last executing test programs:

6m2.006283432s ago: executing program 32 (id=184):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x200000c1}], 0x1, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="02"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8)

5m55.699143406s ago: executing program 33 (id=267):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
close(r0)

5m50.249332376s ago: executing program 1 (id=327):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20)
shutdown(r0, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/250, 0xfa}], 0x1}, 0x6}], 0x1, 0x140, 0x0)

5m50.142727726s ago: executing program 1 (id=329):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000001400078008000640fffffffd080008400000003f0500050002001ad20500010006"], 0x60}}, 0x0)

5m50.089343411s ago: executing program 1 (id=331):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x4000006, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @string=&(0x7f0000000040)=0xfa}})

5m50.03158759s ago: executing program 1 (id=333):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6a2, &(0x7f0000000100)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1cb)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
mount$bind(&(0x7f0000001080)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00')
read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d)

5m49.941766981s ago: executing program 1 (id=335):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1})
fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1})
close_range(r0, 0xffffffffffffffff, 0x0)

5m49.582329785s ago: executing program 1 (id=338):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4)

5m49.474039246s ago: executing program 34 (id=338):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4)

4m49.053333365s ago: executing program 4 (id=995):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000070000090500040000000000050005"], 0x34}, 0x2, 0x34005}, 0x0)

4m48.977434524s ago: executing program 4 (id=996):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000000c0)=""/111)

4m48.977082816s ago: executing program 4 (id=997):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000)

4m48.892571558s ago: executing program 4 (id=998):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

4m48.839115049s ago: executing program 4 (id=999):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x2}, 0x1)

4m48.59447579s ago: executing program 4 (id=1000):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xe, 0x7ffffffe}]})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
getgid()

4m48.493721366s ago: executing program 35 (id=1000):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xe, 0x7ffffffe}]})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
getgid()

4m42.079203846s ago: executing program 5 (id=1077):
syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x17cc, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0x20, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffb, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xd, 0x0, 0xfe, {0x7, 0x25, 0x1, 0x0, 0x1, 0x105}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xfd, 0x40, {0x7, 0x25, 0x1, 0xc, 0x10, 0x408}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})

4m40.727470247s ago: executing program 5 (id=1087):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x318, 0x11, 0x148, 0x318, 0x0, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x318, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x9, 0x3f, 0x400000, 0x20000000, 0x3, 0x7, 0x80}}}, @common=@unspec=@bpf1={{0x230}, @pinned}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0)

4m40.651566138s ago: executing program 5 (id=1089):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

4m40.577745468s ago: executing program 5 (id=1090):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0)
mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0)
umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1)

4m40.442349458s ago: executing program 5 (id=1092):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f0000000280)=0x1e)

4m40.373302019s ago: executing program 5 (id=1093):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0)

4m39.953676108s ago: executing program 36 (id=1093):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0)

4m22.446744808s ago: executing program 2 (id=1254):
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0)

4m21.606160258s ago: executing program 2 (id=1258):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040)

4m21.549815926s ago: executing program 2 (id=1259):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0xa1010, 0x0, 0x0, 0x0, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
getcwd(&(0x7f0000000340)=""/187, 0xbb)

4m21.464464386s ago: executing program 2 (id=1260):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x28a5291, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

4m21.407897412s ago: executing program 2 (id=1261):
timer_delete(0x0)

4m20.87468042s ago: executing program 2 (id=1263):
r0 = inotify_init()
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c)
close_range(r0, 0xffffffffffffffff, 0x0)

4m20.693103543s ago: executing program 37 (id=1263):
r0 = inotify_init()
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c)
close_range(r0, 0xffffffffffffffff, 0x0)

4m13.777557141s ago: executing program 7 (id=1316):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x2, 0x7ff})

4m13.548227057s ago: executing program 7 (id=1318):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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")
truncate(&(0x7f0000000000)='./file2\x00', 0x881bfd)

4m13.109077831s ago: executing program 7 (id=1321):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x301, 0x800000, 0x25dfdbfb, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40006)

4m12.900078201s ago: executing program 7 (id=1322):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x1533, &(0x7f0000006800)="$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")
rename(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000080)='.\x02\x00')
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

4m12.699348964s ago: executing program 7 (id=1323):
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

4m12.405546391s ago: executing program 7 (id=1326):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0xfffffffffffffee1}}]}, 0x38}}, 0x48000)

4m12.244771432s ago: executing program 38 (id=1326):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0xfffffffffffffee1}}]}, 0x38}}, 0x48000)

2m31.320395845s ago: executing program 8 (id=2456):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r0, 0x84, 0xd, 0x0, &(0x7f0000000080))

2m31.253971165s ago: executing program 8 (id=2457):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x2000000, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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")
lsetxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x0)

2m31.172513893s ago: executing program 8 (id=2459):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="80", 0x1}], 0x1}, 0x40c0841)
sendmsg$inet(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000100)="ca", 0x1}], 0x1}, 0x48044)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2000)

2m31.023057463s ago: executing program 8 (id=2460):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r0 = socket$kcm(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x29, 0x107, 0xfffffffe, 0x0, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x24048811}, 0xc010)

2m30.948582688s ago: executing program 8 (id=2462):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
symlink(&(0x7f000009df80)='./file0\x00', &(0x7f000009df40)='./file0\x00')

2m30.885484423s ago: executing program 8 (id=2463):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9, 0x324}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000)

2m16.324706564s ago: executing program 39 (id=2463):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9, 0x324}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000)

1m57.196485193s ago: executing program 6 (id=2798):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc)

1m57.062538216s ago: executing program 6 (id=2801):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x0)

1m56.865564583s ago: executing program 6 (id=2804):
r0 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10)
sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000005c0)='\b\x005-', 0x4}, {&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x6}], 0x2}, 0x24008004)

1m56.653105863s ago: executing program 6 (id=2806):
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1m55.705289983s ago: executing program 6 (id=2815):
mkdir(0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x1c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2)
ftruncate(r2, 0x1000006)
fcntl$addseals(r2, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000000})
socket$tipc(0x1e, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x1000000})

1m55.052409826s ago: executing program 6 (id=2822):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8)
r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
close(r4)
r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r5, 0x2007ffc)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
move_pages(0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000001680), 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0x29, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r8)
syz_emit_ethernet(0x112a, &(0x7f0000000440)=ANY=[], 0x0)
copy_file_range(r5, 0x0, r6, 0x0, 0xfffffbffa003e45f, 0x700000000000000)
sendfile(r0, r0, 0x0, 0x20fffe82)

1m54.846034744s ago: executing program 40 (id=2822):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8)
r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
close(r4)
r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r5, 0x2007ffc)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
move_pages(0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000001680), 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0x29, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r8)
syz_emit_ethernet(0x112a, &(0x7f0000000440)=ANY=[], 0x0)
copy_file_range(r5, 0x0, r6, 0x0, 0xfffffbffa003e45f, 0x700000000000000)
sendfile(r0, r0, 0x0, 0x20fffe82)

4.734955878s ago: executing program 3 (id=4219):
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0xfded}], 0x1, 0x0)

4.734662943s ago: executing program 3 (id=4220):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect(0x1, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x1a, 0x87, 0x70, 0x8, 0x10c4, 0x1601, 0x101c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x1, 0x40, 0x60}}]}}, &(0x7f0000000080)={0x0, 0x0, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f0f00010a1003"], 0x2, [{0x0, 0x0}, {0x0, 0x0}]})

