last executing test programs:

1m51.301016452s ago: executing program 0 (id=568):
r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0)
write$sndseq(r0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0xfffd, @random="c0c13c2baeb6", 'macvlan1\x00'}}, 0x1e)
sendmmsg$sock(r2, 0x0, 0x0, 0x48850)
io_uring_setup(0x87c, 0x0)

1m50.162518521s ago: executing program 0 (id=569):
gettid()
timer_create(0x1, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000180)=""/93, &(0x7f0000000380)=""/84, 0xa000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
close(0xffffffffffffffff)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m49.330951885s ago: executing program 0 (id=573):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf05", 0x29}], 0x1}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0)
write$binfmt_misc(r4, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}})
ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, &(0x7f0000000000)={0xd22, 0x200, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff})
socket$kcm(0x10, 0x2, 0x4)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x9, 0x0, 0x8000, 0x6, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x0, 0x4, 0xf, 0x80000006}, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRES32=r2, @ANYRES16=r7, @ANYRES8=0x0], 0x34}, 0x1, 0x0, 0x0, 0x40104}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})

1m43.137266609s ago: executing program 0 (id=581):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000000480)='./file0\x00', 0x3004050, &(0x7f0000000540)=ANY=[], 0x3, 0x1063a, &(0x7f0000010640)="$eJzs3L1vW1UbAPDHSdOvt2+JEAMLcCWElEjYqtMPUaYArVokWlV8DAghcGzHcmv7RrGbmi6IgQ0xM7KwMfCxsSL+BxYkFiQGJiQ2pCLfc1M1pUCL24Q0v59089xz7vFzn+N4OffaN4A9az777ddKHI1DETEbEUciiv1KuRWWU3g8Ip6KiJlbtkrZf7Njf0Qcjoijk+QpZ6U89NbPz58//cG5Dz/+5scnV7/49vOdmzWw056JiP5a2r/WTzHvpHi57G9sdIvYP7FRxnSgf6Vs5ylea68UGa41Nsc1ini8k8bna1eHk7jaazQnsdNdLfrXBumEw43OZp7iBZcb60W71V4pYneYF7FzPdU1LuP14SjlaZX53ivSx2i0GVN/e9xO81m7UsTmYFT2p7x5qz2exI0ylqeLZt5rFXWs3OENvDF71+/1f9kr3cHVcbbRXh9280F2slZ/rlY/Va2v5632qH2i2ui3Tp3IFjq9ybDqqN3oL3fyvNNr15p5fzFb6DSb1Xo9WzjTXuk2Blm9XjteO1Y9uVjuPZudu/hG1mtlC5P4YndwddTtDbPVfD1Lr1jMlmrHTy9mT9ez1y5cyi69evbshUuvv3PmzYsvXHj5pXLQn8rKFpaOLS1V68eqB2+fz4FP9tT8l+qL0/3/x5Wt7SduJJvt5enS87Cr7HQBALuP9T+wE6z/p1z/PyQewPo3i4hds/795/m//30auTfW/3BPfH4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPasn+a+Pl/szKf2/8r+/5ddj5btSkTMRMSNO5iN/VtyzpZ55v5i/NxtNXxXiSLD5BwHyu1wRCyX2++PpGMAAADAvfvhq8/eTqv19Gd+pwvi3zp01yOzm3vpos3MkXfvUw2ViJib/+U+ZInyYlM8Nn1VyeTzvS/GU2bZrK24gHVw+qqS4pLbvvuV7a7MbgkHbwmVFGa2tRwAAGBbbF0JbO8qBAAAgO300b0M/jI+fXCV8EDdfk+vuJtZfhe//AL/gRTKG4KHtrQAAACAXchP6gEAAODhV6z///75f+OW5/8BAADA7pae/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB/s3Dtu4kAYB/CPhxf2pbVW23CbLbnESnuELbfMIbhCehRK6hwjHelyBAQRnokUQ5CS2BgR/X6SPcwAfz5LNDN+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJzSfbGY3t1c/2kQcbXbbbbNtHdEAAAAwL5VsZhWL8rU/5rHv+ehn7nfi4h+RLw0dx/Ep1rmIOcURz5f7NVwG1El7H5jlLcvEfE7b+sf6T0AAADg7ZbzySzN1tOuPHdBdCkt2vS//W0prxcRRfnQQkrkxab41byqZPf/Hsb/hilPtVULWOPmVSXVktuwrbRXGdSa8bOml5p+p+UAAACdqM8Eup2FAAAA0KV/5y6A86jOZuZr8fMF/KPU5BOCn2s9AAAA4AK5pR4AAAAuy/odk/nqK57/BwAAAB9bev4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp7QqFtPlfDJrmrPZHogy4nD0iHaOBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCR/XlHgRAIgzDYu74zmfsfVho0NTWpAuHjbwwGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODN7/7yf2JqnEnmXhtLzyPJ2qmxdWrsnRtHfxhfvwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC725yUFQhiAAWim89Od9P6HlYA9gwjvQUtC6KIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPNHrOhm9PqutMo4k37aZ5Ne54d+pYUvybtj7YN74EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GTnfkLjqOI4gL/ZzW7/gLjGGCQqVmyqIGazG1roRfAgBA/qwYvHNN3U2GnUNoekBCQXb169602wKOTSWz16sedC8NAeC4tU6Lky/5pJTGIKZnbTfj7w9v06HWbeewvLfvcNAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJv+++FUUdeTl1ZW1/Jjdx6sze/WJ+4vxWNJS+qo2mEfOS/n/Sc3bnxWXsNofHBjAgAA4OlTL/J9COFuY2M26WutNP9PFuckmX/tuawu8vxe+f9Wrz1W5P/NiY/fe3yjVnafRghhYTHuTVc2w+F2OnTTvnNv86/yGu487/n9LlLfKqPsF5p6+rbVPlx/sd9IVz367vbtD5ppeez/nwUA8KSmij4viu9HSd8Z5MAAeGqN5C2U8n+9NdgxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFShvx7eKeoohDAxslUn7jxYm9+tv9Vrj91fitO2+fvNVvmaySUaIYSFxbg3XeFchtnp0E37+Lczr5bXcOd511avX56L495VxaCKR99kb8WwjEdx8CL52BqCYRxGUfUnFgAAR1kjb8kX5LuNjdnkWDQawqMftuf/t0p12Cf/F9k/aa+s9M+U71XO/53KZjjcivy/Ef2yWl7Dnee1l6981b62ev3dxStzl3qXekud82fPnTs/05mZbqe/p7T9qgIAAECmscuxZt7K+b82+u/9/5OlOhww/3/642vd8r3qz2z+P7Hn/xT5/6ULf3b3y/9bm36HOlAAAIBn2gunHv4d7XI8ajbDytzy8tVO9vr4393sdQBDfWLH8lbO/8dHBz0qAAAAoAr99Wjb/v/FUh3+Y/9/bOWntN38durr8jXr+U74wmLcm5r/Mr5Y3XSGVrH///DziT8Otv9/eMUApg8AAEBFTuStvP/fSJ//r71RnFMLIbz9ZlbnfwZwj/z/+rbn/ye7Z38u36v8/P9MhXMcRrXxbD2K/H/5wveTe+X/9NzxEEbGBzRYAAAAjrzjeUvy/73GxuwXv578qOn5fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4h/25R00gCOM4/O4kIQmkyz2WfJxBBCvBxsrGDxAW9gwewAvZWNkuXkSvoKiztZWsxfM0/18xDDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8PROd0+8REQRqc0UabD6PrxGxFukddP03q9ZbI77+uOWo+1ueMnxpP+Vb/mM4tFfAQDoRNlujsWymv/k/c37l/c/bzmtq1mXjwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADizAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgWAAAAABDmb51GxwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMFYAAAD//3eIiHE=")
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c56, &(0x7f0000001100)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@utf8}, {@shortname_lower}, {@fat=@debug}, {@rodir}, {@uni_xlateno}, {@shortname_lower}, {@utf8}, {@rodir}, {@utf8no}]}, 0x81, 0x29b, &(0x7f0000000580)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)

1m41.536582363s ago: executing program 0 (id=587):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c)

1m39.414631963s ago: executing program 0 (id=591):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000340)=ANY=[@ANYBLOB="747970653d54a10fb22c63726561746f723daa34aaf62c696f636861727365743d63703836342c63726561746f723d0de07c342c636f6465706167653d63703934392c6469725f756d61736b3d30303030303030303030303030303030303030303030302c6469725f756d61736b3d30303030303030303030303030303030303030303030302c6469725f756d61736b3d30303030303030303030303030303030303030313030302c71756965742c756d61736b3d3030303030303030303030303032362c000000000000000000"], 0x7, 0x318, &(0x7f00000004c0)="$eJzs3U1rE08cB/Dv7CZp8m/pf20rBY/VgqfS1oPixSLFi2/AgxRrm0LpWkEraEGMnkW8CYJHb55F34JexDegpx7Ek16CB1dmZmcf0tnNQ9tsQr4faJrszsNvdnayMynpgohG1tXVb28vHMgfUQbgArgMOACqQAnAacxWH+zube/59c28glyVQ/4I6JziUJqN3botq8yncoQ8+aqEieQ2OhlBEATf26b61ZdYqDhCj/1DHGAsHJ1qf7XvkZ2Mhm7XaEn0sGiiiYeYLDIcIiIqXnj9d8KrxEQ4f3ccYD6chw/79T81v2kWF8dAiK7/jn4dCHl8/le74vWeWsLJ3nfMKtFWlvWcCOLDXYE+s1IdINqtKlUsTm1r268vNFQBz3AllEg2ox43YRqiZEVb0b/mLGvTHHltzzeu2lCWbVjOiH+66xo//sAre3VrnzuISXwSX8Sa8PAam9H8rxQIeXDU8fFaekrHv5hdomqlp1OlWhmv30+pSs6YHvjwLm5lLeu4VuHKWGxkKaJ1/u6ZOF9WsnNhCumPFXTrlrJbp3JNW3MtR6//WHPNtOaqbZX9+sLGXT/3o5RjY13RiRfihpjDT7zHamL+78jU88gemalRLlTK8MzIbU9JpczoxxQ1gO90NTJJuWbt6HzPcRuXMHn/0f7Ouu/X7xX/xAyVAYlHn4jh6Si3yN+JNKjKJ2UAx1bp3yAIrLtK6EeTy6qpF9/ETd7fWRcN/fJoVaARFWh2rWQnBrACINxi3hF6qf1JlGssLrCj7L9lb6st9hPSRNWHE9JUldrlYqyjkVLrodLrj3fW/Z7eiWjIxJ2O2ZtFB0NFkPMuodd/ifXKonrXkQ9ezmokaFd4osSljBXQlHr8r7MVXFRs5jxx3Dxps+Y6ex4411KjA1Pj09ZivTBODOJfJbv/U4ZYxVfc4uf/RERERERERERERERERERERERERETDpttvI/TydYJ0jQcj+I83iIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiOJnH/X8BVd4ypFH7/X7eD+/+a+1IQUc/+BQAA//8KX2Ch")
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m24.16846253s ago: executing program 32 (id=591):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000340)=ANY=[@ANYBLOB="747970653d54a10fb22c63726561746f723daa34aaf62c696f636861727365743d63703836342c63726561746f723d0de07c342c636f6465706167653d63703934392c6469725f756d61736b3d30303030303030303030303030303030303030303030302c6469725f756d61736b3d30303030303030303030303030303030303030303030302c6469725f756d61736b3d30303030303030303030303030303030303030313030302c71756965742c756d61736b3d3030303030303030303030303032362c000000000000000000"], 0x7, 0x318, &(0x7f00000004c0)="$eJzs3U1rE08cB/Dv7CZp8m/pf20rBY/VgqfS1oPixSLFi2/AgxRrm0LpWkEraEGMnkW8CYJHb55F34JexDegpx7Ek16CB1dmZmcf0tnNQ9tsQr4faJrszsNvdnayMynpgohG1tXVb28vHMgfUQbgArgMOACqQAnAacxWH+zube/59c28glyVQ/4I6JziUJqN3botq8yncoQ8+aqEieQ2OhlBEATf26b61ZdYqDhCj/1DHGAsHJ1qf7XvkZ2Mhm7XaEn0sGiiiYeYLDIcIiIqXnj9d8KrxEQ4f3ccYD6chw/79T81v2kWF8dAiK7/jn4dCHl8/le74vWeWsLJ3nfMKtFWlvWcCOLDXYE+s1IdINqtKlUsTm1r268vNFQBz3AllEg2ox43YRqiZEVb0b/mLGvTHHltzzeu2lCWbVjOiH+66xo//sAre3VrnzuISXwSX8Sa8PAam9H8rxQIeXDU8fFaekrHv5hdomqlp1OlWhmv30+pSs6YHvjwLm5lLeu4VuHKWGxkKaJ1/u6ZOF9WsnNhCumPFXTrlrJbp3JNW3MtR6//WHPNtOaqbZX9+sLGXT/3o5RjY13RiRfihpjDT7zHamL+78jU88gemalRLlTK8MzIbU9JpczoxxQ1gO90NTJJuWbt6HzPcRuXMHn/0f7Ouu/X7xX/xAyVAYlHn4jh6Si3yN+JNKjKJ2UAx1bp3yAIrLtK6EeTy6qpF9/ETd7fWRcN/fJoVaARFWh2rWQnBrACINxi3hF6qf1JlGssLrCj7L9lb6st9hPSRNWHE9JUldrlYqyjkVLrodLrj3fW/Z7eiWjIxJ2O2ZtFB0NFkPMuodd/ifXKonrXkQ9ezmokaFd4osSljBXQlHr8r7MVXFRs5jxx3Dxps+Y6ex4411KjA1Pj09ZivTBODOJfJbv/U4ZYxVfc4uf/RERERERERERERERERERERERERETDpttvI/TydYJ0jQcj+I83iIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiOJnH/X8BVd4ypFH7/X7eD+/+a+1IQUc/+BQAA//8KX2Ch")
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

9.539202291s ago: executing program 3 (id=752):
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61)
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x7a, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r3}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94)

9.212390738s ago: executing program 3 (id=754):
close(0x3)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002340), 0x80, 0x0)
ioctl$SNDCTL_SYNTH_INFO(r4, 0xc08c5102, &(0x7f0000002380)={"0ab697b8ac755f4f7d393e134e6f55c08dd6dc45f0702446263d50f8c8c6", 0xffffdfde, 0x8c019b30e8e05c8f, 0x400, 0xfffffff8, 0x1, 0x9, 0x7, 0x7, [0x3f5, 0x8000, 0xab0, 0x5, 0xf, 0x9, 0x801, 0x41, 0x5266, 0x0, 0xbf, 0x84, 0x1, 0x7, 0x400, 0x9, 0x80, 0x1e, 0x4]})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x11cfa, 0x8000, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, 0x0)
getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {0x0, r5}}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x0, {0xa, 0x4e20, 0x4, @private1, 0x9}, r5}}, 0x38)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, 0x0)

9.211673958s ago: executing program 1 (id=755):
close(0x3)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002340), 0x80, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x0, {0xa, 0x4e20, 0x4, @private1, 0x9}}}, 0x38)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
io_setup(0x8, 0x0)

6.461657532s ago: executing program 3 (id=758):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@mcast1, 0x4e20, 0x5, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x9, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x7, 0x0, 0xfffffffffffffffc, 0xff}, 0x4, 0x0, 0x1, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010300, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)

6.165213097s ago: executing program 5 (id=760):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$video4linux(&(0x7f0000000300), 0xff, 0x8002)
syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0)

5.53537217s ago: executing program 4 (id=761):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

5.420478726s ago: executing program 2 (id=762):
syz_io_uring_complete(0x0, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4)
syz_emit_ethernet(0x22, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}}}}}, 0x0)

5.226513476s ago: executing program 1 (id=763):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r0, 0x104, 0x5, 0x0, &(0x7f0000000100))

4.207542109s ago: executing program 3 (id=764):
r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x7, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0)

4.059934747s ago: executing program 5 (id=765):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
inotify_init1(0x0)

4.059112427s ago: executing program 4 (id=766):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56441, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7f}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x0)

