bond0 (unregistering): Released all slaves
[  349.780806][ T9433] netlink: 'syz.1.1403': attribute type 1 has an invalid length.
[  349.782682][ T9437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1403'.
[  349.883696][ T9462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1411'.
[  349.990006][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.991214][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.006587][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  350.016961][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.018332][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.019645][ T9027] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  350.169600][ T9485] fuse: Bad value for 'fd'
[  350.207186][ T9493] loop2: detected capacity change from 0 to 2048
[  350.231025][ T9496] device team0 entered promiscuous mode
[  350.235087][ T9496] device team_slave_0 entered promiscuous mode
[  350.236162][ T9496] device team_slave_1 entered promiscuous mode
[  350.238110][ T9496] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  350.239798][ T9493]  loop2: p1 < > p4
[  350.239798][ T9493]  p4: <netbsd: >
[  350.269064][ T9496] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  350.269457][ T9493] loop2: p4 size 722688 extends beyond EOD, truncated
[  350.375422][ T9496] bridge0: port 3(vlan2) entered blocking state
[  350.380752][ T9496] bridge0: port 3(vlan2) entered disabled state
[  350.395739][ T9496] device vlan2 entered promiscuous mode
[  350.396753][ T9496] device bond0 entered promiscuous mode
[  350.397703][ T9496] device bond_slave_0 entered promiscuous mode
[  350.398846][ T9496] device bond_slave_1 entered promiscuous mode
[  350.399964][ T9496] device macvlan2 entered promiscuous mode
[  350.462584][ T9499] device syzkaller0 entered promiscuous mode
[  350.479961][ T9477] udevd[9477]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  350.486612][ T9479] udevd[9479]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  350.569085][ T9510] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000
[  350.570942][ T9510] Mem abort info:
[  350.571504][ T9510]   ESR = 0x0000000086000006
[  350.572307][ T9510]   EC = 0x21: IABT (current EL), IL = 32 bits
[  350.573307][ T9510]   SET = 0, FnV = 0
[  350.573963][ T9510]   EA = 0, S1PTW = 0
[  350.574546][ T9510]   FSC = 0x06: level 2 translation fault
[  350.575415][ T9510] user pgtable: 4k pages, 48-bit VAs, pgdp=000000011c52c000
[  350.576593][ T9510] [0000000000000000] pgd=0800000131b22003, p4d=0800000131b22003, pud=0800000131914003, pmd=0000000000000000
[  350.578608][ T9510] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP
[  350.579771][ T9510] Modules linked in:
[  350.580460][ T9510] CPU: 0 PID: 9510 Comm: syz.5.1417 Not tainted syzkaller #0
[  350.581715][ T9510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  350.583420][ T9510] pstate: 82400805 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=-c)
[  350.584804][ T9510] pc : 0x0
[  350.585337][ T9510] lr : bond_xdp_xmit+0x280/0x46c
[  350.586205][ T9510] sp : ffff800021f27040
[  350.586890][ T9510] x29: ffff800021f270e0 x28: 000000000000000f x27: dfff800000000000
[  350.588235][ T9510] x26: ffff7000043e4e10 x25: ffff800012c2ce58 x24: ffff0000f38e4000
[  350.589572][ T9510] x23: fffffbffeff3b000 x22: ffff0000f4b58000 x21: fffffbffeff3b000
[  350.590786][ T9510] x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000000
[  350.592092][ T9510] x17: 0000000000000000 x16: ffff8000082d7ed4 x15: 0000000000000002
[  350.593478][ T9510] x14: 0000000000000001 x13: 0000000000ff0100 x12: 0000000000080000
[  350.594832][ T9510] x11: 0000000000002a9a x10: ffff80002fd27000 x9 : ffff800021f27080
[  350.596132][ T9510] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000
[  350.597555][ T9510] x5 : 0000000000000000 x4 : 0000000000000008 x3 : 0000000000000000
[  350.599014][ T9510] x2 : ffff800021f270a0 x1 : 0000000000000001 x0 : ffff0000f38e4000
[  350.600361][ T9510] Call trace:
[  350.600932][ T9510]  0x0
[  350.601379][ T9510]  bq_xmit_all+0xaf8/0xf80
[  350.602122][ T9510]  bq_enqueue+0x288/0x30c
[  350.602961][ T9510]  dev_map_enqueue_multi+0xbbc/0xcc8
[  350.603862][ T9510]  xdp_do_redirect_frame+0x3e4/0x578
[  350.604761][ T9510]  bpf_test_run_xdp_live+0x8b8/0x15d0
[  350.605779][ T9510]  bpf_prog_test_run_xdp+0x5fc/0xc88
[  350.606656][ T9510]  bpf_prog_test_run+0x2dc/0x360
[  350.607543][ T9510]  __sys_bpf+0x504/0x660
[  350.608248][ T9510]  __arm64_sys_bpf+0x80/0x98
[  350.609000][ T9510]  invoke_syscall+0x98/0x2b4
[  350.609815][ T9510]  el0_svc_common+0x138/0x258
[  350.610609][ T9510]  do_el0_svc+0x58/0x130
[  350.611268][ T9510]  el0_svc+0x58/0x128
[  350.611926][ T9510]  el0t_64_sync_handler+0x84/0xf0
[  350.612775][ T9510]  el0t_64_sync+0x18c/0x190
[  350.613554][ T9510] Code: bad PC value
[  350.614184][ T9510] ---[ end trace 0000000000000000 ]---
[  350.916367][ T9510] Kernel panic - not syncing: Oops: Fatal exception in interrupt
[  350.917572][ T9510] SMP: stopping secondary CPUs
[  350.918344][ T9510] Kernel Offset: disabled
[  350.919023][ T9510] CPU features: 0x080000,000f0097,a65bfea7
[  350.919923][ T9510] Memory Limit: none
[  351.209113][ T9510] Rebooting in 86400 seconds..