2.611716176s ago: executing program 3 (id=4231):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x1, 0x10600, &(0x7f0000020cc0)="$eJzs3D1vW1UYB/DHCX2llAr1hQHElRBSItVWnb4IFlSgFSDaqqIwMIFju5Zb2zeK3cR0YYEBiYmFL8EEn4EFdlZY2FhAYqso8r0niEAlIHHjQH4/6eZ/7vG5j8+xvBzf6AawZx3Lfvm5EkfjUETMR8SRiKJdSUfhYhlPRsQzqWsuHZXU/3vH/og4HBFHJ8XLmpX00lO/3vv+i2+uPP3xd59++8FnP92YzYqB3eC5iOivlO31fpl5p8xbqb+x1i2yf24tZflC/3Y6z8tcby8XFdYbG+MaRZ7tlOPzlTvDSd7sNZqT7HRvFv0rg/INh2udjTrFBbcaq8V5q71cZHeYF9m5W85rnPLucFTWaaV67xflYzTayLK/PW6X61m5XWRzMEr9Zd281R5Pci1lerto5r1WMY/lLX/Mu96V7uDOOFtrrw67+SA7X6s/X6tfqNZX81Z71D5XbfRbF85lC53eZFh11G70L3byvNNr15p5fzFb6DSb1Xo9W7jUXu42Blm9XjtbO1M9v5hap7NXr72d9VrZwiRf7g7ujLq9YXYzX83KKxazpdrZFxazZ+vZjavXs+tvXr589fpb715659pLV19/JQ36y7SyhaUzS0vV+pnqUn1xqys/fb+0V9dfGle2dz17nO8PwL+2lf3/nP0/sE32//b/saf3/9Yf9v9sl+8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCe9cO+L18rGsfK80dT/2Op64mIOBURJyPiRETcf4D52L+p5vGIqKT2g8bv+9McvqpEUWFyzYF0HI6Ii+m49/jD/hQAAADg/+vzrz/8KGJ+0iz+vDjrCbGT0o82B6dVr/jJ55FpVTteFBtPqdqJjZJTcTIi9h37cUrVTkXE3JH3plTtH5nfFAf/EJUy5nZyNgAAwM7YvBOY2u4NAACAXeeTWU+A2Sju16b/xU/3gg+UkW4IHto4e2MGswMAAACmoTLrCQAAAAAPXbH///vn/817/h8AAAD8h5XP/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA3du7mNnEgigP4A9YL+6VFKz5a4bTaIweK2BJyTAFJN7lRQyREHeSWEiKIsCdSHHGI5DFO0O8nmRlb8Nczt+exBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoE0PxXp5t725bZqzPzST524AAACAU3bFellOxtX5j3T9V7r0JyLmETGLiGlEnOrdB/G1ljmJiF6an/p+8aaG+4gy4fibYTq+R8S/dDz9bvtfAAAAgMu13SxWEYPjtPz423VBnFN6aDPKlVc+8vmSK21Shl1nSpu+RGYxi4hi/JgpbR4R/Z//M6W9y6A2jF4NvWron7MaAADgPOqdQLbuDQAAgA/nqusC6Ea5XpvexU9rwcNqSAuC32pnAAAAwCfU67oAAAAAoHVl/2//PwAAALhs1f5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtGlXrJfbzWLVNGd/aCbP3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLM/LykYwkAQBvt/qncK3v9WSoNudeWuCgIfM4QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCuv4+R9xqexJvl22vh1PJL8u2pMXTXmrhtLL4zb57bnfwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCzPy8nAAIxGAbjW3ta7L8mL8oPevYmCDMgfCQEWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBvuvur/okhsVfVmGliyrhV1ZxVYskqseYgseWgvf3tOD94EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMUOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX2590mYiCMwuj1AAInBFACucWjBhIiBCXwkJAsuQYKoCESIlKLRtgWdiXvON7MG+w5yf2CCeYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OCsd744StKkzFlSHj4v/4+TnKR8jeP96ZTN9+pvONvm88/vY82LPF21Sdo0S5wDALC4bt4pzvP+0b9dJ9Pe1L2te1e3exn61/1+GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA27NzPSxRvHAfwZ1d3v1+7dekQBWVBQtT6A3EVL0WBBf0D3hbdRFpL1ENKEHaRLkGX7l261M1Tp/6DTl0iCuq+QUEEQRi7O2OPqbFedlZ6veCZ+TgMM88zB+E9n1EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOoL4ezqd1LoRwvPd33fD2y72Zvfb1+8dG0/Ho5PPF+JqNSxRCCDfna9XBDq6lm50Nw839h88PB+Jn+Od5y6trtyq1WnVJoVAotosMfmkBAHBoFZLRyPUfC5tTjWO5yRC2nu7M/+eiOrSZ/7eeDLyO7xXn/6GOrbC7pfl/+vrGxN/yf2llYbG0vLp2YX6hMledq94eGhsfGxwpjw6PlZrvU0reqgAAALC/YjLi/J+f3N3/PxLVoc38/+rlten4Xj3y/y5p/r/c3/+svf5/BpMEAAD4Rxw99e1rbo/juWIx3K2srCwNtbbbPw+3thlM9cD+S0ac/3sms54VAAAA0An19dyO/v9sVIc2+//vv185EV+zJ4TQl/T/L87cqc12bjldK+3/T1yq3Mj67/8zWD4AAAAd0peMuP9faH7/nz+dnpMPIQycadXJvwFsK///fDD+Jr5X/P3/SOeW2JXy5dbzSPP/xrsX8/vl/+a55RB6yxlNFgAAgEPv/2Q08v+nwubU0o/HV4u+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/s2DFKM0EUB/BJNvm+RjEgiKWFNhaigmAVsBAkHsJCFASPEBAPoOBZLLyDSOqk9AApvIHMZEfCNirIrobfDyb/R9hk3840eQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE9Nj8JGrov40pvV7fK98dvwPOakkumzN2sHccW6VW/bf856mc+T06fx3B62DpvrCQAAgMVT5Pk+hPDafTyJ2e6n+X8rXxNn/uHyrM7zfHXuz5ln/7iWHoqzjxv1ZvfphhAur64vdmt7wt9tM+ynHLxs38/vYfW6lS98VyedT/qHpkjH1h7crk67addbd6PR8b9U/v/5pwAAvmsnZ1nk30cx95psDICF1SlXmJv/i36zPQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU4T0AAP//F6aahA==")
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
sendfile(r0, r1, 0x0, 0x9)

1.561093656s ago: executing program 3 (id=4235):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x1, 0x0)
ioctl$FIONREAD(r1, 0x541b, &(0x7f00000001c0))
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x1, 0x0, 0x54c1}}, 0x28)
write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0'}, 0xb)

953.500873ms ago: executing program 0 (id=4242):
socket(0x2, 0x2, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0xeb55, 0x10000, 0x40, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)

589.601396ms ago: executing program 0 (id=4245):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

532.986639ms ago: executing program 0 (id=4247):
r0 = socket(0x2a, 0x2, 0x0)
setreuid(0xee01, 0xee01)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', 0x0})

415.703794ms ago: executing program 0 (id=4248):
r0 = socket(0x11, 0xa, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
bind$can_raw(r0, &(0x7f0000000000), 0x10)
getsockname$packet(r0, 0x0, &(0x7f0000000080))

265.797025ms ago: executing program 9 (id=4251):
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0)

265.574448ms ago: executing program 9 (id=4252):
inotify_init()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0)

245.028702ms ago: executing program 9 (id=4253):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0xb1, 0x5, 0x73, 0xffefffff}, {0x6, 0x8, 0x6}]}, 0x10)
sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="180000002e003303"], 0x18}], 0x1, 0x0, 0x0, 0x20000000}, 0x0)

177.885178ms ago: executing program 9 (id=4254):
r0 = fsopen(&(0x7f0000000140)='affs\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000100)='usrquota', &(0x7f00000002c0)='./file1\x00', 0xffffffffffffff9c)

177.456892ms ago: executing program 9 (id=4255):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000005c0)="01000000020001000003be8c5ee17688", 0x10)

114.515899ms ago: executing program 0 (id=4256):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
unshare(0x2c040480)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0xff07)

114.152794ms ago: executing program 3 (id=4257):
recvmmsg(0xffffffffffffffff, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x8b4}], 0x1, 0x100, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000540)={0x18, 0x0, {0x1, @local, 'hsr0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)

113.887707ms ago: executing program 9 (id=4258):
mknod(&(0x7f0000000180)='./bus\x00', 0x8000, 0xd01)
acct(&(0x7f00000000c0)='./bus\x00')
acct(&(0x7f0000000040)='./bus\x00')

335.188µs ago: executing program 0 (id=4259):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="040013000a00060008021100000100000600100080050000060012000000000024008100050002004000000005000200050d000005000100050000000501010005000000"], 0x60}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0)

0s ago: executing program 3 (id=4260):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20)
connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

kernel console output (not intermixed with test programs):