4.00021595s ago: executing program 1 (id=767):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.99926092s ago: executing program 2 (id=768):
close(0x3)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002340), 0x80, 0x0)
ioctl$SNDCTL_SYNTH_INFO(r4, 0xc08c5102, &(0x7f0000002380)={"0ab697b8ac755f4f7d393e134e6f55c08dd6dc45f0702446263d50f8c8c6", 0xffffdfde, 0x8c019b30e8e05c8f, 0x400, 0xfffffff8, 0x1, 0x9, 0x7, 0x7, [0x3f5, 0x8000, 0xab0, 0x5, 0xf, 0x9, 0x801, 0x41, 0x5266, 0x0, 0xbf, 0x84, 0x1, 0x7, 0x400, 0x9, 0x80, 0x1e, 0x4]})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x11cfa, 0x8000, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, 0x0)
getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {0x0, r5}}, 0x18)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x0, {0xa, 0x4e20, 0x4, @private1, 0x9}, r5}}, 0x38)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, 0x0)

3.81031308s ago: executing program 5 (id=769):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f0000000180))
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x409, "afacd20cf59ba94c63e1b800", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f0000001280)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000010c0)=[{}]})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$inet6(r4, &(0x7f0000000300)=',', 0x1, 0x20008850, &(0x7f0000000380)={0xa, 0x4e24, 0x5, @mcast1, 0xf6}, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mlock2(&(0x7f0000245000/0x1000)=nil, 0x1000, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

3.80946149s ago: executing program 1 (id=770):
syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400)
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0)

3.677534647s ago: executing program 4 (id=771):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000001500), 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})

3.677121297s ago: executing program 2 (id=772):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
connect$tipc(r2, &(0x7f0000000100)=@id, 0x10)
sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x101d0)

2.85305257s ago: executing program 5 (id=773):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x10000084)

2.833007471s ago: executing program 3 (id=774):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@mcast1, 0x4e20, 0x5, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x9, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x7, 0x0, 0xfffffffffffffffc, 0xff}, 0x4, 0x0, 0x1, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010300, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)

2.706950278s ago: executing program 4 (id=775):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$video4linux(&(0x7f0000000300), 0xff, 0x8002)
syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0)

1.617206425s ago: executing program 2 (id=776):
gettid()
timer_create(0x1, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.609230985s ago: executing program 3 (id=777):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003a40)=@newtfilter={0x15e4, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @filter_kind_options=@f_fw={{0x7}, {0x15b0, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'batadv0\x00'}, @TCA_FW_ACT={0x1584, 0x4, [@m_ife={0x128, 0x18, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_PRIO={0x8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x10000000, 0x5d75, 0x6}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x0, 0xffffffffffffffff, 0x0, 0x2}}}]}, {0x7a, 0x6, "2fefa7ce917ba909f3640e2bc857b54fc5120002657066fa48bb06b74357009ebe5ac6b6f5dd9ca446d7e92d9e9c9304dccdc481bb118bf5f705e476cfc777b1f529e2a2e8439ee5c5991627bf651bc44fd16ea3cd030e7379e2000000005bd0447c4c577c7a6d516f78ded02cf1a78ccbce88eece9c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x1d0, 0x4, 0x0, 0x0, {{0xb}, {0xb8, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x8, 0xe, 0x9, 0x81}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffe, 0x2, 0x10000000, 0x1, 0x6}}, @TCA_DEF_DATA={0x7, 0x3, '#,\x00'}, @TCA_DEF_DATA={0xd, 0x3, '*]*^^]%&\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffa, 0x40, 0x1, 0x8, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0xfffffffd, 0x8, 0x1, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x7ff, 0xffffffffffffffff, 0x49, 0x6}}, @TCA_DEF_DATA={0x1c, 0x3, '/dev/infiniband/rdma_cm\x00'}]}, {0xef, 0x6, "ced67bb32e3824f942dfca5aae6993d44c6f8b974bdf0e43bdb57288da10e877faa57fd3f68c90809a5f2f2b897e689eff35fea15cca16c4e6edccfa85d3a9d774ebf865de8f75eb93925e6ef0290717594ed400101a5b0e95bc858a641d546642a83ee4b790b5dfe8e928fefc297864c91c3557df0b9478b2a22438c0f0528793d633896d89cb4fa576e7609e7361eb8afbc0d8352fb043110ddf66587e9dfaedf84f5e1a3a2ad3fc6f8055f77a99cca3f22a9c2587c718b06f5d75412c236832d5a52a3ecbd23aed73cce1c5042f0e1b4d0e5e115dde7de33018cb91c8b87d28d7254c0fec223f3fa183"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x9c, 0x14, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x200, 0x4, 0x7532, 0xb62e}, 0x6e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000000, 0x3, 0xffffffffffffffff, 0x250, 0x4}, 0x2d}}]}, {0x37, 0x6, "0ff212dacc5cf895e77587367b2e37f1083be82574c89030b248d7bad4e5254784c7ae0633abe97dbb9afde341d229be62cfad"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}, @m_sample={0x154, 0x0, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x8, 0x7, 0x6, 0x5}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3b8}]}, {0xf0, 0x6, "d253f69e5e2c99902b022da80fd6bf253c01efb9fbb7de8dd558d5d4d3733ad5187c163879b3eb814eb05291c9ad9d6dfe1ab89b9cdbc354ffbb1753cf8c2871d9ebc626994d705a166ce0d12c47844680cd82995993ab9fee215ae8bc9c3a2a28bb55be392b7d8166663a5dd3e59ec09783a705ae3417a7a6dcefb6798f568b51b6798436d3018317aaf4edc9d372e3df69ae696d5e4df75109643f41b25a9992bc65a60cf9b2068f924d9561ec43390a79983cd819a118b4e200fe4834bec16b24d0b0c02de6e5b4afec3bcbef2fc97d9de305e064698e48ac0e96fecab15e10bc54c6c774604f5f27e3cb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x1098, 0x2, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xd}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x401}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_0\x00'}]}}]}, 0x15e4}, 0x1, 0x0, 0x0, 0xe8728ce82d5df8ab}, 0x0)

1.361807248s ago: executing program 5 (id=778):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04050400c900", @ANYRES8=r0], 0x68)
syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0)

556.735441ms ago: executing program 4 (id=779):
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}, 0x4762, 0x800, 0x101, 0x2, 0x10001}, &(0x7f0000000580)=0x98)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb1db16187d62f0ae, &(0x7f0000000040)=0x3c13, 0x4)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0x2020)

554.93797ms ago: executing program 2 (id=780):
pipe2(&(0x7f0000000200)={<r0=>0x0, <r1=>0x0}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]})
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RWALK(r1, &(0x7f0000000000)=ANY=[], 0x9)
tee(r0, r2, 0x2, 0xa)

496.296113ms ago: executing program 1 (id=781):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

245.451827ms ago: executing program 2 (id=782):
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x8, 0xc9, "7a6cb8", "6d439f", "7bccb1", "16045b", 0x6, 0x0, 0xb, 0x8, 0x0, 0x36, 0x2, 0x5, 0x101, 0x291}}}}, 0x20)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)

244.791476ms ago: executing program 4 (id=783):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x15, 0x7, 0xfe}, {0x24}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000640)=0x1, 0x4)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000225bd7000fbdbdf25120000000008000200080000000800010000010000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)={0xb1e1})
ptrace$cont(0xf7aef61bbe72383, 0x0, 0x276, 0x401)
r3 = socket$kcm(0x23, 0x5, 0x0)
listen(r3, 0x800)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
r6 = fcntl$dupfd(r5, 0x0, r5)
write$tun(r6, 0x0, 0x3db)
accept4(r3, 0x0, 0x0, 0x80000)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000003c0), 0x8, &(0x7f0000000440))

153.618881ms ago: executing program 1 (id=784):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f0000000180))
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x409, "afacd20cf59ba94c63e1b800", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f0000001280)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000010c0)=[{}]})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$inet6(r4, &(0x7f0000000300)=',', 0x1, 0x20008850, &(0x7f0000000380)={0xa, 0x4e24, 0x5, @mcast1, 0xf6}, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mlock2(&(0x7f0000245000/0x1000)=nil, 0x1000, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 5 (id=785):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000001500), 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})

kernel console output (not intermixed with test programs):

T4712] netlink: 'syz.0.74': attribute type 17 has an invalid length.
[  128.985017][ T4308] usb 3-1: config 0 interface 0 has no altsetting 0
[  129.006965][ T4308] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  129.016107][ T4308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.048902][ T4308] usb 3-1: config 0 descriptor??
[  129.090968][ T4780] loop3: detected capacity change from 0 to 1024
[  129.314950][ T4781] hfsplus: request for non-existent node 33423360 in B*Tree
[  129.323471][ T4781] hfsplus: request for non-existent node 33423360 in B*Tree
[  129.413260][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  129.467881][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.504771][ T4712] 8021q: adding VLAN 0 to HW filter on device team0
[  129.580853][ T4712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.622539][ T4733] netlink: 72 bytes leftover after parsing attributes in process `syz.1.82'.
[  129.702778][ T4744] device syzkaller0 entered promiscuous mode
[  130.133347][ T4786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.91'.
[  130.274256][ T4789] random: crng reseeded on system resumption
[  132.470850][ T4308] usbhid 3-1:0.0: can't add hid device: -71
[  132.479260][ T4308] usbhid: probe of 3-1:0.0 failed with error -71
[  132.548755][ T4308] usb 3-1: USB disconnect, device number 2
[  132.880723][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  132.887395][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  133.939595][ T4804] loop3: detected capacity change from 0 to 4096
[  134.012131][ T4815] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  134.080494][ T4818] netlink: 52 bytes leftover after parsing attributes in process `syz.0.100'.
[  134.342025][ T4821] loop1: detected capacity change from 0 to 256
[  134.378490][ T4821] exfat: Deprecated parameter 'utf8'
[  134.455824][ T4821] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  134.479797][ T4826] device syzkaller0 entered promiscuous mode
[  134.642073][ T4821] Zero length message leads to an empty skb
[  136.216985][ T4337] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  136.313320][ T4840] capability: warning: `syz.2.106' uses 32-bit capabilities (legacy support in use)
[  136.324634][ T4840] program syz.2.106 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  136.497155][ T4337] usb 2-1: Using ep0 maxpacket: 32
[  136.510481][ T4337] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  136.660615][ T4337] usb 2-1: config 0 interface 0 has no altsetting 0
[  137.061147][ T4337] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  137.076333][ T4337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.102106][ T4337] usb 2-1: config 0 descriptor??
[  137.890114][ T4856] loop3: detected capacity change from 0 to 32768
[  137.902206][ T4856] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.110 (4856)
[  137.917829][ T4856] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  137.928332][ T4856] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  137.937169][ T4856] BTRFS info (device loop3): turning on sync discard
[  137.944062][ T4856] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  137.954591][ T4856] BTRFS info (device loop3): use zstd compression, level 3
[  137.961962][ T4856] BTRFS info (device loop3): turning on async discard
[  137.969049][ T4856] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  137.979800][ T4856] BTRFS info (device loop3): trying to use backup root at mount time
[  137.987963][ T4856] BTRFS info (device loop3): enabling auto defrag
[  137.994477][ T4856] BTRFS info (device loop3): using free space tree
[  138.055391][ T4367] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  138.072123][ T4856] BTRFS error (device loop3): failed to load root extent
[  138.079328][ T4856] BTRFS warning (device loop3): try to load backup roots slot 1
[  138.095875][ T4315] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  138.260081][ T4874] random: crng reseeded on system resumption
[  138.407915][ T4856] BTRFS warning (device loop3): couldn't read tree root
[  138.415069][ T4856] BTRFS warning (device loop3): try to load backup roots slot 2
[  138.498198][ T4856] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  138.510066][ T4856] BTRFS warning (device loop3): couldn't read tree root
[  138.517246][ T4856] BTRFS warning (device loop3): try to load backup roots slot 3
[  139.137437][ T4856] BTRFS info (device loop3): enabling ssd optimizations
[  139.145406][ T4856] BTRFS info (device loop3): rebuilding free space tree
[  139.179416][ T4856] BTRFS info (device loop3): checking UUID tree
[  139.229546][ T4882] loop4: detected capacity change from 0 to 4096
[  139.376686][ T4883] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  139.392399][ T4337] usbhid 2-1:0.0: can't add hid device: -71
[  139.408713][ T4337] usbhid: probe of 2-1:0.0 failed with error -71
[  139.441174][ T4269] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  139.480934][ T4337] usb 2-1: USB disconnect, device number 3
[  139.619926][ T4885] netlink: 52 bytes leftover after parsing attributes in process `syz.1.114'.
[  139.948707][ T4714] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4714)
[  141.455449][ T4906] loop3: detected capacity change from 0 to 1024
[  143.366116][ T4918] loop4: detected capacity change from 0 to 512
[  144.317662][ T4913] hfsplus: request for non-existent node 33423360 in B*Tree
[  144.330171][ T4913] hfsplus: request for non-existent node 33423360 in B*Tree
[  144.337704][ T4918] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  144.801300][ T4918] EXT4-fs warning (device loop4): ext4_xattr_inode_get:506: inode #11: comm syz.4.123: EA inode hash validation failed
[  144.814680][ T4918] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  144.828738][ T4918] EXT4-fs (loop4): 1 orphan inode deleted
[  144.834496][ T4918] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  145.307805][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'.
[  145.324250][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  145.671223][ T4924] loop1: detected capacity change from 0 to 32768
[  145.687412][ T4924] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  145.709130][ T4928] netlink: 52 bytes leftover after parsing attributes in process `syz.3.127'.
[  145.859331][ T4713] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  145.919109][ T4930] loop0: detected capacity change from 0 to 2048
[  146.013523][ T4930] NILFS (loop0): corrupt root inode
[  147.469556][ T4941] loop1: detected capacity change from 0 to 131072
[  147.498716][ T4941] F2FS-fs (loop1): invalid crc value
[  147.679423][ T4941] F2FS-fs (loop1): Found nat_bits in checkpoint
[  147.727903][ T4941] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  147.749877][ T4941] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  149.709531][   T26] audit: type=1326 audit(2000000006.440:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8119c819 code=0x7ffc0000
[  149.829816][   T26] audit: type=1326 audit(2000000006.500:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8119c819 code=0x7ffc0000
[  149.893120][ T4973] device netdevsim0 entered promiscuous mode
[  150.014380][   T26] audit: type=1326 audit(2000000006.500:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8119c819 code=0x7ffc0000
[  150.090130][ T4975] loop4: detected capacity change from 0 to 1024
[  150.285762][   T26] audit: type=1326 audit(2000000006.500:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fde8119c819 code=0x7ffc0000
[  150.559252][ T4977] loop3: detected capacity change from 0 to 32768
[  150.638067][ T4977] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  150.648803][ T4977] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  150.657820][ T4977] BTRFS info (device loop3): turning on sync discard
[  150.664568][ T4977] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  150.674167][ T4977] BTRFS info (device loop3): use zstd compression, level 3
[  150.681571][ T4977] BTRFS info (device loop3): turning on async discard
[  150.688920][ T4977] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  150.699715][ T4977] BTRFS info (device loop3): trying to use backup root at mount time
[  150.707917][ T4977] BTRFS info (device loop3): enabling auto defrag
[  150.714523][ T4977] BTRFS info (device loop3): using free space tree
[  150.774537][   T26] audit: type=1326 audit(2000000006.500:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8119c819 code=0x7ffc0000
[  150.858666][ T4971] loop2: detected capacity change from 0 to 131072
[  150.867650][   T26] audit: type=1326 audit(2000000006.500:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8119c819 code=0x7ffc0000
[  150.898223][ T4971] F2FS-fs (loop2): invalid crc value
[  151.014867][ T4971] F2FS-fs (loop2): Found nat_bits in checkpoint
[  151.022049][   T26] audit: type=1326 audit(2000000006.500:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fde8119c819 code=0x7ffc0000
[  151.044848][   T26] audit: type=1326 audit(2000000006.500:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fde8115d04e code=0x7ffc0000
[  151.068179][   T26] audit: type=1326 audit(2000000006.600:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fde8115d04e code=0x7ffc0000
[  151.090534][   T26] audit: type=1326 audit(2000000006.700:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fde8115d04e code=0x7ffc0000
[  151.216662][ T4982] hfsplus: request for non-existent node 33423360 in B*Tree
[  151.225778][ T4982] hfsplus: request for non-existent node 33423360 in B*Tree
[  151.753026][ T4971] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  151.781262][ T4444] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  152.536068][ T5003] overlayfs: missing 'lowerdir'
[  152.587252][ T4977] BTRFS error (device loop3): failed to load root extent
[  152.594874][ T4977] BTRFS warning (device loop3): try to load backup roots slot 1
[  152.604896][ T4444] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  152.727522][ T4977] BTRFS warning (device loop3): couldn't read tree root
[  152.734559][ T4977] BTRFS warning (device loop3): try to load backup roots slot 2
[  152.742772][ T4977] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  152.754437][ T4977] BTRFS warning (device loop3): couldn't read tree root
[  152.762283][ T4977] BTRFS warning (device loop3): try to load backup roots slot 3
[  152.836655][ T4977] BTRFS info (device loop3): enabling ssd optimizations
[  152.844373][ T4977] BTRFS info (device loop3): rebuilding free space tree
[  152.856762][ T4977] BTRFS info (device loop3): checking UUID tree
[  153.204745][ T4269] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  156.178795][ T5024] loop1: detected capacity change from 0 to 131072
[  156.210608][ T5024] F2FS-fs (loop1): invalid crc value
[  157.033112][ T5024] F2FS-fs (loop1): Found nat_bits in checkpoint
[  157.066448][ T5024] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  157.079406][ T5024] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  158.425357][ T5054] loop4: detected capacity change from 0 to 1024
[  159.397090][ T5054] hfsplus: request for non-existent node 33423360 in B*Tree
[  159.404474][ T5054] hfsplus: request for non-existent node 33423360 in B*Tree
[  159.545147][ T5067] overlayfs: missing 'lowerdir'
[  159.770195][ T5063] loop3: detected capacity change from 0 to 2048
[  161.154140][ T5077] loop0: detected capacity change from 0 to 64
[  161.491095][ T5063] EXT4-fs: test_dummy_encryption requires encrypt feature
[  162.480098][ T5083] loop2: detected capacity change from 0 to 131072
[  162.852380][ T5083] F2FS-fs (loop2): invalid crc value
[  163.021020][ T5083] F2FS-fs (loop2): Found nat_bits in checkpoint
[  163.066942][ T5083] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[  163.075588][ T5083] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  164.747786][ T5104] loop0: detected capacity change from 0 to 131072
[  164.837018][ T4888] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  164.935554][ T5104] F2FS-fs (loop0): invalid crc value
[  164.997131][ T4888] usb 4-1: device descriptor read/64, error -71
[  165.020084][ T5104] F2FS-fs (loop0): Found nat_bits in checkpoint
[  165.059255][ T5104] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  165.085800][ T5104] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  165.267017][ T4888] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  165.505432][ T4888] usb 4-1: device descriptor read/64, error -71
[  165.657147][ T4888] usb usb4-port1: attempt power cycle
[  166.512074][ T5130] overlayfs: missing 'lowerdir'
[  166.876907][ T4888] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  166.912142][ T5134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'.
[  167.101284][ T4888] usb 4-1: device descriptor read/8, error -71
[  167.103877][ T5137] loop2: detected capacity change from 0 to 64
[  168.146172][ T5141] netlink: 136 bytes leftover after parsing attributes in process `syz.1.176'.
[  169.774715][ T5168] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  169.818344][ T5168] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  171.282036][ T5187] loop2: detected capacity change from 0 to 32768
[  171.307150][ T5187] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  171.448187][ T4711] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  172.059181][ T5187] loop2: detected capacity change from 0 to 128
[  172.087066][ T5187] FAT-fs (loop2): Directory bread(block 524322) failed
[  172.094122][ T5187] FAT-fs (loop2): Directory bread(block 524323) failed
[  172.101157][ T5187] FAT-fs (loop2): Directory bread(block 524324) failed
[  172.108501][ T5187] FAT-fs (loop2): Directory bread(block 524325) failed
[  172.115767][ T5187] FAT-fs (loop2): Directory bread(block 524326) failed
[  172.122829][ T5187] FAT-fs (loop2): Directory bread(block 524327) failed
[  172.129803][ T5187] FAT-fs (loop2): Directory bread(block 524328) failed
[  172.136699][ T5187] FAT-fs (loop2): Directory bread(block 524329) failed
[  173.307807][ T5197] device netdevsim0 entered promiscuous mode
[  173.348605][ T5197] netlink: 44 bytes leftover after parsing attributes in process `syz.3.193'.
[  173.445694][ T5199] tmpfs: Unknown parameter 'usrquota'
[  173.640061][ T5203] loop3: detected capacity change from 0 to 2048
[  173.677925][ T5203] EXT4-fs: Ignoring removed orlov option
[  173.729409][ T5203] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  173.769437][ T5189] loop4: detected capacity change from 0 to 32768
[  173.846174][ T5189] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  173.891619][ T5210] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  173.936005][ T5210] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  174.039555][ T4269] EXT4-fs (loop3): unmounting filesystem.
[  174.235864][ T5219] random: crng reseeded on system resumption
[  176.015194][ T5234] loop2: detected capacity change from 0 to 32768
[  176.054671][ T5234] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  176.205573][ T4711] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  176.526135][ T5243] loop1: detected capacity change from 0 to 64
[  177.511942][ T5245] loop2: detected capacity change from 0 to 128
[  177.827612][ T4714] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  177.944868][ T5245] FAT-fs (loop2): Directory bread(block 524322) failed
[  177.986060][ T5245] FAT-fs (loop2): Directory bread(block 524323) failed
[  178.909042][ T5245] FAT-fs (loop2): Directory bread(block 524324) failed
[  178.915983][ T5245] FAT-fs (loop2): Directory bread(block 524325) failed
[  179.034674][ T5245] FAT-fs (loop2): Directory bread(block 524326) failed
[  179.094912][ T5245] FAT-fs (loop2): Directory bread(block 524327) failed
[  179.300513][ T5245] FAT-fs (loop2): Directory bread(block 524328) failed
[  179.334869][ T5245] FAT-fs (loop2): Directory bread(block 524329) failed
[  180.245923][ T5265] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  180.282751][ T5265] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  181.385637][ T5292] loop2: detected capacity change from 0 to 64
[  181.425879][ T5293] loop4: detected capacity change from 0 to 16
[  181.497206][ T5293] erofs: (device loop4): mounted with root inode @ nid 36.
[  184.746661][ T5315] loop2: detected capacity change from 0 to 32768
[  184.756525][ T5315] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  184.932903][ T4711] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  185.758851][ T5319] loop2: detected capacity change from 0 to 128
[  185.779566][ T5319] FAT-fs (loop2): Directory bread(block 524322) failed
[  185.809414][ T5319] FAT-fs (loop2): Directory bread(block 524323) failed
[  185.838671][ T5326] overlayfs: missing 'lowerdir'
[  185.851777][ T5319] FAT-fs (loop2): Directory bread(block 524324) failed
[  185.879158][ T5319] FAT-fs (loop2): Directory bread(block 524325) failed
[  185.932010][ T5319] FAT-fs (loop2): Directory bread(block 524326) failed
[  185.977061][ T5319] FAT-fs (loop2): Directory bread(block 524327) failed
[  185.998369][ T5319] FAT-fs (loop2): Directory bread(block 524328) failed
[  186.023324][ T5319] FAT-fs (loop2): Directory bread(block 524329) failed
[  187.622476][ T5327] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  187.721116][ T5341] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  188.090000][ T5352] loop2: detected capacity change from 0 to 64
[  190.280415][ T5372] loop2: detected capacity change from 0 to 1024
[  190.898473][ T5374] hfsplus: request for non-existent node 33423360 in B*Tree
[  190.926961][ T5374] hfsplus: request for non-existent node 33423360 in B*Tree
[  190.969904][ T5378] loop0: detected capacity change from 0 to 16
[  191.036082][ T5378] erofs: (device loop0): mounted with root inode @ nid 36.
[  191.956067][ T5383] loop0: detected capacity change from 0 to 32768
[  191.987123][ T5383] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  192.123928][ T4714] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  192.452485][ T5389] loop0: detected capacity change from 0 to 128
[  192.567318][ T5389] FAT-fs (loop0): Directory bread(block 524322) failed
[  192.581807][ T5389] FAT-fs (loop0): Directory bread(block 524323) failed
[  192.590675][ T5389] FAT-fs (loop0): Directory bread(block 524324) failed
[  192.600771][ T5389] FAT-fs (loop0): Directory bread(block 524325) failed
[  192.611875][ T5389] FAT-fs (loop0): Directory bread(block 524326) failed
[  192.629120][ T5389] FAT-fs (loop0): Directory bread(block 524327) failed
[  192.654359][ T5389] FAT-fs (loop0): Directory bread(block 524328) failed
[  192.666864][ T5389] FAT-fs (loop0): Directory bread(block 524329) failed
[  193.168762][ T5404] loop1: detected capacity change from 0 to 64
[  193.396935][ T4512] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  194.195644][ T5410] random: crng reseeded on system resumption
[  194.257044][ T4512] usb 3-1: device descriptor read/64, error -71
[  194.323875][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.330550][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  195.656912][ T4512] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  195.761522][ T5420] xt_CT: You must specify a L4 protocol and not use inversions on it
[  195.770969][ T5419] overlayfs: missing 'lowerdir'
[  195.805046][ T5420] libceph: resolve '4' (ret=-3): failed
[  195.816875][ T4512] usb 3-1: device descriptor read/64, error -71
[  195.969843][ T4512] usb usb3-port1: attempt power cycle
[  196.387343][ T4512] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  196.706481][ T4512] usb 3-1: device descriptor read/8, error -71
[  197.003601][ T5422] loop4: detected capacity change from 0 to 131072
[  197.026254][ T5422] F2FS-fs (loop4): Invalid log sectorsize (67108873)
[  197.033083][ T5422] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  197.042497][ T5422] F2FS-fs (loop4): invalid crc value
[  197.138442][ T5437] random: crng reseeded on system resumption
[  198.068339][ T5422] F2FS-fs (loop4): Found nat_bits in checkpoint