8235][ T6031] usb 1-1: Product: syz
[  326.151118][ T6031] usb 1-1: Manufacturer: syz
[  326.156931][ T6031] usb 1-1: SerialNumber: syz
[  326.385786][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.422123][ T6031] usb 1-1: USB disconnect, device number 5
[  326.479212][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  326.503184][T10581] Buffer I/O error on dev loop6, logical block 0, lost sync page write
[  326.603957][T10581] syz_tun (unregistering): left allmulticast mode
[  326.606697][T10581] syz_tun (unregistering): left promiscuous mode
[  326.784172][ T6475] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.864025][ T6475] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.888388][ T6467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.960662][ T6475] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.078429][ T6475] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.089277][ T5985] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  327.097637][ T5985] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  327.101590][ T5985] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  327.108067][ T5985] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  327.115016][ T5985] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  327.275145][ T6448] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  327.299895][ T6475] bridge_slave_1: left allmulticast mode
[  327.302473][ T6475] bridge_slave_1: left promiscuous mode
[  327.339260][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.348041][ T6475] bridge_slave_0: left allmulticast mode
[  327.350363][ T6475] bridge_slave_0: left promiscuous mode
[  327.353862][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.463640][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.573314][ T6448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  327.576822][ T6448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  327.580145][ T6448] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  327.583534][ T6448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.593712][ T6448] usb 1-1: config 0 descriptor??
[  327.818501][ T6448] usbhid 1-1:0.0: can't add hid device: -71
[  327.820674][ T6448] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  327.842145][ T6448] usb 1-1: USB disconnect, device number 6
[  327.879996][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.885534][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.974071][    C1] hpet: Lost 1 RTC interrupts
[  328.083657][ T6475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  328.093058][ T6475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  328.107727][ T6475] bond0 (unregistering): Released all slaves
[  328.275372][ T6031] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  328.281800][T13505] chnl_net:caif_netlink_parms(): no params data found
[  328.404127][T13505] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.406578][T13505] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.411556][T13505] bridge_slave_0: entered allmulticast mode
[  328.423316][T13505] bridge_slave_0: entered promiscuous mode
[  328.428119][T13505] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.433911][T13505] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.436348][T13505] bridge_slave_1: entered allmulticast mode
[  328.438402][ T6031] usb 1-1: Using ep0 maxpacket: 16
[  328.447696][T13505] bridge_slave_1: entered promiscuous mode
[  328.454085][ T6031] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  328.459746][ T6031] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  328.462847][ T6031] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  328.475525][ T6031] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.488303][ T6031] usb 1-1: config 0 descriptor??
[  328.493217][T13505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  328.504079][T13505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  328.534491][T13505] team0: Port device team_slave_0 added
[  328.539099][T13505] team0: Port device team_slave_1 added
[  328.564205][T13505] batman_adv: batadv0: Adding interface: batadv_slave_0
[  328.566987][T13505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  328.576197][T13505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  328.584634][T13505] batman_adv: batadv0: Adding interface: batadv_slave_1
[  328.587348][T13505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  328.618146][T13505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  328.656978][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.692721][T13505] hsr_slave_0: entered promiscuous mode
[  328.698499][T13505] hsr_slave_1: entered promiscuous mode
[  328.704421][T13505] debugfs: 'hsr0' already exists in 'hsr'
[  328.706897][T13505] Cannot create hsr debugfs directory
[  328.870789][ T6448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.878854][ T6031] kye 0003:0458:5016.000F: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  328.895791][ T6031] hid_parser_main: 28 callbacks suppressed
[  328.895815][ T6031] kye 0003:0458:5016.000F: unknown main item tag 0x0
[  328.916336][ T6031] kye 0003:0458:5016.000F: hidraw0: USB HID v0.00 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0
[  328.920797][ T6031] kye 0003:0458:5016.000F: tablet-enabling feature report not found
[  328.933180][ T6031] kye 0003:0458:5016.000F: tablet enabling failed
[  329.097403][ T5985] Bluetooth: hci0: command tx timeout
[  329.508662][ T6017] usb 1-1: USB disconnect, device number 7
[  329.875795][ T6467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.935994][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.270019][T13575] netlink: 'syz.0.2843': attribute type 5 has an invalid length.
[  330.302562][ T6475] hsr_slave_0: left promiscuous mode
[  330.308190][ T6475] hsr_slave_1: left promiscuous mode
[  330.311017][ T6475] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  330.313834][ T6475] batman_adv: batadv0: Removing interface: batadv_slave_0
[  330.333041][ T6475] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  330.335901][ T6475] batman_adv: batadv0: Removing interface: batadv_slave_1
[  330.343609][ T6475] batman_adv: batadv0: Removing interface: vlan2
[  330.355311][ T6475] veth1_macvtap: left promiscuous mode
[  330.357671][ T6475] veth1_vlan: left promiscuous mode
[  330.365300][ T6475] veth0_vlan: left promiscuous mode
[  330.748452][ T6475] team0 (unregistering): Port device team_slave_1 removed
[  330.763765][ T6475] team0 (unregistering): Port device team_slave_0 removed
[  330.781161][ T9633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.967279][T13575] ip6erspan0: entered promiscuous mode
[  331.075961][ T5985] Bluetooth: hci0: command tx timeout
[  331.098567][    C1] hpet: Lost 1 RTC interrupts
[  331.107773][T13505] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  331.165402][T13505] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  331.197113][T13505] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  331.220835][T13505] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  331.430066][ T6475] IPVS: stop unused estimator thread 0...
[  331.517944][T13505] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.552734][T13505] 8021q: adding VLAN 0 to HW filter on device team0
[  331.570076][ T9803] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.572993][ T9803] bridge0: port 1(bridge_slave_0) entered forwarding state
[  331.598819][ T9803] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.601812][ T9803] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.774159][T13505] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.804093][T13505] veth0_vlan: entered promiscuous mode
[  331.810352][T13505] veth1_vlan: entered promiscuous mode
[  331.834539][T13505] veth0_macvtap: entered promiscuous mode
[  331.840577][T13505] veth1_macvtap: entered promiscuous mode
[  331.851764][T13505] batman_adv: batadv0: Interface activated: batadv_slave_0
[  331.855463][ T6448] net_ratelimit: 2 callbacks suppressed
[  331.855478][ T6448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.860858][T13505] batman_adv: batadv0: Interface activated: batadv_slave_1
[  331.866027][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  331.874480][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  331.886028][T13621] openvswitch: netlink: IPv4 tun info is not correct
[  331.886665][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  331.901712][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  332.031896][ T9803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.044523][ T9803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.048858][ T6475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.074536][T12452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.079762][T12452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.184484][T13634] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2857'.
[  332.204992][T13634] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2857'.
[  332.837462][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.062236][ T5985] Bluetooth: hci0: command tx timeout
[  333.114793][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.132362][T13684] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2867'.
[  333.148022][T13684] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2867'.
[  333.219301][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.667775][ T6448] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  333.677082][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.827045][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.831656][ T6448] usb 4-1: Using ep0 maxpacket: 8
[  333.836013][ T6448] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  333.841718][ T6448] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  333.860574][ T6448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.868276][ T6448] usb 4-1: config 0 descriptor??
[  333.888272][ T6448] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22
[  334.090135][ T6448] usb 4-1: USB disconnect, device number 2
[  334.191080][ T6475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.226442][T13728] loop0: detected capacity change from 0 to 32768
[  334.597812][T13748] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2883'.
[  334.812176][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.832822][T13764] netlink: 'syz.9.2890': attribute type 3 has an invalid length.
[  334.906380][T13768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2891'.
[  335.038981][ T5985] Bluetooth: hci0: command tx timeout
[  335.060799][T13786] syz_tun: entered promiscuous mode
[  335.609505][T13810] loop0: detected capacity change from 0 to 32768
[  335.653040][T13810] JBD2: unrecognised superblock format ID
[  335.699347][T13810] (syz.0.2907,13810,1):ocfs2_journal_init:963 ERROR: Linux journal layer error
[  335.715158][T13810] (syz.0.2907,13810,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  335.719697][T13810] (syz.0.2907,13810,0):ocfs2_check_volume:2432 ERROR: status = -22
[  335.734281][T13810] (syz.0.2907,13810,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  335.789862][T13810] (syz.0.2907,13810,0):ocfs2_fill_super:1177 ERROR: status = -22
[  336.368666][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'.