[  198.117484][ T5422] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  198.124618][ T5422] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  199.587080][ T4337] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  199.747207][ T4337] usb 2-1: device descriptor read/64, error -71
[  199.819477][ T5460] loop0: detected capacity change from 0 to 64
[  200.107120][ T4337] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  201.478008][ T5470] loop4: detected capacity change from 0 to 32768
[  201.502439][ T5470] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  201.517112][   T48] Bluetooth: hci1: command 0x0406 tx timeout
[  201.523302][ T4272] Bluetooth: hci2: command 0x0406 tx timeout
[  201.529475][ T4267] Bluetooth: hci3: command 0x0406 tx timeout
[  201.535511][ T4276] Bluetooth: hci0: command 0x0406 tx timeout
[  201.541898][ T4275] Bluetooth: hci4: command 0x0406 tx timeout
[  201.658266][ T5477] random: crng reseeded on system resumption
[  202.617170][ T5476] overlayfs: missing 'workdir'
[  202.972153][ T5473] loop3: detected capacity change from 0 to 1024
[  203.057425][ T5473] hfsplus: unable to parse mount options
[  203.074893][ T5472] loop4: detected capacity change from 0 to 128
[  203.107167][ T5472] FAT-fs (loop4): Directory bread(block 524322) failed
[  203.114683][ T5472] FAT-fs (loop4): Directory bread(block 524323) failed
[  203.122190][ T5472] FAT-fs (loop4): Directory bread(block 524324) failed
[  203.129852][ T5472] FAT-fs (loop4): Directory bread(block 524325) failed
[  203.137294][ T5472] FAT-fs (loop4): Directory bread(block 524326) failed
[  203.144784][ T5472] FAT-fs (loop4): Directory bread(block 524327) failed
[  203.152235][ T5472] FAT-fs (loop4): Directory bread(block 524328) failed
[  203.159570][ T5472] FAT-fs (loop4): Directory bread(block 524329) failed
[  205.048859][ T5491] loop1: detected capacity change from 0 to 131072
[  205.086932][ T5491] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[  205.093833][ T5491] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  205.113669][ T5491] F2FS-fs (loop1): invalid crc value
[  205.210794][ T5491] F2FS-fs (loop1): Found nat_bits in checkpoint
[  205.356291][ T5491] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  205.363643][ T5491] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  205.412513][ T5502] loop2: detected capacity change from 0 to 64
[  205.580109][ T5031] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  205.836975][ T5031] usb 1-1: device descriptor read/64, error -71
[  206.366937][ T5031] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  207.197502][ T5510] overlayfs: overlapping lowerdir path
[  207.297742][ T5494] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  207.306146][ T5494] overlayfs: overlapping lowerdir path
[  207.341081][ T5031] usb 1-1: device descriptor read/64, error -71
[  207.477096][ T5031] usb usb1-port1: attempt power cycle
[  207.621228][ T5514] xt_CT: You must specify a L4 protocol and not use inversions on it
[  207.666622][ T5514] libceph: resolve '4' (ret=-3): failed
[  208.574458][ T4518] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  208.766905][ T4518] usb 2-1: Using ep0 maxpacket: 16
[  208.774019][ T4518] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  208.795823][ T4518] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  208.851719][ T4518] usb 2-1: config 0 interface 0 has no altsetting 0
[  208.882117][ T4518] usb 2-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice= 0.00
[  208.946956][ T4518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.224333][ T5522] loop3: detected capacity change from 0 to 32768
[  209.254095][ T5522] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  209.370283][ T4518] usb 2-1: config 0 descriptor??
[  209.402612][ T5516] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  209.741452][ T4518] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6
[  209.757150][ T4714] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  209.956342][ T5516] loop1: detected capacity change from 0 to 128
[  210.028868][ T5522] loop3: detected capacity change from 0 to 16
[  210.033642][ T4714] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  210.076732][ T3622] bcm5974 2-1:0.0: could not read from device
[  210.098039][ T5522] erofs: (device loop3): mounted with root inode @ nid 36.
[  210.222979][ T4518] usb 2-1: USB disconnect, device number 6
[  210.579344][ T5533] loop3: detected capacity change from 0 to 32768
[  210.599311][ T5533] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  210.677047][ T4516] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  210.782058][ T4714] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  210.905253][ T4516] usb 1-1: unable to get BOS descriptor or descriptor too short
[  210.923993][ T4516] usb 1-1: not running at top speed; connect to a high speed hub
[  210.969252][ T4516] usb 1-1: config 3 has an invalid interface number: 155 but max is 0
[  211.075777][ T4516] usb 1-1: config 3 has no interface number 0
[  211.120744][ T4516] usb 1-1: config 3 interface 155 altsetting 15 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  211.132465][ T4516] usb 1-1: config 3 interface 155 altsetting 15 endpoint 0x87 has invalid maxpacket 1024, setting to 64
[  211.144362][ T4516] usb 1-1: config 3 interface 155 has no altsetting 0
[  211.168528][ T4516] usb 1-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice=8e.39
[  211.202036][ T4516] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.211143][ T4516] usb 1-1: Product: syz
[  211.215461][ T4516] usb 1-1: Manufacturer: syz
[  211.220260][ T4516] usb 1-1: SerialNumber: syz
[  211.249261][ T5514] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  211.363538][ T5539] loop3: detected capacity change from 0 to 128
[  211.409026][ T5539] FAT-fs (loop3): Directory bread(block 524322) failed
[  211.417181][ T5539] FAT-fs (loop3): Directory bread(block 524323) failed
[  211.425054][ T5539] FAT-fs (loop3): Directory bread(block 524324) failed
[  211.435630][ T5539] FAT-fs (loop3): Directory bread(block 524325) failed
[  211.442963][ T5539] FAT-fs (loop3): Directory bread(block 524326) failed
[  211.450174][ T5539] FAT-fs (loop3): Directory bread(block 524327) failed
[  211.457406][ T5539] FAT-fs (loop3): Directory bread(block 524328) failed
[  211.464813][ T5539] FAT-fs (loop3): Directory bread(block 524329) failed
[  211.888566][ T5540] loop2: detected capacity change from 0 to 1024
[  211.901893][ T5540] hfsplus: unable to parse mount options
[  212.317101][ T4516] appletouch 1-1:3.155: Failed to read mode from device.
[  212.324331][ T4516] appletouch: probe of 1-1:3.155 failed with error -5
[  212.495145][ T4516] usb 1-1: USB disconnect, device number 6
[  212.667751][ T5550] device netdevsim0 entered promiscuous mode
[  213.117283][ T5556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'.
[  213.659940][ T5553] loop3: detected capacity change from 0 to 4096
[  213.755698][ T5558] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  214.717676][ T5561] overlayfs: overlapping lowerdir path
[  214.801354][ T5551] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  214.809710][ T5551] overlayfs: overlapping lowerdir path
[  216.368234][ T5571] netlink: 220 bytes leftover after parsing attributes in process `syz.3.293'.
[  216.379858][ T5571] tc_dump_action: action bad kind
[  217.883263][ T5572] vivid-002: kernel_thread() failed
[  217.967554][ T5576] capability: warning: `syz.4.295' uses deprecated v2 capabilities in a way that may be insecure
[  218.014602][ T5580] xt_CT: You must specify a L4 protocol and not use inversions on it
[  218.025258][ T5580] libceph: resolve '4' (ret=-3): failed
[  218.672299][ T5586] loop4: detected capacity change from 0 to 32768
[  218.684741][ T5586] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  219.005656][ T4711] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  219.414007][ T5583] loop1: detected capacity change from 0 to 1024
[  219.421454][ T5583] hfsplus: unable to parse mount options
[  219.469625][ T4714] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  219.555357][ T5593] loop2: detected capacity change from 0 to 4096
[  219.700439][ T5594] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  220.196154][ T5599] loop4: detected capacity change from 0 to 128
[  220.249492][ T5599] FAT-fs (loop4): Directory bread(block 524322) failed
[  220.256419][ T5599] FAT-fs (loop4): Directory bread(block 524323) failed
[  220.320407][ T5599] FAT-fs (loop4): Directory bread(block 524324) failed
[  220.395166][ T5599] FAT-fs (loop4): Directory bread(block 524325) failed
[  220.567008][ T4516] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  220.601033][ T5599] FAT-fs (loop4): Directory bread(block 524326) failed
[  220.853986][ T5599] FAT-fs (loop4): Directory bread(block 524327) failed
[  220.871667][ T5599] FAT-fs (loop4): Directory bread(block 524328) failed
[  220.910917][ T5599] FAT-fs (loop4): Directory bread(block 524329) failed
[  221.105580][ T5605] loop0: detected capacity change from 0 to 32768
[  221.113540][ T5605] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  221.134266][ T4516] usb 4-1: unable to get BOS descriptor or descriptor too short
[  221.153236][ T4516] usb 4-1: not running at top speed; connect to a high speed hub
[  221.164653][ T4516] usb 4-1: config 3 has an invalid interface number: 155 but max is 0
[  221.177101][ T4516] usb 4-1: config 3 has no interface number 0
[  221.193146][ T4516] usb 4-1: config 3 interface 155 altsetting 15 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  221.221567][ T4516] usb 4-1: config 3 interface 155 altsetting 15 endpoint 0x87 has invalid maxpacket 1024, setting to 64
[  221.243308][ T4516] usb 4-1: config 3 interface 155 has no altsetting 0
[  221.337290][ T4711] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  221.548738][ T5605] loop0: detected capacity change from 0 to 16
[  221.584902][ T5605] erofs: (device loop0): mounted with root inode @ nid 36.
[  221.744785][ T4516] usb 4-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice=8e.39
[  221.782222][ T4516] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.577471][ T5612] overlayfs: overlapping lowerdir path
[  222.677665][ T5597] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  222.685967][ T5597] overlayfs: overlapping lowerdir path
[  222.890132][ T4516] usb 4-1: can't set config #3, error -71
[  222.897841][ T4516] usb 4-1: USB disconnect, device number 9
[  224.948492][ T5625] vivid-001: kernel_thread() failed
[  226.510801][ T5636] loop3: detected capacity change from 0 to 1024
[  226.536444][ T5636] hfsplus: unable to parse mount options
[  226.873407][ T5642] loop4: detected capacity change from 0 to 32768
[  226.937257][ T5642] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  227.409496][ T5644] loop2: detected capacity change from 0 to 32768
[  228.122278][ T5644] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  228.684229][ T4277] ocfs2: Unmounting device (7,2) on (node local)
[  229.485023][ T5652] xt_CT: You must specify a L4 protocol and not use inversions on it
[  229.581192][ T5652] libceph: resolve '4' (ret=-3): failed
[  229.703440][ T4714] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  230.888292][ T4313] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  231.117306][ T4313] usb 1-1: Using ep0 maxpacket: 8
[  231.144521][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.231318][ T4313] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  231.328786][ T4313] usb 1-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00
[  231.427870][ T4313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.581267][ T4313] usb 1-1: config 0 descriptor??
[  232.224715][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  232.286708][ T5679] trusted_key: encrypted_key: insufficient parameters specified
[  232.905227][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  232.912205][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  232.921236][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  232.947082][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  232.953965][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  232.991343][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.006917][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.070589][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.111894][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.146959][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.154707][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.209282][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.306977][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.316193][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.323354][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.330277][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.338306][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.345067][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.352266][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.359249][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.367073][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.374494][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.381567][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.389001][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.396957][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.403929][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.411010][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.418040][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.424992][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.432040][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.439141][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.446309][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.453339][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.461087][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.468139][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.475223][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.482383][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.490063][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.497120][ T4313] nti 0003:0757:0A00.0001: unknown main item tag 0x0
[  233.555893][ T4313] nti 0003:0757:0A00.0001: hidraw0: USB HID v0.04 Device [HID 0757:0a00] on usb-dummy_hcd.0-1/input0
[  233.605413][ T4313] usb 1-1: USB disconnect, device number 7
[  234.420713][ T5663] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  234.596462][ T5690] loop2: detected capacity change from 0 to 32768
[  234.609789][ T5690] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  234.633593][ T5663] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  234.648568][ T5663] ovl_remap_lower_ino: 8 callbacks suppressed
[  234.648581][ T5663] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[  234.662865][ T5663] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3)
[  234.672495][ T5663] overlayfs: d_ino too big (54, ino=9223372036854776132, xinobits=3)
[  234.680854][ T5663] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3)
[  234.689752][ T5663] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3)
[  234.698727][ T5663] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3)
[  234.707065][ T5663] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3)
[  234.715700][ T5663] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3)
[  234.724412][ T5663] overlayfs: d_ino too big (dev, ino=4611686018427387909, xinobits=3)
[  234.732822][ T5663] overlayfs: d_ino too big (kernel, ino=4611686018427389230, xinobits=3)
[  235.127167][ T4275] Bluetooth: hci0: command 0x0401 tx timeout
[  235.795144][ T5687] fido_id[5687]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  238.531628][ T4714] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  239.187096][ T5722] loop0: detected capacity change from 0 to 32768
[  239.234224][ T5722] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  241.144977][ T5734] xt_CT: You must specify a L4 protocol and not use inversions on it
[  241.197152][ T4275] Bluetooth: hci0: command 0x0401 tx timeout
[  241.207144][ T5734] libceph: resolve '4' (ret=-3): failed
[  241.393849][ T5711] loop2: detected capacity change from 0 to 4096
[  242.370952][ T4711] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  242.552590][ T5711] EXT4-fs (loop2): Test dummy encryption mode enabled
[  243.136874][ T4600] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  243.151225][ T5750] random: crng reseeded on system resumption
[  244.331686][ T5741] loop0: detected capacity change from 0 to 1024
[  244.339281][ T5741] hfsplus: unable to parse mount options
[  244.390810][ T5711] EXT4-fs: failed to create workqueue
[  244.511749][ T5711] EXT4-fs (loop2): mount failed
[  244.653515][ T5746] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  244.662398][ T5746] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  244.679773][ T5746] ovl_remap_lower_ino: 8 callbacks suppressed
[  244.679787][ T5746] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[  244.694009][ T5746] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3)
[  244.702815][ T5746] overlayfs: d_ino too big (66, ino=9223372036854776188, xinobits=3)
[  244.711380][ T5746] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3)
[  244.720287][ T5746] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3)
[  244.729356][ T5746] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3)
[  244.737913][ T5746] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3)
[  244.746725][ T5746] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3)
[  244.755735][ T5746] overlayfs: d_ino too big (dev, ino=4611686018427387909, xinobits=3)
[  244.764213][ T5746] overlayfs: d_ino too big (kernel, ino=4611686018427389230, xinobits=3)
[  245.830353][ T5770] loop0: detected capacity change from 0 to 64
[  245.946875][ T4313] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  246.707623][ T5776] loop3: detected capacity change from 0 to 131072
[  246.757037][ T5776] F2FS-fs (loop3): invalid crc value
[  246.894171][ T5776] F2FS-fs (loop3): Found nat_bits in checkpoint
[  246.925477][ T5776] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  246.934181][ T5776] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  246.951205][ T4313] usb 3-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72
[  246.960476][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.970600][ T4313] usb 3-1: Product: syz
[  246.974938][ T4313] usb 3-1: Manufacturer: syz
[  246.979974][ T4313] usb 3-1: SerialNumber: syz
[  246.987527][ T4313] usb 3-1: config 0 descriptor??
[  247.522711][ T4313] usb 3-1: selecting invalid altsetting 1
[  247.528914][ T4313] comedi comedi5: could not switch to alternate setting 1
[  247.536389][ T4313] usbduxfast 3-1:0.0: driver 'usbduxfast' failed to auto-configure device.
[  247.552024][ T4313] usb 3-1: USB disconnect, device number 7
[  249.531126][ T5804] loop0: detected capacity change from 0 to 1024
[  249.538773][ T5804] hfsplus: unable to parse mount options
[  249.600214][ T4714] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  249.707095][ T5809] libceph: resolve '4' (ret=-3): failed
[  250.889585][ T5821] loop1: detected capacity change from 0 to 64
[  253.925393][ T5836] loop2: detected capacity change from 0 to 131072
[  253.981008][ T5836] F2FS-fs (loop2): invalid crc value
[  253.997052][ T4313] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  254.094536][ T5836] F2FS-fs (loop2): Found nat_bits in checkpoint
[  254.161357][ T5836] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[  254.186851][ T4313] usb 2-1: Using ep0 maxpacket: 32
[  254.194239][ T4313] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  254.204760][ T5836] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  254.213842][ T4313] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  254.224535][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.236684][ T4313] usb 2-1: config 0 descriptor??
[  254.577631][ T4597] usb 2-1: USB disconnect, device number 7
[  254.754756][ T5823] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  255.146212][ T5845] loop4: detected capacity change from 0 to 32768