[  336.372606][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'.
[  336.503067][T13867] netlink: 'syz.3.2931': attribute type 3 has an invalid length.
[  336.506160][T13867] netlink: 'syz.3.2931': attribute type 27 has an invalid length.
[  336.835251][   T31] net_ratelimit: 6 callbacks suppressed
[  336.835270][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.347012][T13886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2938'.
[  337.420872][T13891] loop0: detected capacity change from 0 to 256
[  337.432412][T13891] exFAT-fs (loop0): failed to test first cluster bit of root dir(5)
[  337.659173][ T6475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.671546][T13900] loop3: detected capacity change from 0 to 1024
[  337.675225][T13900] ext3: Unknown parameter 'noacl'
[  337.723909][   T33] audit: type=1326 audit(1778873412.624:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.3.2945" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912e39ce59 code=0x7ffc0000
[  337.735629][   T33] audit: type=1326 audit(1778873412.624:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.3.2945" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912e39ce59 code=0x7ffc0000
[  337.746152][   T33] audit: type=1326 audit(1778873412.645:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.3.2945" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912e39ce59 code=0x7ffc0000
[  337.755919][   T33] audit: type=1326 audit(1778873412.645:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.3.2945" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912e39ce59 code=0x7ffc0000
[  337.765453][   T33] audit: type=1326 audit(1778873412.655:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.3.2945" exe="/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f912e39ce59 code=0x7ffc0000
[  337.776047][   T33] audit: type=1326 audit(1778873412.655:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.3.2945" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912e39ce59 code=0x7ffc0000
[  337.786810][   T33] audit: type=1326 audit(1778873412.655:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.3.2945" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912e39ce59 code=0x7ffc0000
[  337.799040][   T33] audit: type=1326 audit(1778873412.655:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.3.2945" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912e39ce59 code=0x7ffc0000
[  337.807888][   T33] audit: type=1326 audit(1778873412.655:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.3.2945" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912e39ce59 code=0x7ffc0000
[  337.815995][   T33] audit: type=1326 audit(1778873412.666:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.3.2945" exe="/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f912e39ce59 code=0x7ffc0000
[  337.858250][ T6031] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  337.865544][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.906700][T13908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.910830][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.919210][T13908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.923459][ T6475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.934812][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.949238][T13908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.962210][ T6475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.015323][ T6031] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  338.018889][ T6031] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  338.042041][ T6031] usb 1-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30
[  338.049001][ T6031] usb 1-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  338.054605][ T6031] usb 1-1: config 1 interface 1 has no altsetting 0
[  338.064762][ T6031] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  338.072195][ T6031] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  338.075108][ T6031] usb 1-1: Product: syz
[  338.077171][ T6031] usb 1-1: SerialNumber: syz
[  338.096437][ T6031] usb 1-1: selecting invalid altsetting 1
[  338.098812][ T6031] usb 1-1: selecting invalid altsetting 0
[  338.103224][ T6031] usb 1-1: selecting invalid altsetting 0
[  338.107083][ T6031] cdc_ncm 1-1:1.0: bind() failure
[  338.107387][T13915] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2950'.
[  338.310588][ T6031] usb 1-1: selecting invalid altsetting 0
[  338.318758][ T6031] usbtest 1-1:1.1: probe with driver usbtest failed with error -22
[  338.338843][ T6031] usb 1-1: USB disconnect, device number 8
[  339.338784][T13935] overlayfs: failed to clone upperpath
[  339.685810][T13954] Bluetooth: MGMT ver 1.23
[  341.088722][ T6031] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  341.097807][T13995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2987'.
[  341.149232][T13997] loop3: detected capacity change from 0 to 8
[  341.263817][ T6031] usb 1-1: unable to get BOS descriptor or descriptor too short
[  341.269029][ T6031] usb 1-1: config 129 has an invalid interface number: 135 but max is 0
[  341.272433][ T6031] usb 1-1: config 129 has an invalid interface number: 5 but max is 0
[  341.275769][ T6031] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  341.285138][ T6031] usb 1-1: config 129 has no interface number 0
[  341.291785][ T6031] usb 1-1: config 129 has no interface number 1
[  341.294418][ T6031] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  341.325793][ T6031] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  341.330388][ T6031] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  341.342565][ T6031] usb 1-1: config 129 interface 135 has no altsetting 0
[  341.348713][ T6031] usb 1-1: config 129 interface 5 has no altsetting 0
[  341.350729][T14001] loop3: detected capacity change from 0 to 512
[  341.359074][ T6031] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  341.369365][ T6031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.372150][T14001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.372657][ T6031] usb 1-1: Product: syz
[  341.380401][ T6031] usb 1-1: Manufacturer: syz
[  341.382337][ T6031] usb 1-1: SerialNumber: syz
[  341.420216][T13505] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.583531][T14010] syz.3.2993 (14010) used greatest stack depth: 18984 bytes left
[  341.600679][ T6031] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  341.626461][ T6031] usb 1-1: MIDIStreaming interface descriptor not found
[  341.742126][ T6031] usb 1-1: USB disconnect, device number 9
[  341.793601][T14022] overlayfs: failed to clone upperpath
[  341.811484][T14022] overlayfs: failed to clone upperpath
[  341.944852][ T5954] net_ratelimit: 9 callbacks suppressed
[  341.944865][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.976592][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.182388][T14043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3008'.
[  342.363826][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.699290][T14055] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  342.969290][T13096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.068025][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.202494][   T33] kauditd_printk_skb: 9 callbacks suppressed
[  343.202511][   T33] audit: type=1326 audit(1778873418.377:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.3.3026" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f912e39ce59 code=0x0
[  343.391129][T14091] loop0: detected capacity change from 0 to 32768
[  343.423525][T14091] UFO tlock:0xffffc90002cfa168
[  343.726161][T14107] loop0: detected capacity change from 0 to 512
[  343.733651][T14107] EXT4-fs (loop0): orphan cleanup on readonly fs
[  343.741258][T14107] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  343.744414][T14107] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  343.752992][T14107] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.3034: Failed to acquire dquot type 1
[  343.757988][T14107] loop0: lost filesystem error report for type 5 error -117
[  343.759232][T14107] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  343.766418][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  343.766434][    C0] EXT4-fs (loop0): last error at time 1778873418: ext4_acquire_dquot:7001
[  343.775552][T14107] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  343.779660][T14107] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.3034: Failed to acquire dquot type 1
[  343.786239][T14107] loop0: lost filesystem error report for type 5 error -117
[  343.787196][T14107] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3034: bg 0: block 248: padding at end of block bitmap is not set
[  343.796498][T14107] loop0: lost filesystem error report for type 5 error -117
[  343.797275][T14107] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  343.804351][T14107] loop0: lost filesystem error report for type 5 error -117
[  343.806487][T14107] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  343.817850][T14107] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  343.830604][T14107] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.3034: Failed to acquire dquot type 1
[  343.835384][T14107] loop0: lost filesystem error report for type 5 error -117
[  343.837467][T14107] EXT4-fs (loop0): 1 orphan inode deleted
[  343.844326][T14107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  343.862370][T14107] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  343.865579][T14107] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  343.875517][T14107] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  343.884119][T14107] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  343.890555][T14115] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3038'.
[  343.911790][T14107] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  343.915061][T14107] ext4 filesystem being remounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  343.955862][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.962287][T12837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.164693][ T6475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.188500][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.215947][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3047'.
[  344.372785][T14146] loop3: detected capacity change from 0 to 256
[  344.577540][T14157] loop0: detected capacity change from 0 to 256
[  344.603470][T14157] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[  344.805115][    C1] vcan0: j1939_tp_rxtimer: 0xffff888176decc00: rx timeout, send abort
[  345.040718][T13096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.250445][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.280970][    C1] vcan0: j1939_tp_rxtimer: 0xffff888176dee400: rx timeout, send abort
[  345.286479][    C1] vcan0: j1939_tp_rxtimer: 0xffff888176decc00: abort rx timeout. Force session deactivation
[  345.437636][T14170] loop0: detected capacity change from 0 to 4096
[  345.442656][T14170] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  345.468694][T14170] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  345.490984][T14170] ntfs3(loop0): mft corrupted