[  255.842866][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  255.849410][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  255.924873][ T5845] XFS (loop4): Mounting V5 Filesystem
[  256.017914][ T5854] loop3: detected capacity change from 0 to 512
[  256.092077][ T5854] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  256.116362][ T5845] XFS (loop4): Ending clean mount
[  256.295833][ T5854] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.372: bg 0: block 4: invalid block bitmap
[  256.309901][ T5867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'.
[  256.378310][ T4271] XFS (loop4): Unmounting Filesystem
[  256.448199][ T5854] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  256.544571][ T5854] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.372: invalid indirect mapped block 1 (level 1)
[  256.680163][ T5854] EXT4-fs (loop3): 1 truncate cleaned up
[  256.685912][ T5854] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  256.760003][ T5874] xt_CT: You must specify a L4 protocol and not use inversions on it
[  256.868536][ T5874] libceph: resolve '4' (ret=-3): failed
[  257.981996][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'.
[  259.725906][ T4269] EXT4-fs (loop3): unmounting filesystem.
[  260.412154][ T5892] loop4: detected capacity change from 0 to 131072
[  260.434064][ T5892] F2FS-fs (loop4): invalid crc value
[  260.586880][ T5892] F2FS-fs (loop4): Found nat_bits in checkpoint
[  260.621280][ T5892] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  260.666176][ T5892] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  261.306954][ T4516] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  261.329621][ T5905] securityfs: Unknown parameter ''
[  263.546839][ T4516] usb 4-1: Using ep0 maxpacket: 32
[  263.895909][ T4516] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  263.907522][ T4516] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  263.916634][ T4516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.927355][ T4516] usb 4-1: config 0 descriptor??
[  264.717553][ T5907] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  264.817894][ T5907] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  264.918875][ T5907] ovl_remap_lower_ino: 8 callbacks suppressed
[  264.918891][ T5907] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[  264.933393][ T5907] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3)
[  264.941703][ T5907] overlayfs: d_ino too big (63, ino=9223372036854776181, xinobits=3)
[  264.950057][ T5907] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3)
[  264.958945][ T5907] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3)
[  264.968005][ T5907] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3)
[  264.976524][ T5907] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3)
[  264.985343][ T5907] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3)
[  264.993909][ T5907] overlayfs: d_ino too big (dev, ino=4611686018427387909, xinobits=3)
[  265.002386][ T5907] overlayfs: d_ino too big (kernel, ino=4611686018427389230, xinobits=3)
[  265.231664][ T5912] device syzkaller0 entered promiscuous mode
[  265.242029][ T4512] usb 4-1: USB disconnect, device number 10
[  267.398427][ T5927] loop0: detected capacity change from 0 to 64
[  267.643298][ T5931] random: crng reseeded on system resumption
[  268.172261][ T5925] loop1: detected capacity change from 0 to 1024
[  269.038233][ T5934] loop0: detected capacity change from 0 to 131072
[  269.072337][ T5934] F2FS-fs (loop0): Invalid log sectorsize (67108873)
[  269.079289][ T5934] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  269.088517][ T5934] F2FS-fs (loop0): invalid crc value
[  269.565525][ T5925] hfsplus: unable to parse mount options
[  269.638166][ T5934] F2FS-fs (loop0): Found nat_bits in checkpoint
[  269.674155][ T5934] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  269.681596][ T5934] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  272.377616][ T5954] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  272.477839][ T5954] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  272.562563][ T5954] ovl_remap_lower_ino: 8 callbacks suppressed
[  272.562577][ T5954] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[  272.576797][ T5954] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3)
[  272.585056][ T5954] overlayfs: d_ino too big (77, ino=9223372036854776242, xinobits=3)
[  272.593476][ T5954] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3)
[  272.602354][ T5954] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3)
[  272.612493][ T5954] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3)
[  272.620873][ T5954] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3)
[  272.629810][ T5954] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3)
[  272.638671][ T5954] overlayfs: d_ino too big (dev, ino=4611686018427387909, xinobits=3)
[  272.647301][ T5954] overlayfs: d_ino too big (kernel, ino=4611686018427389230, xinobits=3)
[  272.799122][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'.
[  273.087049][ T4512] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  273.233888][ T5960] loop2: detected capacity change from 0 to 512
[  273.290447][ T5960] EXT4-fs: Ignoring removed orlov option
[  273.317029][ T4512] usb 2-1: Using ep0 maxpacket: 8
[  273.329081][ T4512] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  273.332165][ T5960] EXT4-fs (loop2): Test dummy encryption mode enabled
[  273.372661][ T4512] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  273.401247][ T4512] usb 2-1: Product: syz
[  273.416549][ T5960] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  273.421874][ T4512] usb 2-1: Manufacturer: syz
[  273.446986][ T4313] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  273.485338][ T4512] usb 2-1: SerialNumber: syz
[  273.515001][ T4512] usb 2-1: config 0 descriptor??
[  273.538710][ T5960] EXT4-fs (loop2): 1 truncate cleaned up
[  273.544599][ T5960] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  273.556962][ T4512] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  273.646957][ T4313] usb 5-1: Using ep0 maxpacket: 32
[  273.831956][ T4313] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  274.057690][ T5969] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  274.070329][ T4512] gspca_zc3xx: reg_w_i err -110
[  274.075526][ T4512] gspca_zc3xx: probe of 2-1:0.0 failed with error -110
[  274.088097][ T5969] EXT4-fs (loop2): re-mounted. Quota mode: none.
[  275.556505][ T4313] usb 5-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  275.753281][ T4313] usb 5-1: config 0 interface 0 has no altsetting 0
[  275.822205][ T4313] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  275.909652][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.076866][   T48] Bluetooth: hci4: command 0x0405 tx timeout
[  276.091619][ T4313] usb 5-1: config 0 descriptor??
[  276.184878][ T4512] usb 2-1: USB disconnect, device number 8
[  276.456969][ T5031] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  276.692830][ T5031] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  276.795215][ T5031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.100606][ T5031] usb 4-1: config 0 descriptor??
[  277.415284][ T5031] gspca_main: cpia1-2.14.0 probing 0813:0001
[  277.664345][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  277.694907][ T4313] usb 5-1: can't set config #0, error -71
[  277.737835][ T5031] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[  277.807184][ T4313] usb 5-1: USB disconnect, device number 4
[  278.957347][ T5031] gspca_cpia1: usb_control_msg 02, error -110
[  278.980481][ T5031] gspca_cpia1: usb_control_msg 05, error -32
[  279.127358][ T5031] gspca_cpia1: usb_control_msg 05, error -32
[  279.259868][ T5031] gspca_cpia1: usb_control_msg 05, error -32
[  279.419327][ T5031] gspca_cpia1: usb_control_msg 05, error -32
[  279.525884][ T5031] cpia1 4-1:0.0: unexpected systemstate: 00
[  279.851909][ T5977] device syzkaller0 entered promiscuous mode
[  280.229533][ T4888] usb 4-1: USB disconnect, device number 11
[  281.132975][ T5985] loop4: detected capacity change from 0 to 1024
[  281.187883][ T5985] hfsplus: unable to parse mount options
[  281.977514][ T5992] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  282.077807][ T5992] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  282.183643][ T5992] ovl_remap_lower_ino: 8 callbacks suppressed
[  282.183658][ T5992] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[  282.198032][ T5992] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3)
[  282.206264][ T5992] overlayfs: d_ino too big (79, ino=9223372036854776254, xinobits=3)
[  282.214546][ T5992] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3)
[  282.224109][ T5992] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3)
[  282.233238][ T5992] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3)
[  282.242460][ T5992] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3)
[  282.251373][ T5992] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3)
[  282.260266][ T5992] overlayfs: d_ino too big (dev, ino=4611686018427387909, xinobits=3)
[  282.268771][ T5992] overlayfs: d_ino too big (kernel, ino=4611686018427389230, xinobits=3)
[  282.359628][ T4711] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  282.996886][ T4313] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  283.186943][ T4313] usb 5-1: Using ep0 maxpacket: 8
[  283.195950][ T4313] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  283.236148][ T4313] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  283.266552][ T4313] usb 5-1: Product: syz
[  283.271212][ T4313] usb 5-1: Manufacturer: syz
[  283.275864][ T4313] usb 5-1: SerialNumber: syz
[  283.309489][ T4313] usb 5-1: config 0 descriptor??
[  283.338503][ T4313] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  283.721708][ T6004] loop3: detected capacity change from 0 to 512
[  283.780915][ T6004] EXT4-fs: Ignoring removed orlov option
[  283.849081][ T6009] random: crng reseeded on system resumption
[  284.036880][ T4337] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  284.247285][ T4313] gspca_zc3xx: reg_w_i err -110
[  284.252886][ T4313] gspca_zc3xx: probe of 5-1:0.0 failed with error -110
[  284.537411][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'.
[  285.576920][ T4337] usb 2-1: Using ep0 maxpacket: 32
[  285.584267][ T4337] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  285.620844][ T6004] EXT4-fs (loop3): Test dummy encryption mode enabled
[  285.636857][ T4337] usb 2-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  285.689641][ T6004] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  285.718119][ T4337] usb 2-1: config 0 interface 0 has no altsetting 0
[  285.739781][ T6012] device hsr_slave_1 left promiscuous mode
[  285.755775][ T4337] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  285.796078][ T4337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.824486][ T4337] usb 2-1: config 0 descriptor??
[  285.843768][ T6004] EXT4-fs (loop3): 1 truncate cleaned up
[  285.855015][ T6004] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  285.886232][ T4337] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  286.188999][ T4313] usb 5-1: USB disconnect, device number 5
[  286.403759][ T6029] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  287.505084][ T5031] usb 2-1: USB disconnect, device number 9
[  287.527345][ T6029] EXT4-fs (loop3): re-mounted. Quota mode: none.
[  287.704580][ T4269] EXT4-fs (loop3): unmounting filesystem.
[  288.177117][ T4512] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  288.391347][ T4512] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  288.447569][ T4512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.602918][ T4512] usb 5-1: config 0 descriptor??
[  288.715189][ T4512] gspca_main: cpia1-2.14.0 probing 0813:0001
[  289.373919][ T4512] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[  289.684658][ T6045] loop0: detected capacity change from 0 to 1024
[  289.747653][ T6045] hfsplus: unable to parse mount options
[  290.637920][ T4512] gspca_cpia1: usb_control_msg 02, error -110
[  290.650584][ T4512] gspca_cpia1: usb_control_msg 05, error -32
[  290.734961][ T4512] gspca_cpia1: usb_control_msg 05, error -32
[  290.893252][ T4512] gspca_cpia1: usb_control_msg 05, error -32
[  291.014029][ T4512] gspca_cpia1: usb_control_msg 05, error -32
[  291.132344][ T4512] cpia1 5-1:0.0: unexpected systemstate: 00
[  291.618706][ T6047] binder: 6046:6047 ioctl 4018620d 0 returned -22
[  293.853898][ T4889] usb 5-1: USB disconnect, device number 6
[  295.705965][ T6073] random: crng reseeded on system resumption
[  295.776978][ T4889] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  295.986841][ T4889] usb 5-1: Using ep0 maxpacket: 8
[  296.031874][ T4889] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  296.047381][ T4889] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  296.057385][ T4889] usb 5-1: Product: syz
[  296.063377][ T4889] usb 5-1: Manufacturer: syz
[  296.276916][ T6082] loop2: detected capacity change from 0 to 1024
[  296.304086][ T6082] hfsplus: unable to parse mount options
[  296.791026][ T4889] usb 5-1: SerialNumber: syz
[  296.830919][ T4889] usb 5-1: config 0 descriptor??
[  296.844780][ T4889] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  297.310200][ T6086] loop0: detected capacity change from 0 to 32768
[  297.321318][ T6086] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  297.357234][ T4889] gspca_zc3xx: reg_w_i err -110
[  297.371517][ T4889] gspca_zc3xx: probe of 5-1:0.0 failed with error -110
[  297.723382][ T4889] usb 5-1: USB disconnect, device number 7
[  298.329765][ T6094] loop2: detected capacity change from 0 to 32768
[  299.135296][ T6088] loop0: detected capacity change from 0 to 128
[  299.500869][ T6094] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  299.907262][ T6088] FAT-fs (loop0): Directory bread(block 524322) failed
[  299.912725][ T4277] ocfs2: Unmounting device (7,2) on (node local)
[  299.937197][ T6088] FAT-fs (loop0): Directory bread(block 524323) failed
[  299.952119][ T6099] netlink: 136 bytes leftover after parsing attributes in process `syz.4.436'.
[  300.197229][ T6088] FAT-fs (loop0): Directory bread(block 524324) failed
[  300.526996][ T6088] FAT-fs (loop0): Directory bread(block 524325) failed
[  300.787068][ T6088] FAT-fs (loop0): Directory bread(block 524326) failed
[  300.796626][ T6088] FAT-fs (loop0): Directory bread(block 524327) failed
[  300.805566][ T6088] FAT-fs (loop0): Directory bread(block 524328) failed
[  300.815055][ T6088] FAT-fs (loop0): Directory bread(block 524329) failed
[  301.577018][ T4255] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  302.970769][ T4255] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  303.041742][ T4255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.286035][ T4255] usb 2-1: config 0 descriptor??
[  303.537776][ T4255] gspca_main: cpia1-2.14.0 probing 0813:0001
[  303.863576][ T4255] cpia1 2-1:0.0: unexpected state after lo power cmd: 00
[  305.117439][ T4255] gspca_cpia1: usb_control_msg 02, error -110
[  305.131986][ T4255] gspca_cpia1: usb_control_msg 05, error -32
[  305.245379][ T4255] gspca_cpia1: usb_control_msg 05, error -32
[  305.546055][ T4255] gspca_cpia1: usb_control_msg 05, error -32
[  305.627543][ T4255] gspca_cpia1: usb_control_msg 05, error -32
[  305.672587][ T4255] cpia1 2-1:0.0: unexpected systemstate: 00
[  306.531224][ T4515] usb 2-1: USB disconnect, device number 10
[  306.704599][ T6126] loop0: detected capacity change from 0 to 1024
[  306.722084][ T6126] hfsplus: unable to parse mount options
[  307.040354][ T4713] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  307.086862][ T4515] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  307.286922][ T4515] usb 3-1: Using ep0 maxpacket: 8
[  307.300213][ T4515] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  307.323803][ T4515] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  307.343938][ T4515] usb 3-1: Product: syz
[  307.354080][ T4515] usb 3-1: Manufacturer: syz
[  307.364236][ T4515] usb 3-1: SerialNumber: syz
[  308.024123][ T6138] loop0: detected capacity change from 0 to 64
[  308.037750][ T4713] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  308.162327][ T4515] usb 3-1: config 0 descriptor??
[  308.179585][ T4515] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  308.520713][ T6141] loop1: detected capacity change from 0 to 2048
[  308.583622][ T6145] random: crng reseeded on system resumption
[  309.053675][ T6141] NILFS (loop1): corrupt root inode
[  309.146970][ T4515] gspca_zc3xx: reg_w_i err -110
[  309.152040][ T4515] gspca_zc3xx: probe of 3-1:0.0 failed with error -110
[  309.565340][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'.
[  309.861637][ T4515] usb 3-1: USB disconnect, device number 8
[  311.931825][ T6172] loop0: detected capacity change from 0 to 2048
[  312.091645][ T6172] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  312.176061][ T6178] loop1: detected capacity change from 0 to 32768
[  312.193241][ T6178] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  312.203506][ T6178] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  312.212311][ T6178] BTRFS info (device loop1): setting nodatacow, compression disabled
[  312.220513][ T6178] BTRFS info (device loop1): force clearing of disk cache
[  312.227711][ T6178] BTRFS info (device loop1): turning off barriers
[  312.234662][ T6178] BTRFS info (device loop1): use no compression
[  312.241045][ T6178] BTRFS info (device loop1): disabling free space tree
[  312.248304][ T6178] BTRFS info (device loop1): enabling ssd optimizations
[  312.255559][ T6178] BTRFS info (device loop1): using spread ssd allocation scheme
[  312.263269][ T6178] BTRFS info (device loop1): not using ssd optimizations
[  312.270703][ T6178] BTRFS info (device loop1): not using spread ssd allocation scheme
[  312.410308][ T6189] netlink: 136 bytes leftover after parsing attributes in process `syz.2.460'.
[  312.463367][ T6184] loop3: detected capacity change from 0 to 64
[  312.473210][ T6185] loop4: detected capacity change from 0 to 64
[  313.558178][ T6178] BTRFS info (device loop1): rebuilding free space tree
[  313.578304][ T6178] BTRFS info (device loop1): disabling free space tree
[  313.585407][ T6178] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  313.595569][ T6178] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  313.612016][ T6178] BTRFS info (device loop1): checking UUID tree
[  313.959459][ T6197] loop2: detected capacity change from 0 to 131072
[  313.982594][ T6197] F2FS-fs (loop2): invalid crc value
[  314.004360][ T6210] loop4: detected capacity change from 0 to 512
[  314.049579][ T6210] EXT4-fs: Ignoring removed orlov option
[  314.074818][ T6197] F2FS-fs (loop2): Found nat_bits in checkpoint
[  314.075276][ T4279] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  314.888059][ T6197] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[  314.923857][ T6197] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  314.957153][ T6210] EXT4-fs (loop4): Test dummy encryption mode enabled
[  315.057234][ T6210] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  315.291456][ T6210] EXT4-fs (loop4): 1 truncate cleaned up
[  315.342293][ T6210] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  315.701582][ T6232] loop0: detected capacity change from 0 to 2048
[  315.704153][ T4418] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  315.804136][ T6232] NILFS (loop0): corrupt root inode
[  315.932638][ T4418] usb 4-1: Using ep0 maxpacket: 8
[  315.960186][ T4418] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  316.051760][ T4418] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  316.091690][ T4418] usb 4-1: Product: syz
[  316.115118][ T4418] usb 4-1: Manufacturer: syz
[  316.140071][ T4418] usb 4-1: SerialNumber: syz
[  316.168842][ T4418] usb 4-1: config 0 descriptor??
[  316.202554][ T4418] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  317.086859][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'.