[  345.755658][    C1] vcan0: j1939_tp_rxtimer: 0xffff888176def800: rx timeout, send abort
[  345.761543][    C1] vcan0: j1939_tp_rxtimer: 0xffff888176dee400: abort rx timeout. Force session deactivation
[  345.775102][T14184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3070'.
[  346.090668][ T6031] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  346.235383][    C1] vcan0: j1939_tp_rxtimer: 0xffff888176def800: abort rx timeout. Force session deactivation
[  346.265793][ T6031] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  346.282514][ T6031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.291630][ T6031] usb 1-1: Product: syz
[  346.297723][ T6031] usb 1-1: Manufacturer: syz
[  346.304949][ T6031] usb 1-1: SerialNumber: syz
[  346.331024][ T6031] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  346.403936][ T6031] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  346.581656][T14196] loop3: detected capacity change from 0 to 128
[  346.773272][   T33] audit: type=1326 audit(1778873422.125:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14205 comm="syz.9.3081" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dec59ce59 code=0x7ffc0000
[  346.780230][   T33] audit: type=1326 audit(1778873422.146:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14205 comm="syz.9.3081" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dec59ce59 code=0x7ffc0000
[  346.788072][   T33] audit: type=1326 audit(1778873422.146:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14205 comm="syz.9.3081" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dec59ce59 code=0x7ffc0000
[  346.997439][   T31] usb 1-1: USB disconnect, device number 10
[  347.005974][T13096] net_ratelimit: 4 callbacks suppressed
[  347.005988][T13096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.378789][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.394383][ T6031] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  347.397446][ T6031] ath9k_htc: Failed to initialize the device
[  347.410339][   T31] usb 1-1: ath9k_htc: USB layer deinitialized
[  347.632870][T14241] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  347.636309][T14241] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  347.764098][T14251] loop3: detected capacity change from 0 to 256
[  347.857051][T14255] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3099'.
[  347.997644][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.108781][T14273] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0
[  348.148495][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.442744][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.546046][ T9586] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  348.607659][T14294] loop0: detected capacity change from 0 to 32768
[  348.611139][T14294] btrfs: Deprecated parameter 'usebackuproot'
[  348.613736][T14294] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  348.619932][T14294] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3113 (14294)
[  348.631808][T14294] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  348.635695][T14294] BTRFS info (device loop0): using crc32c checksum algorithm
[  348.689424][ T9586] usb 4-1: Using ep0 maxpacket: 8
[  348.696686][ T9586] usb 4-1: config 0 has an invalid interface number: 176 but max is 0
[  348.706861][ T9586] usb 4-1: config 0 has no interface number 0
[  348.712350][ T9586] usb 4-1: config 0 interface 176 has no altsetting 0
[  348.719695][ T9586] usb 4-1: New USB device found, idVendor=0cf3, idProduct=e006, bcdDevice=33.b4
[  348.724044][ T9586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.727799][ T9586] usb 4-1: Product: syz
[  348.729539][ T9586] usb 4-1: Manufacturer: syz
[  348.731404][ T9586] usb 4-1: SerialNumber: syz
[  348.741437][ T9586] usb 4-1: config 0 descriptor??
[  348.761638][   T26] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  348.784249][T14294] BTRFS error (device loop0): failed to load root extent
[  348.787066][T14294] BTRFS warning (device loop0): try to load backup roots slot 1
[  348.790122][   T26] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  348.803258][T14294] BTRFS warning (device loop0): couldn't read tree root
[  348.805984][T14294] BTRFS warning (device loop0): try to load backup roots slot 2
[  348.812843][   T26] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  348.817104][T14294] BTRFS warning (device loop0): couldn't read tree root
[  348.819907][T14294] BTRFS warning (device loop0): try to load backup roots slot 3
[  348.842182][T14294] BTRFS info (device loop0): rebuilding free space tree
[  348.868507][T14294] BTRFS info (device loop0): checking UUID tree
[  348.882733][T14294] BTRFS info (device loop0): enabling ssd optimizations
[  348.885472][T14294] BTRFS info (device loop0): turning on async discard
[  348.888046][T14294] BTRFS info (device loop0): enabling free space tree
[  348.890785][T14294] BTRFS info (device loop0): force clearing of disk cache
[  348.893626][T14294] BTRFS info (device loop0): enabling auto defrag
[  348.896105][T14294] BTRFS info (device loop0): trying to use backup root at mount time
[  348.899255][T14294] BTRFS info (device loop0): use zstd compression, level 3
[  349.100902][T13096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.119191][ T9586] usb 4-1: USB disconnect, device number 3
[  349.475909][T12837] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  349.644933][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.806550][ T9586] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  349.959714][ T9586] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=c4.36
[  349.962527][ T9586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.964882][ T9586] usb 4-1: Product: syz
[  349.967264][ T9586] usb 4-1: Manufacturer: syz
[  349.968699][ T9586] usb 4-1: SerialNumber: syz
[  350.129984][T13096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  350.179259][ T9586] mdc800 4-1:39.0: probe fails -> wrong Number of Configuration
[  350.194604][ T9586] usb 4-1: USB disconnect, device number 4
[  350.221074][T14358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3133'.
[  350.384060][T14364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3135'.
[  350.433157][T14366] batadv1: entered promiscuous mode
[  350.715325][ T6475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.072787][ T6475] net_ratelimit: 2 callbacks suppressed
[  352.072807][ T6475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.112322][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.116870][T12437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.128747][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.136079][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.229222][T14413] loop0: detected capacity change from 0 to 32768
[  352.236899][T14413] (syz.0.3155,14413,1):ocfs2_verify_volume:2303 ERROR: found superblock with bad version: found 48384.5, should be 0.90
[  352.241331][T14413] (syz.0.3155,14413,1):ocfs2_verify_volume:2331 ERROR: status = -22
[  352.256360][T14413] (syz.0.3155,14413,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  352.260422][T14413] (syz.0.3155,14413,1):ocfs2_fill_super:1177 ERROR: status = -22
[  352.556920][T14435] loop0: detected capacity change from 0 to 4096
[  352.596009][T14435] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  352.604358][   T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  352.759274][T14439] netlink: 'syz.9.3168': attribute type 1 has an invalid length.
[  352.763853][   T31] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  352.768374][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.775789][   T31] usb 4-1: config 0 descriptor??
[  352.786401][   T31] gspca_main: cpia1-2.14.0 probing 0813:0001
[  352.800091][T14439] 8021q: adding VLAN 0 to HW filter on device bond2
[  352.841655][T14439] bond2: (slave ip6erspan0): making interface the new active one
[  352.862664][T14439] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link
[  353.113615][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.158039][ T6475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.199679][ T6031] libceph: connect (1)[c::]:6789 error -101
[  353.209522][ T6031] libceph: mon0 (1)[c::]:6789 connect error
[  353.215819][   T33] kauditd_printk_skb: 6 callbacks suppressed
[  353.215830][   T33] audit: type=1326 audit(1778873428.896:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14461 comm="syz.0.3178" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f663df9ce59 code=0x0
[  353.220409][T14458] ceph: No mds server is up or the cluster is laggy
[  353.228589][ T6031] libceph: connect (1)[c::]:6789 error -101
[  353.231322][ T6031] libceph: mon0 (1)[c::]:6789 connect error
[  353.330532][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.361806][   T31] gspca_cpia1: usb_control_msg 01, error -71
[  353.363777][   T31] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  353.376373][   T31] usb 4-1: USB disconnect, device number 5
[  354.004951][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.105424][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.141045][T14474] loop0: detected capacity change from 0 to 4096
[  354.260828][T14476] loop3: detected capacity change from 0 to 32768
[  354.264804][T14476] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3183 (14476)
[  354.320282][T14476] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  354.323278][T14476] BTRFS info (device loop3): using sha256 checksum algorithm
[  354.345178][T14474] ntfs3(loop0): Failed to load $Extend (-22).
[  354.353923][T14474] ntfs3(loop0): Failed to initialize $Extend.
[  354.474775][T14476] BTRFS info (device loop3): rebuilding free space tree
[  354.506530][T14476] BTRFS info (device loop3): disabling free space tree
[  354.509977][T14476] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  354.513584][T14476] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  354.524088][T14476] BTRFS info (device loop3): checking UUID tree
[  354.527280][T14476] BTRFS info (device loop3): turning off barriers
[  354.530672][T14476] BTRFS info (device loop3): force clearing of disk cache
[  354.631000][T14502] loop0: detected capacity change from 0 to 1024
[  354.704547][T14502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  354.771000][T14502] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.3187: bad entry in directory: directory entry overrun - offset=16, inode=327694, rec_len=1024, size=108 fake=0
[  354.798498][T12837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.310029][T13505] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  355.344874][    C1] hpet: Lost 1 RTC interrupts
[  355.690007][T14527] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3195'.
[  356.351332][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3205'.
[  356.355587][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3205'.
[  356.508439][T14553] loop0: detected capacity change from 0 to 256
[  356.512807][T14553] vfat: Bad value for 'dmask'
[  356.909973][   T10] net_ratelimit: 5 callbacks suppressed
[  356.909985][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.920060][T12437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.925568][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.931703][ T6448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.082057][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.763017][T14562] loop0: detected capacity change from 0 to 131072
[  357.766550][T14562] xfs: Deprecated parameter 'ikeep'
[  357.768509][T14562] XFS: ikeep mount option is deprecated.
[  357.839799][T14562] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  358.198202][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.227034][T14562] XFS (loop0): Starting recovery (logdev: internal)
[  358.275690][T14562] XFS (loop0): Ending recovery (logdev: internal)
[  358.410865][T12837] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  358.484830][    C1] hpet: Lost 1 RTC interrupts
[  358.506360][ T6475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.701252][T14580] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  359.195995][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.586505][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.662659][ T6031] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  359.831834][ T6031] usb 1-1: Using ep0 maxpacket: 8
[  359.840221][ T6031] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  359.844542][ T6031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.848183][ T6031] usb 1-1: Product: syz
[  359.850001][ T6031] usb 1-1: Manufacturer: syz
[  359.851872][ T6031] usb 1-1: SerialNumber: syz
[  359.857766][ T6031] usb 1-1: config 0 descriptor??
[  360.073648][ T6031] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  360.254968][T14609] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  360.254968][T14609] The task syz.9.3226 (14609) triggered the difference, watch for misbehavior.
[  360.587081][T14613] kAFS: unable to lookup cell '(,c'
[  360.712696][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3231'.
[  360.715572][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3231'.
[  360.718328][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3231'.
[  360.936029][T14621] loop3: detected capacity change from 0 to 40427
[  360.942056][T14621] F2FS-fs (loop3): build fault injection rate: 14
[  360.944072][T14621] F2FS-fs (loop3): build fault injection type: 0xe4
[  360.961874][T14621] F2FS-fs (loop3): invalid crc value
[  360.974544][T14621] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810
[  361.020359][T14621] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  361.025118][T14621] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  361.036235][T14621] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x89d/0x2060
[  361.042963][T14621] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x10f/0xff0
[  361.049221][ T5985] Bluetooth: hci1: SCO packet for unknown connection handle 3
[  361.057940][ T6031] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  361.067002][T13505] syz-executor: attempt to access beyond end of device
[  361.067002][T13505] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  361.075751][ T6031] usb 1-1: USB disconnect, device number 11
[  361.076140][T13505] CPU: 1 UID: 0 PID: 13505 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  361.076154][T13505] Tainted: [L]=SOFTLOCKUP
[  361.076158][T13505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  361.076163][T13505] Call Trace:
[  361.076168][T13505]  <TASK>
[  361.076172][T13505]  dump_stack_lvl+0xe8/0x150
[  361.076190][T13505]  f2fs_handle_critical_error+0x37c/0x540
[  361.076207][T13505]  f2fs_write_end_io+0xcdb/0xff0
[  361.076228][T13505]  __submit_merged_bio+0x256/0x700
[  361.076248][T13505]  __submit_merged_write_cond+0x3c9/0x4e0
[  361.076268][T13505]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  361.076291][T13505]  f2fs_write_data_pages+0x2975/0x35e0
[  361.076317][T13505]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  361.076334][T13505]  ? css_rstat_updated+0x23a/0x530
[  361.076356][T13505]  ? rcu_is_watching+0x15/0xb0
[  361.076369][T13505]  ? mod_memcg_lruvec_state+0x1a7/0x360
[  361.076384][T13505]  ? __lock_acquire+0x6b5/0x2cf0
[  361.076402][T13505]  ? __lock_acquire+0x6b5/0x2cf0
[  361.076413][T13505]  ? do_raw_spin_lock+0x12b/0x2f0
[  361.076427][T13505]  ? do_raw_spin_unlock+0x4d/0x210
[  361.076435][T13505]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  361.076447][T13505]  do_writepages+0x32e/0x550
[  361.076498][T13505]  ? do_raw_spin_unlock+0x4d/0x210
[  361.076514][T13505]  filemap_fdatawrite+0x1e9/0x2f0
[  361.076538][T13505]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  361.076577][T13505]  ? do_raw_spin_unlock+0x4d/0x210
[  361.076593][T13505]  f2fs_sync_dirty_inodes+0x30e/0x860
[  361.076613][T13505]  f2fs_write_checkpoint+0x9df/0x26a0
[  361.076638][T13505]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  361.076672][T13505]  kill_f2fs_super+0x314/0x720
[  361.076687][T13505]  ? __pfx_kill_f2fs_super+0x10/0x10
[  361.076703][T13505]  ? lockdep_hardirqs_on+0x7a/0x110
[  361.076719][T13505]  deactivate_locked_super+0xbc/0x130
[  361.076734][T13505]  cleanup_mnt+0x437/0x4d0
[  361.076744][T13505]  ? _raw_spin_unlock_irq+0x23/0x50
[  361.076753][T13505]  task_work_run+0x1d9/0x270
[  361.076766][T13505]  ? __pfx_task_work_run+0x10/0x10
[  361.076779][T13505]  exit_to_user_mode_loop+0xed/0x480
[  361.076789][T13505]  ? rcu_is_watching+0x15/0xb0
[  361.076801][T13505]  do_syscall_64+0x32d/0xf80
[  361.076811][T13505]  ? trace_irq_disable+0x3b/0x150
[  361.076824][T13505]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.076835][T13505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.076843][T13505] RIP: 0033:0x7f912e39e097
[  361.076854][T13505] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  361.076861][T13505] RSP: 002b:00007ffff70bf078 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  361.076871][T13505] RAX: 0000000000000000 RBX: 00007f912e4321ca RCX: 00007f912e39e097
[  361.076877][T13505] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff70bf130
[  361.076882][T13505] RBP: 00007ffff70bf130 R08: 00007ffff70c0130 R09: 00000000ffffffff
[  361.076887][T13505] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff70c01c0
[  361.076892][T13505] R13: 00007f912e4321ca R14: 000000000005ab9c R15: 00007ffff70c0200
[  361.076905][T13505]  </TASK>
[  361.076910][T13505] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  361.287834][T14629] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3235'.
[  361.872744][    C1] net_ratelimit: 21 callbacks suppressed
[  361.872759][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.881828][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.886190][T14648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.890446][T14648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.894526][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.902194][T14647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.905033][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.908186][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.910773][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.913363][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.369147][T14661] overlayfs: failed to resolve './file0': -2
[  362.901476][T14669] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.904863][T14669] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.439843][T14669] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  363.482784][T14669] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  363.701211][T13096] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  363.846812][T13096] usb 1-1: Using ep0 maxpacket: 16
[  363.851250][T13096] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  363.859050][T13096] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  363.866878][T13096] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  363.870496][T13096] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.872908][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.874754][T13096] usb 1-1: Product: syz
[  363.880134][T13096] usb 1-1: Manufacturer: syz
[  363.882471][T13096] usb 1-1: SerialNumber: syz
[  363.891659][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.896866][T13096] usb 1-1: config 0 descriptor??
[  363.902811][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.907440][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.934062][T13096] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  363.938147][T13096] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  364.014048][T14718] loop3: detected capacity change from 0 to 256
[  364.022181][T14718] exfat: Deprecated parameter 'utf8'
[  364.047664][T14718] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  364.396389][T14736] loop3: detected capacity change from 0 to 32768
[  364.406392][T14736] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3279 (14736)
[  364.412544][T14736] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  364.415585][T14736] BTRFS info (device loop3): using sha256 checksum algorithm
[  364.514726][T13096] em28xx 1-1:0.0: chip ID is em2870
[  364.542710][T14736] BTRFS info (device loop3): rebuilding free space tree
[  364.559197][T14736] BTRFS info (device loop3): enabling ssd optimizations
[  364.561965][T14736] BTRFS info (device loop3): using spread ssd allocation scheme
[  364.566695][T14736] BTRFS info (device loop3): enabling free space tree
[  364.569578][T14736] BTRFS info (device loop3): force clearing of disk cache
[  364.572081][T14736] BTRFS info (device loop3): enabling auto defrag
[  364.574432][T14736] BTRFS info (device loop3): max_inline set to 0
[  364.626560][T13505] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  364.630107][   T13] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  364.718265][T13096] usb 1-1: USB disconnect, device number 12
[  364.722415][T13096] em28xx 1-1:0.0: Disconnecting em28xx
[  364.732982][T13096] em28xx 1-1:0.0: Freeing device
[  364.796243][T14754] loop3: detected capacity change from 0 to 4096
[  364.809200][T14754] ext4: Unknown parameter 'noacl'
[  364.936259][T14762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  364.938954][T14762] IPv6: NLM_F_CREATE should be set when creating new route
[  365.063649][ T5988] Bluetooth: hci1: command 0x0406 tx timeout
[  365.153022][T14762] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.155801][T14762] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.737110][T14762] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  365.770981][T14762] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  366.047302][T14780] loop3: detected capacity change from 0 to 8
[  366.059197][T14780] SQUASHFS error: xz decompression failed, data probably corrupt
[  366.063011][T14780] SQUASHFS error: Failed to read block 0x108: -5
[  366.066212][T14780] SQUASHFS error: Unable to read metadata cache entry [106]
[  366.069242][T14780] SQUASHFS error: Unable to read inode 0x11f
[  366.133845][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3288'.
[  366.144247][ T6475] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0
[  366.151288][ T6475] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.168695][ T6475] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0
[  366.173364][ T6475] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.188553][ T6475] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0