[  317.200211][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  317.209446][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  317.217426][ T4418] gspca_zc3xx: reg_w_i err -110
[  317.226272][ T4418] gspca_zc3xx: probe of 4-1:0.0 failed with error -110
[  318.414440][ T6251] trusted_key: encrypted_key: insufficient parameters specified
[  319.047300][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  319.188084][ T6226] device hsr_slave_1 left promiscuous mode
[  319.329106][ T6245] netlink: 136 bytes leftover after parsing attributes in process `syz.2.472'.
[  319.628283][ T4515] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  320.477311][ T6261] vivid-007: disconnect
[  320.498711][ T5031] usb 4-1: USB disconnect, device number 12
[  320.507496][ T4515] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  320.540923][ T6252] vivid-007: reconnect
[  320.551244][ T4515] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  320.634247][ T4515] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  320.664274][ T4515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.726166][ T4515] usb 1-1: config 0 descriptor??
[  320.737960][ T4515] hub 1-1:0.0: bad descriptor, ignoring hub
[  320.744362][ T4515] hub: probe of 1-1:0.0 failed with error -5
[  321.669781][ T6266] loop2: detected capacity change from 0 to 131072
[  321.694603][ T6266] F2FS-fs (loop2): invalid crc value
[  322.191099][ T6266] F2FS-fs (loop2): Found nat_bits in checkpoint
[  322.238759][ T6266] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[  322.264766][ T6266] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  322.744549][ T4888] usb 1-1: USB disconnect, device number 8
[  322.775568][ T6286] loop1: detected capacity change from 0 to 512
[  322.877276][ T6286] EXT4-fs: Ignoring removed orlov option
[  322.899373][ T6286] EXT4-fs (loop1): Test dummy encryption mode enabled
[  322.906329][ T6286] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  323.046809][ T6286] EXT4-fs (loop1): 1 truncate cleaned up
[  323.052867][ T6286] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  323.932294][ T6303] netlink: 136 bytes leftover after parsing attributes in process `syz.0.489'.
[  324.954120][ T6308] loop2: detected capacity change from 0 to 131072
[  325.085093][ T6320] loop0: detected capacity change from 0 to 512
[  325.125541][ T6319] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  325.224849][ T6320] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  325.253102][ T6319] EXT4-fs (loop1): re-mounted. Quota mode: none.
[  325.272574][ T6308] F2FS-fs (loop2): invalid crc value
[  325.390712][ T6320] EXT4-fs warning (device loop0): ext4_xattr_inode_get:506: inode #11: comm syz.0.493: EA inode hash validation failed
[  325.408701][ T6320] EXT4-fs (loop0): 1 orphan inode deleted
[  325.414663][ T6320] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  325.653096][ T6308] F2FS-fs (loop2): Found nat_bits in checkpoint
[  325.695249][ T6308] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[  325.702800][ T6308] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  325.740986][   T14] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  326.023976][ T4266] EXT4-fs (loop0): unmounting filesystem.
[  326.106903][   T14] usb 4-1: Using ep0 maxpacket: 8
[  326.125577][   T14] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  326.166898][   T14] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  326.177212][   T14] usb 4-1: Product: syz
[  326.181437][   T14] usb 4-1: Manufacturer: syz
[  326.186075][   T14] usb 4-1: SerialNumber: syz
[  326.250184][   T14] usb 4-1: config 0 descriptor??
[  326.282914][   T14] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  326.940710][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.490'.
[  327.187234][   T14] gspca_zc3xx: reg_w_i err -110
[  327.192525][   T14] gspca_zc3xx: probe of 4-1:0.0 failed with error -110
[  327.433172][   T14] usb 4-1: USB disconnect, device number 13
[  328.082987][ T6334] loop0: detected capacity change from 0 to 131072
[  328.127743][ T6334] F2FS-fs (loop0): invalid crc value
[  328.143973][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  328.179133][ T6334] F2FS-fs (loop0): Found nat_bits in checkpoint
[  328.278730][ T6334] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  328.304279][ T6334] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  328.376662][ T6344] binder: 6342:6344 ioctl 4018620d 0 returned -22
[  329.121085][ T6352] loop2: detected capacity change from 0 to 32768
[  330.520762][ T6352] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  331.064202][ T6362] netlink: 72 bytes leftover after parsing attributes in process `syz.1.503'.
[  331.118993][ T4277] ocfs2: Unmounting device (7,2) on (node local)
[  332.426355][ T6375] loop1: detected capacity change from 0 to 1024
[  332.442294][ T6375] hfsplus: unable to parse mount options
[  332.766230][ T6377] loop4: detected capacity change from 0 to 512
[  332.827564][ T6377] EXT4-fs: Ignoring removed orlov option
[  332.837403][ T4713] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  332.918097][ T6377] EXT4-fs (loop4): Test dummy encryption mode enabled
[  332.956480][ T6377] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  333.034991][ T6377] EXT4-fs (loop4): 1 truncate cleaned up
[  333.084970][ T6377] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  333.561922][ T6389] binder: 6387:6389 ioctl 4018620d 0 returned -22
[  333.806925][   T14] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  333.996927][   T14] usb 4-1: Using ep0 maxpacket: 8
[  334.013165][   T14] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  334.048351][   T14] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  334.086071][   T14] usb 4-1: Product: syz
[  334.104452][   T14] usb 4-1: Manufacturer: syz
[  334.123899][   T14] usb 4-1: SerialNumber: syz
[  334.168498][   T14] usb 4-1: config 0 descriptor??
[  334.230351][   T14] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  334.821712][ T6398] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  334.838206][ T6398] EXT4-fs (loop4): re-mounted. Quota mode: none.
[  335.126996][   T14] gspca_zc3xx: reg_w_i err -110
[  335.131990][   T14] gspca_zc3xx: probe of 4-1:0.0 failed with error -110
[  335.209631][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'.
[  336.118875][ T4598] usb 4-1: USB disconnect, device number 14
[  336.209317][ T6402] loop0: detected capacity change from 0 to 131072
[  336.237236][ T6402] F2FS-fs (loop0): Invalid log sectorsize (67108873)
[  336.244019][ T6402] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  336.254937][ T6402] F2FS-fs (loop0): invalid crc value
[  336.317188][ T6402] F2FS-fs (loop0): Found nat_bits in checkpoint
[  336.370638][ T6402] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  336.377892][ T6402] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  336.418331][ T6405] loop2: detected capacity change from 0 to 2048
[  336.552191][ T6405] NILFS (loop2): corrupt root inode
[  337.471097][ T6417] netlink: 136 bytes leftover after parsing attributes in process `syz.2.518'.
[  338.565279][ T6419] loop3: detected capacity change from 0 to 32768
[  338.666524][ T6419] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  338.920319][ T4269] ocfs2: Unmounting device (7,3) on (node local)
[  338.937120][ T6428] netlink: 72 bytes leftover after parsing attributes in process `syz.0.517'.
[  339.570828][ T6425] loop2: detected capacity change from 0 to 1024
[  339.578196][ T6425] hfsplus: unable to parse mount options
[  339.592544][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  339.625180][ T4713] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  339.769478][ T6435] binder: 6434:6435 ioctl 4018620d 0 returned -22
[  340.294129][ T6445] loop4: detected capacity change from 0 to 512
[  340.899817][ T6445] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  340.997653][ T6445] EXT4-fs warning (device loop4): ext4_xattr_inode_get:506: inode #11: comm syz.4.524: EA inode hash validation failed
[  341.011418][ T6445] EXT4-fs (loop4): 1 orphan inode deleted
[  341.017286][ T6445] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  341.225281][ T6452] loop3: detected capacity change from 0 to 1024
[  341.891741][ T6455] loop1: detected capacity change from 0 to 131072
[  341.920302][ T6455] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[  341.927157][ T6455] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  341.939155][ T6455] F2FS-fs (loop1): invalid crc value
[  341.957106][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  342.122541][ T6459] hfsplus: request for non-existent node 33423360 in B*Tree
[  342.130485][ T6459] hfsplus: request for non-existent node 33423360 in B*Tree
[  342.623698][ T6455] F2FS-fs (loop1): Found nat_bits in checkpoint
[  342.704107][ T6455] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  342.711359][ T6455] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  345.632408][ T6462] loop4: detected capacity change from 0 to 2048
[  345.818999][ T6462] NILFS (loop4): corrupt root inode
[  346.046701][ T6474] loop0: detected capacity change from 0 to 16
[  346.082895][ T6474] erofs: (device loop0): mounted with root inode @ nid 36.
[  346.505443][ T6483] loop2: detected capacity change from 0 to 512
[  346.865813][ T6486] loop1: detected capacity change from 0 to 32768
[  347.064679][ T6483] EXT4-fs: Ignoring removed orlov option
[  347.600890][ T6483] EXT4-fs (loop2): Test dummy encryption mode enabled
[  347.609441][ T6483] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  347.647830][ T6486] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  347.681196][ T6483] EXT4-fs (loop2): 1 truncate cleaned up
[  347.730428][ T6483] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  347.934678][ T4279] ocfs2: Unmounting device (7,1) on (node local)
[  347.945840][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.538'.
[  348.523033][ T6501] loop0: detected capacity change from 0 to 512
[  348.550346][ T6501] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  349.365260][ T6501] EXT4-fs warning (device loop0): ext4_xattr_inode_get:506: inode #11: comm syz.0.539: EA inode hash validation failed
[  349.379484][ T6501] EXT4-fs (loop0): 1 orphan inode deleted
[  349.385316][ T6501] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  349.649169][ T4266] EXT4-fs (loop0): unmounting filesystem.
[  349.784439][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'.
[  350.337729][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  350.665744][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'.
[  351.465398][ T6522] loop4: detected capacity change from 0 to 16
[  351.477767][ T6522] erofs: (device loop4): mounted with root inode @ nid 36.
[  352.067007][ T6519] loop1: detected capacity change from 0 to 131072
[  352.248639][ T6520] loop0: detected capacity change from 0 to 32768
[  352.260175][ T6519] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[  352.266999][ T6519] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  352.276538][ T6519] F2FS-fs (loop1): invalid crc value
[  352.282281][ T6520] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.544 (6520)
[  352.296997][ T6520] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  352.307455][ T6520] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  352.316227][ T6520] BTRFS info (device loop0): using free space tree
[  352.331604][ T6519] F2FS-fs (loop1): Found nat_bits in checkpoint
[  352.597611][ T6539] trusted_key: encrypted_key: insufficient parameters specified
[  353.083459][ T6519] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  353.090842][ T6519] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  353.291625][ T6548] random: crng reseeded on system resumption
[  355.077090][ T6520] BTRFS error (device loop0): open_ctree failed: -12
[  355.205860][ T6561] netlink: 136 bytes leftover after parsing attributes in process `syz.0.551'.
[  355.650869][ T4714] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (4714)
[  356.327372][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'.
[  357.326963][ T4889] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  357.540667][ T4889] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  357.583282][ T4889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.639629][ T4889] usb 3-1: config 0 descriptor??
[  358.847027][ T4889] gspca_main: cpia1-2.14.0 probing 0813:0001
[  359.137322][ T4889] cpia1 3-1:0.0: unexpected state after lo power cmd: 00
[  359.535162][ T6582] binder: 6581:6582 ioctl 4018620d 0 returned -22
[  360.398161][ T4889] gspca_cpia1: usb_control_msg 02, error -110
[  360.421187][ T4889] gspca_cpia1: usb_control_msg 05, error -32
[  360.540924][ T4889] gspca_cpia1: usb_control_msg 05, error -32
[  360.659296][ T4889] gspca_cpia1: usb_control_msg 05, error -32
[  360.798926][ T4889] gspca_cpia1: usb_control_msg 05, error -32
[  360.917850][ T4889] cpia1 3-1:0.0: unexpected systemstate: 00
[  361.102882][ T6586] loop4: detected capacity change from 0 to 64
[  361.173448][ T6589] random: crng reseeded on system resumption
[  362.269164][ T6594] loop1: detected capacity change from 0 to 32768
[  362.306967][ T6594] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  362.317584][ T6594] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  362.326363][ T6594] BTRFS info (device loop1): using free space tree
[  362.357306][  T127] usb 3-1: USB disconnect, device number 9
[  362.783317][ T6608] loop2: detected capacity change from 0 to 32768
[  363.170298][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'.
[  363.241670][ T6594] BTRFS info (device loop1): enabling ssd optimizations
[  363.446426][ T6608] XFS (loop2): Mounting V5 Filesystem
[  363.534206][ T6608] XFS (loop2): Ending clean mount
[  363.609693][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  363.609709][   T26] audit: type=1800 audit(2000000015.110:18): pid=6608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.563" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  364.551323][ T6639] loop3: detected capacity change from 0 to 64
[  365.577168][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'.
[  365.838200][ T4279] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  365.997284][ T6650] binder: 6649:6650 ioctl 4018620d 0 returned -22
[  366.255912][ T4711] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop1 scanned by udevd (4711)
[  366.432270][ T4277] XFS (loop2): Unmounting Filesystem
[  367.107044][ T4307] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  367.352772][ T4307] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  367.426491][ T4307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.664419][ T4307] usb 1-1: config 0 descriptor??
[  367.855126][ T4307] gspca_main: cpia1-2.14.0 probing 0813:0001
[  368.192812][ T4307] cpia1 1-1:0.0: unexpected state after lo power cmd: 00
[  369.438441][ T4307] gspca_cpia1: usb_control_msg 02, error -110
[  369.455878][ T4307] gspca_cpia1: usb_control_msg 05, error -32
[  369.551016][ T4307] gspca_cpia1: usb_control_msg 05, error -32
[  369.645705][ T4307] gspca_cpia1: usb_control_msg 05, error -32
[  369.738029][ T4307] gspca_cpia1: usb_control_msg 05, error -32
[  369.861236][ T4307] cpia1 1-1:0.0: unexpected systemstate: 00
[  370.297450][ T4308] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  370.507101][ T4308] usb 2-1: Using ep0 maxpacket: 32
[  370.520501][ T4308] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  370.694797][ T4308] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0
[  370.807886][ T4308] usb 2-1: config 0 interface 0 has no altsetting 0
[  370.845102][ T4308] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  370.883045][ T4308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.949713][ T4308] usb 2-1: config 0 descriptor??
[  371.240045][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'.
[  371.653663][ T4308] usbhid 2-1:0.0: can't add hid device: -71
[  371.667902][ T4308] usbhid: probe of 2-1:0.0 failed with error -71
[  371.688887][ T4308] usb 2-1: USB disconnect, device number 11
[  371.874876][ T6678] random: crng reseeded on system resumption
[  372.724690][ T4889] usb 1-1: USB disconnect, device number 9
[  373.643609][ T6697] trusted_key: encrypted_key: insufficient parameters specified
[  373.873937][ T6690] loop0: detected capacity change from 0 to 131072
[  373.917148][ T6690] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0)
[  373.926652][ T6690] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  373.935878][ T6690] F2FS-fs (loop0): invalid crc value
[  373.959260][ T6696] loop4: detected capacity change from 0 to 2048
[  374.028887][ T6690] F2FS-fs (loop0): Found nat_bits in checkpoint
[  374.122989][ T6690] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  374.130290][ T6690] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  374.160703][ T6696] NILFS (loop4): corrupt root inode
[  374.478736][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'.
[  374.605195][ T6712] loop1: detected capacity change from 0 to 2048
[  374.665724][ T6716] loop3: detected capacity change from 0 to 64
[  374.755623][ T6712] NILFS (loop1): corrupt root inode
[  377.346950][ T4308] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  377.591077][ T4308] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  377.674033][ T4308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.864920][ T4308] usb 3-1: config 0 descriptor??
[  378.012247][ T4308] gspca_main: cpia1-2.14.0 probing 0813:0001
[  378.352564][ T4308] cpia1 3-1:0.0: unexpected state after lo power cmd: 00
[  378.639098][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  378.649169][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  378.968462][ T6736] loop1: detected capacity change from 0 to 32768
[  379.192005][ T6736] XFS (loop1): Mounting V5 Filesystem
[  379.597861][ T4308] gspca_cpia1: usb_control_msg 02, error -110
[  379.619193][ T4308] gspca_cpia1: usb_control_msg 05, error -32
[  379.719908][ T4308] gspca_cpia1: usb_control_msg 05, error -32
[  379.808685][ T4308] gspca_cpia1: usb_control_msg 05, error -32
[  379.915147][ T4308] gspca_cpia1: usb_control_msg 05, error -32
[  380.030124][ T4308] cpia1 3-1:0.0: unexpected systemstate: 00
[  380.211014][ T6736] XFS (loop1): Ending clean mount
[  380.425097][   T26] audit: type=1800 audit(2000000031.920:19): pid=6737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.593" name="file1" dev="loop1" ino=6150 res=0 errno=0
[  381.351495][ T6753] trusted_key: encrypted_key: insufficient parameters specified
[  382.107144][ T4307] usb 3-1: USB disconnect, device number 10
[  382.576956][ T6755] netlink: 220 bytes leftover after parsing attributes in process `syz.4.595'.
[  382.607049][ T6755] tc_dump_action: action bad kind
[  382.638206][ T4279] XFS (loop1): Unmounting Filesystem
[  383.897853][ T6771] loop0: detected capacity change from 0 to 64
[  383.921342][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.601'.
[  385.063029][ T6783] loop3: detected capacity change from 0 to 131072
[  385.086225][ T6783] F2FS-fs (loop3): invalid crc value
[  385.314517][ T6783] F2FS-fs (loop3): Found nat_bits in checkpoint
[  385.572717][ T6793] loop1: detected capacity change from 0 to 32768
[  386.694499][ T6783] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  386.992372][ T6783] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  387.050685][ T6793] XFS (loop1): Mounting V5 Filesystem
[  387.386850][ T4307] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  388.790335][ T4307] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  388.862738][ T4307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.074163][ T4307] usb 3-1: config 0 descriptor??
[  389.223273][ T4307] gspca_main: cpia1-2.14.0 probing 0813:0001
[  389.324233][ T6793] XFS (loop1): Ending clean mount
[  389.380252][ T4279] XFS (loop1): Unmounting Filesystem
[  389.566176][ T4307] cpia1 3-1:0.0: unexpected state after lo power cmd: 00
[  390.476234][ T6815] netlink: 220 bytes leftover after parsing attributes in process `syz.4.609'.
[  390.649266][ T6815] tc_dump_action: action bad kind
[  390.797907][ T4307] gspca_cpia1: usb_control_msg 02, error -110
[  390.813000][ T4307] gspca_cpia1: usb_control_msg 05, error -32
[  390.916341][ T4307] gspca_cpia1: usb_control_msg 05, error -32
[  391.025932][ T4307] gspca_cpia1: usb_control_msg 05, error -32
[  391.131230][ T4307] gspca_cpia1: usb_control_msg 05, error -32
[  391.176850][ T4307] cpia1 3-1:0.0: unexpected systemstate: 00
[  392.013559][ T6826] loop4: detected capacity change from 0 to 8192
[  392.023757][ T6831] loop1: detected capacity change from 0 to 64
[  392.084267][ T4888] usb 3-1: USB disconnect, device number 11
[  392.336023][ T6834] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  394.331610][ T6848] loop4: detected capacity change from 0 to 32768
[  394.491270][ T6848] XFS (loop4): Mounting V5 Filesystem
[  395.355176][ T6850] loop3: detected capacity change from 0 to 131072
[  395.371187][ T6850] F2FS-fs (loop3): invalid crc value
[  395.568284][ T6850] F2FS-fs (loop3): Found nat_bits in checkpoint
[  395.621067][ T6850] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  395.686915][ T6848] XFS (loop4): Ending clean mount
[  395.697118][ T6850] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  395.730340][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  395.742218][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  395.753165][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  395.837882][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  395.845574][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  395.852971][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  396.517040][   T26] audit: type=1800 audit(2000000003.360:20): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.620" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  397.140867][ T4271] XFS (loop4): Unmounting Filesystem
[  397.376185][ T6865] chnl_net:caif_netlink_parms(): no params data found
[  397.461633][ T6876] loop2: detected capacity change from 0 to 164
[  397.831400][ T6865] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.887038][ T6876] iso9660: Corrupted directory entry in block 2 of inode 1792
[  397.907329][ T6865] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.915702][ T6865] device bridge_slave_0 entered promiscuous mode
[  397.926916][ T4275] Bluetooth: hci0: command 0x0409 tx timeout
[  397.946493][ T6876] iso9660: Corrupted directory entry in block 2 of inode 1792
[  398.027485][ T6865] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.034806][ T6865] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.072429][ T6865] device bridge_slave_1 entered promiscuous mode
[  398.191842][ T6865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  398.247383][ T6865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  398.352335][ T6865] team0: Port device team_slave_0 added
[  399.083852][ T6887] loop2: detected capacity change from 0 to 131072
[  399.137976][ T6887] F2FS-fs (loop2): invalid crc value
[  399.273878][ T6898] securityfs: Unknown parameter ''
[  399.311101][ T6865] team0: Port device team_slave_1 added
[  399.343046][ T6887] F2FS-fs (loop2): Found nat_bits in checkpoint
[  399.380647][ T6887] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[  399.413443][ T6887] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  399.996865][ T4275] Bluetooth: hci0: command 0x041b tx timeout
[  401.641764][ T6865] batman_adv: batadv0: Adding interface: batadv_slave_0
[  401.780282][ T6865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  402.077115][ T4275] Bluetooth: hci0: command 0x040f tx timeout
[  402.226760][ T6865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  402.239840][ T6865] batman_adv: batadv0: Adding interface: batadv_slave_1
[  402.247247][ T6865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  402.273329][ T6865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  403.358150][ T6909] random: crng reseeded on system resumption
[  404.156843][ T4275] Bluetooth: hci0: command 0x0419 tx timeout
[  404.178737][ T6865] device hsr_slave_0 entered promiscuous mode
[  404.308232][ T6865] device hsr_slave_1 entered promiscuous mode
[  404.341970][ T6865] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  404.377453][ T6865] Cannot create hsr debugfs directory
[  405.869753][ T6865] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  405.917798][ T6865] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  405.940476][ T6865] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  406.169016][ T6865] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  406.448785][ T6937] loop2: detected capacity change from 0 to 32768
[  406.456618][ T6937] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.639 (6937)
[  406.473631][ T6937] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  406.484398][ T6937] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  406.493276][ T6937] BTRFS info (device loop2): turning on sync discard
[  406.500490][ T6937] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  406.509969][ T6937] BTRFS info (device loop2): use zstd compression, level 3
[  406.517255][ T6937] BTRFS info (device loop2): turning on async discard
[  406.524065][ T6937] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  406.534765][ T6937] BTRFS info (device loop2): trying to use backup root at mount time
[  406.543055][ T6937] BTRFS info (device loop2): enabling auto defrag
[  406.550162][ T6937] BTRFS info (device loop2): using free space tree
[  406.797762][ T6865] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.855879][ T4402] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  406.897187][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'.
[  407.227733][ T6937] BTRFS error (device loop2): failed to load root extent
[  407.235152][ T6937] BTRFS warning (device loop2): try to load backup roots slot 1
[  407.244378][ T4384] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  407.376105][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  407.461954][ T6937] BTRFS warning (device loop2): couldn't read tree root
[  407.469602][ T6937] BTRFS warning (device loop2): try to load backup roots slot 2
[  407.481132][ T6937] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  407.493094][ T6937] BTRFS warning (device loop2): couldn't read tree root
[  407.498837][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  407.500872][ T6937] BTRFS warning (device loop2): try to load backup roots slot 3
[  407.531887][ T6965] securityfs: Unknown parameter ''
[  407.549478][ T6937] BTRFS info (device loop2): enabling ssd optimizations
[  407.557895][ T6937] BTRFS info (device loop2): rebuilding free space tree
[  407.810945][ T6865] 8021q: adding VLAN 0 to HW filter on device team0
[  408.055817][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  408.113906][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  408.231988][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.239265][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[  408.480423][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  408.631536][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  408.801706][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  408.894763][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.902061][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[  409.093869][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  409.226929][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  409.345633][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  410.258552][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  410.280655][ T6937] BTRFS info (device loop2): checking UUID tree
[  410.287203][ T6937] BTRFS warning (device loop2): failed to start uuid_rescan task
[  410.295074][ T6937] BTRFS warning (device loop2): failed to check the UUID tree: -4
[  410.439648][ T6937] BTRFS error (device loop2): open_ctree failed: -4
[  410.476500][ T6865] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  410.493597][ T6865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  410.739027][ T6977] trusted_key: encrypted_key: insufficient parameters specified
[  410.842930][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  410.931023][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  411.203106][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  411.374319][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  411.450824][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  411.460877][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  411.469744][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  411.478842][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  411.811378][ T6993] Cannot find del_set index 0 as target
[  411.826175][ T6993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.649'.
[  413.522239][ T7008] random: crng reseeded on system resumption
[  414.691461][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  414.747825][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  414.760154][ T6865] 8021q: adding VLAN 0 to HW filter on device batadv0
[  416.156348][ T7016] loop4: detected capacity change from 0 to 32768
[  416.224366][ T7016] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  416.523323][ T6693] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  416.534201][ T6559] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  416.625059][ T7028] loop1: detected capacity change from 0 to 32768
[  416.685086][ T7028] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  416.703498][ T7028] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  416.715506][ T7022] loop2: detected capacity change from 0 to 40427
[  416.732964][ T6559] usb 4-1: Using ep0 maxpacket: 16
[  416.744364][ T7022] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[  416.755622][ T7028] BTRFS info (device loop1): setting nodatacow, compression disabled
[  416.764607][ T4512] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  416.773352][ T7022] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  416.803235][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  416.817112][ T7028] BTRFS info (device loop1): force clearing of disk cache
[  416.824332][ T7028] BTRFS info (device loop1): turning off barriers
[  416.838624][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  416.905325][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  416.925220][ T7028] BTRFS info (device loop1): use no compression
[  416.942177][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  416.969987][ T7022] F2FS-fs (loop2): Found nat_bits in checkpoint
[  416.996903][ T7028] BTRFS info (device loop1): disabling free space tree
[  417.003875][ T7028] BTRFS info (device loop1): enabling ssd optimizations
[  417.032679][ T6865] device veth0_vlan entered promiscuous mode
[  417.052756][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  417.113963][ T7028] BTRFS info (device loop1): using spread ssd allocation scheme
[  417.138759][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  417.147163][ T7028] BTRFS info (device loop1): not using ssd optimizations
[  417.160157][ T7028] BTRFS info (device loop1): not using spread ssd allocation scheme
[  417.236973][ T4512] usb 5-1: Using ep0 maxpacket: 8
[  417.338368][ T4512] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  417.439238][ T4512] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  417.656233][ T4512] usb 5-1: Product: syz
[  417.801007][ T4512] usb 5-1: Manufacturer: syz
[  417.839931][ T7022] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  417.847280][ T7022] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  417.896215][ T6865] device veth1_vlan entered promiscuous mode
[  417.914074][ T4512] usb 5-1: SerialNumber: syz
[  417.937407][ T4512] usb 5-1: config 0 descriptor??
[  417.949294][ T4512] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  418.012413][ T7028] BTRFS info (device loop1): rebuilding free space tree
[  418.028361][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  418.039875][ T7028] BTRFS info (device loop1): disabling free space tree
[  418.047252][ T7028] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  418.059651][ T7028] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  418.073227][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  418.096253][ T6865] device veth0_macvtap entered promiscuous mode
[  418.127882][ T7028] BTRFS info (device loop1): checking UUID tree
[  418.136225][ T6865] device veth1_macvtap entered promiscuous mode
[  418.197389][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.226834][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.275153][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.306850][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.326983][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.359904][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.401681][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.446568][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.487814][ T4279] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  418.507830][ T6865] batman_adv: batadv0: Interface activated: batadv_slave_0
[  418.516527][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  418.526847][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  418.539175][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  418.570848][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  418.615837][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  418.635213][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.730533][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  418.783056][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.821091][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  418.842960][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.854675][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  418.857617][ T4512] gspca_zc3xx: reg_w_i err -110
[  418.902183][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.932342][ T4512] gspca_zc3xx: probe of 5-1:0.0 failed with error -110
[  418.942858][ T6865] batman_adv: batadv0: Interface activated: batadv_slave_1
[  418.987815][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'.
[  419.009376][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  419.025217][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  419.050158][ T6865] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  419.069735][ T6865] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  419.084481][ T6865] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  419.101410][ T6865] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  419.269942][ T6559] usb 4-1: unable to get BOS descriptor or descriptor too short
[  419.351152][ T6559] usb 4-1: unable to read config index 0 descriptor/start: -71
[  419.407641][ T6559] usb 4-1: can't read configurations, error -71
[  419.479653][ T6990] usb 5-1: USB disconnect, device number 8
[  420.559475][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.665215][ T4402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.729841][ T4275] Bluetooth: hci1: unexpected event for opcode 0x041c
[  420.987954][ T4402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.997912][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  421.016582][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.024973][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  421.081261][ T7090] loop2: detected capacity change from 0 to 2048
[  421.138300][ T7091] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  421.213016][ T7090] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12
[  421.331057][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'.
[  421.357606][ T7090] Remounting filesystem read-only
[  421.421737][ T7096] loop3: detected capacity change from 0 to 256
[  421.428811][ T7102] loop5: detected capacity change from 0 to 64
[  421.749359][ T7104] trusted_key: encrypted_key: insufficient parameters specified
[  421.820967][ T7101] bond1: (slave ip6_vti0): The slave device specified does not support setting the MAC address
[  422.115718][ T7101] bond1: (slave ip6_vti0): Error -95 calling set_mac_address
[  422.301111][ T4277] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  422.553497][ T7112] xt_CT: You must specify a L4 protocol and not use inversions on it
[  422.616955][ T7112] libceph: resolve '4' (ret=-3): failed
[  422.888716][ T7120] loop3: detected capacity change from 0 to 512
[  422.898234][ T7121] random: crng reseeded on system resumption
[  423.053760][ T7120] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  423.549688][ T7120] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  423.720519][ T7120] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.676: bg 0: block 248: padding at end of block bitmap is not set
[  423.769072][ T7120] Quota error (device loop3): write_blk: dquota write failed
[  423.867151][ T7120] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  423.906996][ T7120] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.676: Failed to acquire dquot type 1
[  424.024078][ T7120] EXT4-fs (loop3): 1 truncate cleaned up
[  424.043981][ T7120] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  424.134837][ T7120] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.676: deleted inode referenced: 12
[  424.207132][ T7120] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.676: deleted inode referenced: 12
[  424.351788][ T7108] loop4: detected capacity change from 0 to 32768
[  424.396977][ T7108] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.673 (7108)
[  424.433302][ T7108] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  424.463171][ T7108] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  424.475634][ T7108] BTRFS info (device loop4): setting nodatacow, compression disabled
[  424.494875][ T4269] EXT4-fs (loop3): unmounting filesystem.
[  424.504936][ T7108] BTRFS info (device loop4): force clearing of disk cache
[  424.538272][ T7108] BTRFS info (device loop4): turning off barriers
[  424.544886][ T7108] BTRFS info (device loop4): use no compression
[  424.553640][ T7108] BTRFS info (device loop4): disabling free space tree
[  424.561002][ T7108] BTRFS info (device loop4): enabling ssd optimizations
[  424.588056][ T7108] BTRFS info (device loop4): using spread ssd allocation scheme
[  424.596548][ T7108] BTRFS info (device loop4): not using ssd optimizations
[  424.652566][ T7108] BTRFS info (device loop4): not using spread ssd allocation scheme
[  424.697017][ T4338] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  424.929217][ T4338] usb 3-1: unable to get BOS descriptor or descriptor too short
[  424.941585][ T4338] usb 3-1: not running at top speed; connect to a high speed hub
[  424.950288][ T7108] BTRFS info (device loop4): rebuilding free space tree
[  424.982481][ T4338] usb 3-1: config 3 has an invalid interface number: 155 but max is 0
[  424.990891][ T7108] BTRFS info (device loop4): disabling free space tree
[  425.039829][ T7108] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  425.057410][ T4338] usb 3-1: config 3 has no interface number 0
[  425.086831][ T4338] usb 3-1: config 3 interface 155 altsetting 15 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  425.106775][ T7108] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  425.141010][ T4338] usb 3-1: config 3 interface 155 altsetting 15 endpoint 0x87 has invalid maxpacket 1024, setting to 64
[  425.184863][ T7108] BTRFS info (device loop4): checking UUID tree
[  425.209182][ T4338] usb 3-1: config 3 interface 155 has no altsetting 0
[  425.329107][ T4338] usb 3-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice=8e.39
[  425.471221][ T4338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.653509][ T4338] usb 3-1: Product: syz
[  425.738829][ T4338] usb 3-1: Manufacturer: syz
[  425.843094][ T4338] usb 3-1: SerialNumber: syz
[  426.220730][ T7130] loop1: detected capacity change from 0 to 32768
[  426.243764][ T7130] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.679 (7130)
[  426.313646][ T4338] usb 3-1: can't set config #3, error -71