[  366.199257][ T6475] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.203582][ T6475] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0
[  366.223738][ T6475] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.387684][   T33] audit: type=1326 audit(1778873442.722:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14792 comm="syz.9.3296" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dec59ce59 code=0x0
[  366.788640][T14788] loop3: detected capacity change from 0 to 32768
[  366.816420][T14788] (syz.3.3294,14788,0):ocfs2_check_dir_entry:338 ERROR: bad entry in directory #66: rec_len is smaller than minimal - offset=56, inode=1860, rec_len=0, name_len=18
[  366.824746][T14788] (syz.3.3294,14788,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  366.829803][T14788] (syz.3.3294,14788,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  366.829822][T14788] (syz.3.3294,14788,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  366.841371][T14788] (syz.3.3294,14788,0):ocfs2_initialize_super:2198 ERROR: status = -22
[  366.845449][T14788] (syz.3.3294,14788,0):ocfs2_fill_super:1177 ERROR: status = -22
[  367.644642][   T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  367.797369][   T31] usb 4-1: device descriptor read/64, error -71
[  367.817351][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3309'.
[  367.953355][T14831] netlink: 'syz.9.3312': attribute type 2 has an invalid length.
[  368.026032][   T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  368.045616][T14835] netlink: 'syz.9.3314': attribute type 1 has an invalid length.
[  368.048948][T14835] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3314'.
[  368.150628][   T31] usb 4-1: device descriptor read/64, error -71
[  368.228164][T14843] vlan0: entered allmulticast mode
[  368.230053][T14843] team0: entered allmulticast mode
[  368.231654][T14843] team_slave_0: entered allmulticast mode
[  368.233434][T14843] team_slave_1: entered allmulticast mode
[  368.254463][   T31] usb usb4-port1: attempt power cycle
[  368.578410][   T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  368.598200][   T31] usb 4-1: device descriptor read/8, error -71
[  368.654306][T14681] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  368.797950][T14681] usb 1-1: Using ep0 maxpacket: 16
[  368.803605][T14681] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  368.806177][T14681] usb 1-1: config 0 has no interface number 0
[  368.808456][T14681] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  368.812346][T14681] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  368.819037][T14681] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  368.822047][T14681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.824861][T14681] usb 1-1: Product: syz
[  368.827620][T14681] usb 1-1: Manufacturer: syz
[  368.829170][T14681] usb 1-1: SerialNumber: syz
[  368.832702][T14681] usb 1-1: config 0 descriptor??
[  368.835014][T14849] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  368.842651][   T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  368.843199][T14849] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  368.867720][   T31] usb 4-1: device descriptor read/8, error -71
[  368.961989][T14855] sch_tbf: burst 1023 is lower than device lo mtu (65550) !
[  368.978790][   T31] usb usb4-port1: unable to enumerate USB device
[  369.051180][T14849] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  369.054160][T14849] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  370.023844][T14681] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  370.032559][T14681] asix 1-1:0.34: probe with driver asix failed with error -71
[  370.042206][T14681] usb 1-1: USB disconnect, device number 13
[  371.309987][T14881] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  371.455349][T14890] veth0: entered promiscuous mode
[  371.459338][T14889] veth0: left promiscuous mode
[  372.308043][T14918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3348'.
[  372.739981][T14924] netlink: 'syz.0.3351': attribute type 10 has an invalid length.
[  372.792565][T14924] 8021q: adding VLAN 0 to HW filter on device team0
[  372.808259][T14924] bond0: (slave team0): Enslaving as an active interface with an up link
[  372.859741][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  372.861897][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  373.376253][T14938] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3358'.
[  373.460526][T14940] loop0: detected capacity change from 0 to 1024
[  373.470918][T14940] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  373.511847][T14943] syz_tun: entered allmulticast mode
[  373.523684][T14940] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 2: comm syz.0.3359: lblock 2 mapped to illegal pblock 2 (length 1)
[  373.532454][T14940] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  373.538973][T14940] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  373.541775][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  373.541787][    C1] EXT4-fs (loop0): initial error at time 1778873450: ext4_map_blocks:776: inode 3: block 2
[  373.541805][    C1] EXT4-fs (loop0): last error at time 1778873450: ext4_map_blocks:776: inode 3: block 2
[  373.572927][T14940] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 48: comm syz.0.3359: lblock 0 mapped to illegal pblock 48 (length 1)
[  373.577779][T14940] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  373.577966][T14940] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  373.597233][T14940] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.3359: Failed to acquire dquot type 0
[  373.602899][T14940] loop0: lost filesystem error report for type 5 error -117
[  373.603138][T14940] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  373.610986][T14940] loop0: lost filesystem error report for type 5 error -117
[  373.611184][T14940] EXT4-fs error (device loop0): ext4_evict_inode:255: inode #11: comm syz.0.3359: mark_inode_dirty error
[  373.621241][T14940] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  373.631644][T14940] EXT4-fs warning (device loop0): ext4_evict_inode:258: couldn't mark inode dirty (err -117)
[  373.644965][T14940] EXT4-fs (loop0): 1 orphan inode deleted
[  373.649474][T14940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  373.656088][  T136] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm kworker/u10:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  373.673837][  T136] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  373.679928][T14940] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz.0.3359: Invalid inode table block 1 in block_group 0
[  373.684021][  T136] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u10:5: Failed to release dquot type 0
[  373.694614][T14940] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  373.702563][T14940] EXT4-fs error (device loop0): ext4_setattr:5825: inode #2: comm syz.0.3359: mark_inode_dirty error
[  373.706988][T14940] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz.0.3359: Invalid inode table block 1 in block_group 0
[  373.717614][T14940] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  373.725578][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3364'.
[  373.729260][T14940] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #2: comm syz.0.3359: mark_inode_dirty error
[  373.737081][T14940] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm syz.0.3359: lblock 1 mapped to illegal pblock 1 (length 1)
[  373.751868][T14940] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 1
[  373.758789][T14940] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 20435
[  373.766224][T14940] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.3359: Failed to acquire dquot type 0
[  373.790393][T14959] random: crng reseeded on system resumption
[  373.816567][T12837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.826145][   T26] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  373.826411][   T26] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  373.830174][   T26] loop0: lost filesystem error report for type 5 error -117
[  373.832657][T12837] loop0: lost filesystem error report for type 5 error -117
[  373.849362][T12837] loop0: lost filesystem error report for type 5 error -117
[  373.852440][T12837] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  373.901557][T14962] loop3: detected capacity change from 0 to 8
[  373.910193][T14962] SQUASHFS error: zlib decompression failed, data probably corrupt
[  373.918760][T14962] SQUASHFS error: Failed to read block 0x9b: -5
[  373.921355][T14962] SQUASHFS error: Unable to read metadata cache entry [99]
[  373.926262][T14962] SQUASHFS error: Unable to read inode 0x104
[  374.558922][T14987] xt_hashlimit: size too large, truncated to 1048576
[  375.373099][T15003] xt_connbytes: Forcing CT accounting to be enabled
[  375.627093][T14999] loop3: detected capacity change from 0 to 32768
[  375.641400][T14999] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3383 (14999)
[  375.661697][T14999] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  375.666520][T14999] BTRFS info (device loop3): using sha256 checksum algorithm
[  375.735281][T14999] BTRFS info (device loop3): enabling ssd optimizations
[  375.741612][T14999] BTRFS info (device loop3): turning on async discard
[  375.744351][T14999] BTRFS info (device loop3): enabling free space tree
[  375.812268][T13505] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  376.584749][T15054] No such timeout policy "syz1"
[  376.717226][T15058] tc_dump_action: action bad kind
[  376.942281][T15067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3407'.
[  376.945161][T15067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3407'.
[  377.520435][T15073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3410'.
[  377.525464][T15073] net_ratelimit: 951 callbacks suppressed
[  377.525481][T15073] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  377.745652][T15083] input: syz0 as /devices/virtual/input/input18
[  378.082972][T15093] loop3: detected capacity change from 0 to 32768
[  378.092270][T15093] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3417 (15093)
[  378.610612][T15093] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  378.614493][T15093] BTRFS info (device loop3): using sha256 checksum algorithm
[  378.674965][T15093] BTRFS info (device loop3): rebuilding free space tree
[  378.697373][T15093] BTRFS info (device loop3): disabling free space tree
[  378.699808][T15093] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  378.703505][T15093] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  378.712144][T15093] BTRFS info (device loop3): setting nodatasum
[  378.714719][T15093] BTRFS info (device loop3): setting nodatacow
[  378.717137][T15093] BTRFS info (device loop3): turning off barriers
[  378.720267][T15093] BTRFS info (device loop3): turning on sync discard
[  378.722861][T15093] BTRFS info (device loop3): force clearing of disk cache
[  378.899226][T15116] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3421'.