[  426.342211][ T4338] usb 3-1: USB disconnect, device number 12
[  426.401027][ T4271] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  426.443217][ T7130] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  426.493240][ T7130] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  426.598261][ T7130] BTRFS info (device loop1): force zlib compression, level 3
[  426.610482][ T7165] securityfs: Unknown parameter ''
[  426.740629][ T7130] BTRFS info (device loop1): force clearing of disk cache
[  426.877802][ T7130] BTRFS info (device loop1): setting nodatasum
[  426.992454][ T7130] BTRFS info (device loop1): allowing degraded mounts
[  427.142880][ T7130] BTRFS info (device loop1): enabling disk space caching
[  427.325684][ T7130] BTRFS info (device loop1): disk space caching is enabled
[  428.228868][ T7130] BTRFS error (device loop1): open_ctree failed: -12
[  429.535134][ T4713] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by udevd (4713)
[  429.829288][ T7194] trusted_key: encrypted_key: insufficient parameters specified
[  430.507417][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.686'.
[  431.440748][ T7197] loop2: detected capacity change from 0 to 131072
[  431.596436][ T7203] random: crng reseeded on system resumption
[  431.771399][ T7197] F2FS-fs (loop2): invalid crc value
[  432.812004][ T7197] F2FS-fs (loop2): Found nat_bits in checkpoint
[  432.897739][ T7197] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[  432.961079][ T7197] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  437.644914][ T7253] trusted_key: encrypted_key: insufficient parameters specified
[  438.769678][ T7261] loop1: detected capacity change from 0 to 64
[  439.020782][ T7268] loop3: detected capacity change from 0 to 512
[  439.059019][ T7268] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  439.245566][ T7268] EXT4-fs warning (device loop3): ext4_xattr_inode_get:506: inode #11: comm syz.3.705: EA inode hash validation failed
[  439.260382][ T7268] EXT4-fs (loop3): 1 orphan inode deleted
[  439.266276][ T7268] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  440.009537][ T4269] EXT4-fs (loop3): unmounting filesystem.
[  440.079828][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  440.086145][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  440.762780][ T7279] loop5: detected capacity change from 0 to 32768
[  440.842639][ T7285] loop3: detected capacity change from 0 to 8
[  440.891857][ T7279] XFS (loop5): Mounting V5 Filesystem
[  440.959440][ T7279] XFS (loop5): Ending clean mount
[  441.073088][   T26] audit: type=1800 audit(2000000002.060:21): pid=7292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.708" name="file1" dev="loop5" ino=6150 res=0 errno=0
[  442.081786][ T6865] XFS (loop5): Unmounting Filesystem
[  442.370822][ T7285] syz.3.709 uses obsolete (PF_INET,SOCK_PACKET)
[  442.402491][ T7285] SQUASHFS error: Unable to read inode 0xa7
[  442.453839][ T7285] SQUASHFS error: Unable to read inode 0xa7
[  442.809004][ T7301] random: crng reseeded on system resumption
[  443.479323][ T7302] loop2: detected capacity change from 0 to 131072
[  443.508581][ T7302] F2FS-fs (loop2): invalid crc value
[  443.586133][ T7302] F2FS-fs (loop2): Found nat_bits in checkpoint
[  443.625360][ T7302] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[  443.658579][ T7302] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  444.657983][ T7311] netlink: 216 bytes leftover after parsing attributes in process `syz.3.712'.
[  444.745335][ T7311] tc_dump_action: action bad kind
[  445.716876][ T7170] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  446.857544][ T7331] loop4: detected capacity change from 0 to 512
[  446.907096][ T7331] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  446.953737][ T7170] usb 6-1: unable to get BOS descriptor or descriptor too short
[  447.463050][ T7331] EXT4-fs warning (device loop4): ext4_xattr_inode_get:506: inode #11: comm syz.4.717: EA inode hash validation failed
[  447.476311][ T7331] EXT4-fs (loop4): 1 orphan inode deleted
[  447.482398][ T7331] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  447.499563][ T7170] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  447.533905][ T7170] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  447.556046][ T7170] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  447.572343][ T7170] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.582189][ T7170] usb 6-1: Product: syz
[  447.586472][ T7170] usb 6-1: SerialNumber: syz
[  447.724442][ T7336] random: crng reseeded on system resumption
[  447.733011][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  450.070908][ T7344] loop4: detected capacity change from 0 to 32768
[  450.268230][ T7344] XFS (loop4): Mounting V5 Filesystem
[  450.384526][ T7344] XFS (loop4): Ending clean mount
[  450.842400][ T7347] loop3: detected capacity change from 0 to 131072
[  450.865394][ T7347] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[  450.872515][ T7347] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  450.915559][ T7347] F2FS-fs (loop3): invalid crc value
[  451.113892][ T7347] F2FS-fs (loop3): Found nat_bits in checkpoint
[  451.269160][ T7347] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  451.276598][ T7347] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  451.319035][   T26] audit: type=1800 audit(2000000004.380:22): pid=7360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.721" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  452.079281][ T4271] XFS (loop4): Unmounting Filesystem
[  452.168452][ T7170] usb 6-1: USB disconnect, device number 2
[  452.750243][ T7371] loop1: detected capacity change from 0 to 32768
[  452.888185][ T7371] XFS (loop1): Mounting V5 Filesystem
[  452.971243][ T7371] XFS (loop1): Ending clean mount
[  452.986174][ T7371] XFS (loop1): Quotacheck needed: Please wait.
[  453.163356][ T7371] XFS (loop1): Quotacheck: Done.
[  453.548973][ T7390] netlink: 'syz.1.718': attribute type 1 has an invalid length.
[  453.556828][ T7390] netlink: 56 bytes leftover after parsing attributes in process `syz.1.718'.
[  453.568643][   T26] audit: type=1800 audit(2000000006.680:23): pid=7390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.718" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0
[  454.002462][ T4279] XFS (loop1): Unmounting Filesystem
[  455.111184][ T7398] loop1: detected capacity change from 0 to 512
[  455.852462][ T7398] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  456.151890][ T7402] loop3: detected capacity change from 0 to 1024
[  456.165532][ T7402] hfsplus: unable to parse mount options
[  456.406583][ T7398] EXT4-fs warning (device loop1): ext4_xattr_inode_get:506: inode #11: comm syz.1.731: EA inode hash validation failed
[  456.420437][ T7398] EXT4-fs (loop1): 1 orphan inode deleted
[  456.426500][ T7398] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  456.514801][ T7406] random: crng reseeded on system resumption
[  457.338967][ T7412] fuse: Bad value for 'fd'
[  457.505210][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  457.520304][ T7412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.732'.
[  457.570039][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.732'.
[  459.848519][ T7422] loop3: detected capacity change from 0 to 2048
[  459.935925][ T7428] loop1: detected capacity change from 0 to 64
[  459.944108][ T7422] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446736377128157191, rec_len=65535, name_len=255
[  460.087266][ T7429] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446736377128157191, rec_len=65535, name_len=255
[  461.256933][ T7422] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446736377128157191, rec_len=65535, name_len=255
[  461.377517][ T7429] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446736377128157191, rec_len=65535, name_len=255
[  461.456417][ T7422] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446736377128157191, rec_len=65535, name_len=255
[  461.578489][ T7422] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446736377128157191, rec_len=65535, name_len=255
[  463.354239][ T7455] loop1: detected capacity change from 0 to 32768
[  464.031388][ T7455] XFS (loop1): Mounting V5 Filesystem
[  464.584134][ T7468] loop4: detected capacity change from 0 to 512
[  464.647409][ T7468] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  464.805844][ T7468] EXT4-fs warning (device loop4): ext4_xattr_inode_get:506: inode #11: comm syz.4.745: EA inode hash validation failed
[  464.825759][ T7468] EXT4-fs (loop4): 1 orphan inode deleted
[  464.831835][ T7468] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  465.429329][ T7455] XFS (loop1): Ending clean mount
[  466.081881][   T26] audit: type=1800 audit(2000000001.570:24): pid=7473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.748" name="file1" dev="loop1" ino=6150 res=0 errno=0
[  466.436134][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  466.698786][ T4279] XFS (loop1): Unmounting Filesystem
[  466.704623][ T7486] loop4: detected capacity change from 0 to 512
[  466.731389][ T7486] EXT4-fs: Ignoring removed orlov option
[  466.792576][ T7486] EXT4-fs (loop4): Test dummy encryption mode enabled
[  466.868610][ T7486] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  466.886552][ T7489] random: crng reseeded on system resumption
[  467.818734][ T7486] EXT4-fs (loop4): 1 truncate cleaned up
[  467.824554][ T7486] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  468.148424][ T7504] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  468.165292][ T7504] EXT4-fs (loop4): re-mounted. Quota mode: none.
[  468.460626][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  469.782844][ T7518] binder: 7517:7518 ioctl 4018620d 0 returned -22
[  470.077080][ T4275] Bluetooth: hci0: command 0x0405 tx timeout
[  472.978023][  T127] usb 2-1: new low-speed USB device number 12 using dummy_hcd
[  474.323826][  T127] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  474.385631][  T127] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  474.403118][ T7563] binder: 7562:7563 ioctl 4018620d 0 returned -22
[  474.467731][  T127] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  474.614301][  T127] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  474.750275][  T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.039357][ T7545] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  475.104624][  T127] hub 2-1:1.0: bad descriptor, ignoring hub
[  475.150839][  T127] hub: probe of 2-1:1.0 failed with error -5
[  475.277665][  T127] cdc_wdm 2-1:1.0: skipping garbage
[  475.282954][  T127] cdc_wdm 2-1:1.0: skipping garbage
[  475.323852][ T4275] Bluetooth: hci0: unexpected event 0x05 length: 101 > 4
[  475.449602][  T127] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  475.499738][  T127] cdc_wdm 2-1:1.0: Unknown control protocol
[  475.525393][   T26] audit: type=1326 audit(2000000002.830:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621419c819 code=0x7ffc0000
[  475.587749][  T127] usb 2-1: USB disconnect, device number 12
[  475.615400][   T26] audit: type=1326 audit(2000000002.830:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621419c819 code=0x7ffc0000
[  475.713977][   T26] audit: type=1326 audit(2000000002.830:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621419c819 code=0x7ffc0000
[  475.801618][   T26] audit: type=1326 audit(2000000002.840:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621419c819 code=0x7ffc0000
[  475.801624][ T4275] Bluetooth: hci3: Unable to find connection with handle 0x00c9
[  475.832652][   T26] audit: type=1326 audit(2000000002.840:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f621419c819 code=0x7ffc0000
[  475.835064][ T7577] netlink: 'syz.4.783': attribute type 2 has an invalid length.
[  475.883387][   T26] audit: type=1326 audit(2000000002.840:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621419c819 code=0x7ffc0000
[  476.001176][   T26] audit: type=1326 audit(2000000002.840:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621419c819 code=0x7ffc0000
[  476.040587][   T26] audit: type=1326 audit(2000000002.840:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621419c819 code=0x7ffc0000
[  476.070012][   T26] audit: type=1326 audit(2000000002.840:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621419c819 code=0x7ffc0000
[  476.132462][   T26] audit: type=1326 audit(2000000002.860:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f621419c819 code=0x7ffc0000
[  476.180350][    C0] 
[  476.182760][    C0] ================================
[  476.187902][    C0] WARNING: inconsistent lock state
[  476.193192][    C0] syzkaller #0 Not tainted
[  476.197708][    C0] --------------------------------
[  476.202945][    C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
[  476.209934][    C0] syz.4.783/7576 [HC0[0]:SC1[1]:HE1:SE0] takes:
[  476.216219][    C0] ffff888079fb1370 (slock-AF_PHONET/1){+.?.}-{2:2}, at: __sk_receive_skb+0x17c/0x980
[  476.226059][    C0] {SOFTIRQ-ON-W} state was registered at:
[  476.231876][    C0]   lock_acquire+0x1bb/0x4a0
[  476.236522][    C0]   _raw_spin_lock_nested+0x2e/0x40
[  476.241766][    C0]   __sk_receive_skb+0x17c/0x980
[  476.246741][    C0]   __release_sock+0x1e1/0x450
[  476.251592][    C0]   release_sock+0x5b/0x1b0
[  476.256142][    C0]   pep_sock_accept+0xcb1/0x1200
[  476.261131][    C0]   pn_socket_accept+0x126/0x360
[  476.266119][    C0]   do_accept+0x509/0x6f0
[  476.270506][    C0]   __sys_accept4+0x97/0x100
[  476.275231][    C0]   __x64_sys_accept4+0x96/0xb0
[  476.280130][    C0]   do_syscall_64+0x4c/0xa0
[  476.284729][    C0]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  476.290751][    C0] irq event stamp: 5190
[  476.294952][    C0] hardirqs last  enabled at (5190): [<ffffffff8a380f3f>] _raw_spin_unlock_irq+0x1f/0x40
[  476.304824][    C0] hardirqs last disabled at (5189): [<ffffffff8a380d06>] _raw_spin_lock_irq+0x86/0xf0
[  476.314442][    C0] softirqs last  enabled at (5184): [<ffffffff88319355>] netif_rx+0x75/0x90
[  476.323190][    C0] softirqs last disabled at (5185): [<ffffffff814f6852>] do_softirq+0x142/0x210
[  476.332269][    C0] 
[  476.332269][    C0] other info that might help us debug this:
[  476.340358][    C0]  Possible unsafe locking scenario:
[  476.340358][    C0] 
[  476.347842][    C0]        CPU0
[  476.351180][    C0]        ----
[  476.354486][    C0]   lock(slock-AF_PHONET/1);
[  476.359152][    C0]   <Interrupt>
[  476.362723][    C0]     lock(slock-AF_PHONET/1);
[  476.367532][    C0] 
[  476.367532][    C0]  *** DEADLOCK ***
[  476.367532][    C0] 
[  476.375711][    C0] 5 locks held by syz.4.783/7576:
[  476.380775][    C0]  #0: ffff8880717dd010 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  476.391250][    C0]  #1: ffff888079fb0db0 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x82/0x8f0
[  476.401082][    C0]  #2: ffffffff8cb2d5e0 (rcu_read_lock){....}-{1:2}, at: process_backlog+0x2cb/0x6f0
[  476.410651][    C0]  #3: ffff888079fb06f0 (slock-AF_PHONET){+.-.}-{2:2}, at: __sk_receive_skb+0x18b/0x980
[  476.420753][    C0]  #4: ffff888079fb0770 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x7c5/0xca0
[  476.430509][    C0] 
[  476.430509][    C0] stack backtrace:
[  476.436456][    C0] CPU: 0 PID: 7576 Comm: syz.4.783 Not tainted syzkaller #0
[  476.443788][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  476.453916][    C0] Call Trace:
[  476.457244][    C0]  <IRQ>
[  476.460151][    C0]  dump_stack_lvl+0x188/0x24e
[  476.465067][    C0]  ? show_regs_print_info+0x12/0x12
[  476.470416][    C0]  ? unwind_get_return_address+0x49/0x80
[  476.476108][    C0]  valid_state+0x13b/0x1d0
[  476.480583][    C0]  mark_lock_irq+0xa9/0x900
[  476.485145][    C0]  ? stack_trace_save+0xa6/0xf0
[  476.490061][    C0]  ? save_trace+0xb60/0xb60
[  476.494637][    C0]  ? save_trace+0x5a/0xb60
[  476.499113][    C0]  mark_lock+0x208/0x320
[  476.503419][    C0]  __lock_acquire+0xc78/0x7d10
[  476.508247][    C0]  ? mark_lock+0x94/0x320
[  476.512642][    C0]  ? verify_lock_unused+0x140/0x140
[  476.517987][    C0]  ? sk_filter_trim_cap+0x14b/0x860
[  476.523322][    C0]  lock_acquire+0x1bb/0x4a0
[  476.527879][    C0]  ? __sk_receive_skb+0x17c/0x980
[  476.532951][    C0]  ? sk_filter_trim_cap+0x14b/0x860
[  476.538296][    C0]  ? read_lock_is_recursive+0x10/0x10
[  476.543811][    C0]  ? sk_filter_trim_cap+0x537/0x860
[  476.549061][    C0]  _raw_spin_lock_nested+0x2e/0x40
[  476.554313][    C0]  ? __sk_receive_skb+0x17c/0x980
[  476.559828][    C0]  __sk_receive_skb+0x17c/0x980
[  476.564736][    C0]  ? phonet_rcv+0x7c5/0xca0
[  476.569387][    C0]  __sk_receive_skb+0x432/0x980
[  476.574354][    C0]  phonet_rcv+0x7c5/0xca0
[  476.578725][    C0]  ? qdisc_run+0x230/0x230
[  476.583173][    C0]  ? phonet_proto_unregister+0x120/0x120
[  476.588928][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  476.594962][    C0]  ? read_lock_is_recursive+0x10/0x10
[  476.600356][    C0]  ? _raw_spin_lock_irq+0xb7/0xf0
[  476.605397][    C0]  ? phonet_proto_unregister+0x120/0x120
[  476.611143][    C0]  __netif_receive_skb+0xcc/0x290
[  476.616314][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  476.621828][    C0]  ? process_backlog+0x2cb/0x6f0
[  476.626897][    C0]  process_backlog+0x38d/0x6f0
[  476.631695][    C0]  ? trigger_rx_softirq+0x60/0x60
[  476.636741][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  476.642938][    C0]  ? lock_chain_count+0x20/0x20
[  476.647829][    C0]  __napi_poll+0xc0/0x460
[  476.652284][    C0]  ? net_rx_action+0x30b/0xb20
[  476.657084][    C0]  net_rx_action+0x5dd/0xb20
[  476.661709][    C0]  ? net_tx_action+0x930/0x930
[  476.666592][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  476.672694][    C0]  ? lock_chain_count+0x20/0x20
[  476.677730][    C0]  ? sched_clock_cpu+0x6e/0x260
[  476.682699][    C0]  handle_softirqs+0x2a1/0x930
[  476.687492][    C0]  ? do_softirq+0x142/0x210
[  476.692091][    C0]  ? do_softirq+0x210/0x210
[  476.696610][    C0]  do_softirq+0x142/0x210
[  476.700977][    C0]  </IRQ>
[  476.703919][    C0]  <TASK>
[  476.706857][    C0]  ? __local_bh_enable_ip+0x1c0/0x1c0
[  476.712240][    C0]  ? lockdep_hardirqs_on_prepare+0x770/0x770
[  476.718328][    C0]  ? lockdep_hardirqs_off+0x70/0x100
[  476.723804][    C0]  ? netif_rx+0x75/0x90
[  476.728213][    C0]  __local_bh_enable_ip+0x180/0x1c0
[  476.733441][    C0]  ? _local_bh_enable+0xa0/0xa0
[  476.738412][    C0]  ? rcu_is_watching+0x11/0xa0
[  476.743226][    C0]  ? trace_netif_rx_exit+0x9b/0x230
[  476.748532][    C0]  netif_rx+0x7f/0x90
[  476.752525][    C0]  pn_send+0x553/0x7f0
[  476.756615][    C0]  pn_skb_send+0x214/0x510
[  476.761094][    C0]  pep_sock_close+0x53a/0x8f0
[  476.765804][    C0]  pn_socket_release+0x91/0xb0
[  476.770582][    C0]  sock_close+0xd5/0x240
[  476.774833][    C0]  ? sock_mmap+0x90/0x90
[  476.779092][    C0]  __fput+0x22c/0x920
[  476.783085][    C0]  task_work_run+0x1d0/0x260
[  476.787699][    C0]  ? task_work_cancel+0x220/0x220
[  476.792872][    C0]  ? exit_to_user_mode_loop+0x3b/0x110
[  476.798365][    C0]  exit_to_user_mode_loop+0xe6/0x110
[  476.803728][    C0]  exit_to_user_mode_prepare+0xee/0x180
[  476.809387][    C0]  syscall_exit_to_user_mode+0x16/0x40
[  476.814881][    C0]  do_syscall_64+0x58/0xa0
[  476.819331][    C0]  ? clear_bhb_loop+0x60/0xb0
[  476.824027][    C0]  ? clear_bhb_loop+0x60/0xb0
[  476.828750][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  476.834678][    C0] RIP: 0033:0x7f2aaa39c819
[  476.839131][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  476.858776][    C0] RSP: 002b:00007ffe5e0e5478 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  476.867211][    C0] RAX: 0000000000000000 RBX: 00007f2aaa617da0 RCX: 00007f2aaa39c819
[  476.875197][    C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  476.883180][    C0] RBP: 00007f2aaa617da0 R08: 00007f2aaa616218 R09: 0000000000000000
[  476.891181][    C0] R10: 00000000005f39dc R11: 0000000000000246 R12: 0000000000074590
[  476.899187][    C0] R13: 00007f2aaa615fac R14: 00000000000743dd R15: 00007f2aaa615fa0
[  476.907178][    C0]  </TASK>