[  379.363234][T13505] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  379.793956][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.998456][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.004333][ T5988] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  380.010731][ T5988] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  380.020459][ T5988] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  380.023526][ T5988] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  380.029727][ T5988] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  380.104708][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.245831][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.290052][T15150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3437'.
[  380.293111][T15150] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3437'.
[  380.298290][T15150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3437'.
[  380.524469][   T13] bridge_slave_1: left promiscuous mode
[  380.526841][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.542822][   T13] bridge_slave_0: left allmulticast mode
[  380.544642][   T13] bridge_slave_0: left promiscuous mode
[  380.547299][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.710672][T15161] tmpfs: Bad value for 'mpol'
[  380.726920][   T13] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  380.890706][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.899994][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  380.906477][   T13] bond0 (unregistering): (slave team0): Releasing backup interface
[  380.910943][   T13] bond0 (unregistering): Released all slaves
[  380.925597][T15136] chnl_net:caif_netlink_parms(): no params data found
[  381.030223][   T13] IPVS: stopping master sync thread 14273 ...
[  381.181229][T15136] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.206333][T15136] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.212684][T15136] bridge_slave_0: entered allmulticast mode
[  381.224744][T15136] bridge_slave_0: entered promiscuous mode
[  381.259372][T15136] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.262777][T15136] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.266254][T15136] bridge_slave_1: entered allmulticast mode
[  381.271499][T15136] bridge_slave_1: entered promiscuous mode
[  381.307908][T15190] loop3: detected capacity change from 0 to 24
[  381.310444][T15190] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  381.330009][T15190] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  381.397989][T15136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.407724][T15136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.471719][   T13] hsr_slave_0: left promiscuous mode
[  381.473855][   T13] hsr_slave_1: left promiscuous mode
[  381.475980][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  381.478375][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  381.488667][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  381.491268][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  381.517119][   T13] veth1_macvtap: left promiscuous mode
[  381.519195][   T13] veth0_macvtap: left promiscuous mode
[  381.521102][   T13] veth1_vlan: left promiscuous mode
[  381.522914][   T13] veth0_vlan: left promiscuous mode
[  381.821299][   T13] team0 (unregistering): Port device team_slave_1 removed
[  381.844545][   T13] team0 (unregistering): Port device team_slave_0 removed
[  381.897727][T15217] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3460'.
[  381.965851][T15136] team0: Port device team_slave_0 added
[  381.970720][T15136] team0: Port device team_slave_1 added
[  381.983615][ T5988] Bluetooth: hci2: command tx timeout
[  382.009758][T15136] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.012101][T15136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.021113][T15136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  382.027030][T15136] batman_adv: batadv0: Adding interface: batadv_slave_1
[  382.030243][T15136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.041686][T15136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  382.109829][T15136] hsr_slave_0: entered promiscuous mode
[  382.113084][T15136] hsr_slave_1: entered promiscuous mode
[  382.125726][T15136] debugfs: 'hsr0' already exists in 'hsr'
[  382.127644][T15136] Cannot create hsr debugfs directory
[  382.322390][T15225] loop3: detected capacity change from 0 to 256
[  382.329764][T15225] exfat: Deprecated parameter 'namecase'
[  382.331576][T15225] exfat: Deprecated parameter 'namecase'
[  382.341524][T15225] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  383.095950][ T5985] Bluetooth: hci0: unexpected event for opcode 0x0c1a
[  383.331993][T15136] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  383.341806][T15136] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  383.351360][T15136] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  383.360506][T15136] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  383.451403][T15136] 8021q: adding VLAN 0 to HW filter on device bond0
[  383.466748][T15136] 8021q: adding VLAN 0 to HW filter on device team0
[  383.474330][T12443] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.476882][T12443] bridge0: port 1(bridge_slave_0) entered forwarding state
[  383.487880][T12443] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.490724][T12443] bridge0: port 2(bridge_slave_1) entered forwarding state
[  383.588506][T15293] vlan0: entered allmulticast mode
[  383.590293][T15293] bond0: entered allmulticast mode
[  383.592724][T15293] bond_slave_0: entered allmulticast mode
[  383.594823][T15293] bond_slave_1: entered allmulticast mode
[  383.600412][T15293] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3480'.
[  383.619667][T15293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  383.623642][T15293] bond_slave_0: left allmulticast mode
[  383.626318][T15293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  383.629633][T15293] bond_slave_1: left allmulticast mode
[  383.631704][T15293] bond0 (unregistering): Released all slaves
[  383.646457][T15136] 8021q: adding VLAN 0 to HW filter on device batadv0
[  383.681629][T15136] veth0_vlan: entered promiscuous mode
[  383.698559][T15136] veth1_vlan: entered promiscuous mode
[  383.742608][T15136] veth0_macvtap: entered promiscuous mode
[  383.749672][T15136] veth1_macvtap: entered promiscuous mode
[  383.761905][T15136] batman_adv: batadv0: Interface activated: batadv_slave_0
[  383.776451][T15136] batman_adv: batadv0: Interface activated: batadv_slave_1
[  383.785654][T15195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  383.788619][T15195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  383.793797][T15195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  383.797806][T15257] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  383.799759][T15195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  383.836641][T15302] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3482'.
[  383.840358][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3482'.
[  383.931858][T12437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  383.936833][T12437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  383.964706][ T5985] Bluetooth: hci2: command tx timeout
[  383.982857][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  383.985237][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  384.168210][T15319] tc_dump_action: action bad kind
[  384.308116][   T13] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[  384.581131][T15336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3495'.
[  384.871113][T15351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3503'.
[  385.033339][   T33] audit: type=1326 audit(1778873462.300:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15359 comm="syz.3.3507" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f912e39ce59 code=0x0
[  385.119213][T15364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3509'.
[  385.155966][T15367] xt_hashlimit: size too large, truncated to 1048576
[  385.315497][T15371] loop0: detected capacity change from 0 to 512
[  385.329136][T15371] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  385.340606][T15371] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.3511: attempt to clear invalid blocks 1024 len 1
[  385.344711][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  385.344726][    C0] EXT4-fs (loop0): initial error at time 1778873462: ext4_mb_generate_buddy:1315
[  385.344738][    C0] EXT4-fs (loop0): last error at time 1778873462: ext4_mb_generate_buddy:1315
[  385.352547][T15371] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  385.354436][T15371] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3511: invalid indirect mapped block 1819239214 (level 0)
[  385.361294][T15371] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  385.366487][T15371] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3511: invalid indirect mapped block 33554432 (level 2)
[  385.374833][T15371] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  385.375234][T15371] EXT4-fs (loop0): 1 truncate cleaned up
[  385.380796][T15371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  385.401583][T15136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.536841][T15381] netlink: 'syz.0.3515': attribute type 1 has an invalid length.
[  385.539529][T15381] netlink: 'syz.0.3515': attribute type 4 has an invalid length.
[  385.542449][T15381] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3515'.
[  385.549520][T15381] netlink: 'syz.0.3515': attribute type 1 has an invalid length.
[  385.552186][T15381] netlink: 'syz.0.3515': attribute type 4 has an invalid length.
[  385.555081][T15381] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3515'.
[  385.753299][T15387] loop0: detected capacity change from 0 to 32768
[  385.813139][T15387] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  385.836095][T15387] XFS (loop0): Ending clean mount
[  385.839700][T15387] XFS (loop0): Quotacheck needed: Please wait.
[  385.878938][T15387] XFS (loop0): Quotacheck: Done.
[  385.979602][ T5985] Bluetooth: hci2: command tx timeout
[  386.201150][ T6031] IPVS: starting estimator thread 0...
[  386.286570][T15404] IPVS: using max 63 ests per chain, 151200 per kthread
[  386.398231][T15420] loop3: detected capacity change from 0 to 128
[  386.478580][T15420] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  386.485549][T15136] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  386.495372][T15420] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  386.498408][T15420] FAT-fs (loop3): Filesystem has been set read-only
[  386.500770][T15420] syz.3.3529: attempt to access beyond end of device
[  386.500770][T15420] loop3: rw=8912896, sector=2065, nr_sectors = 8 limit=128
[  386.524034][T15420] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  386.527083][T15420] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  386.531505][T15420] syz.3.3529: attempt to access beyond end of device
[  386.531505][T15420] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  386.537434][   T33] audit: type=1800 audit(1778873463.875:747): pid=15420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3529" name="file2" dev="loop3" ino=1048754 res=0 errno=0
[  387.167643][T15450] netlink: 'syz.0.3543': attribute type 1 has an invalid length.
[  387.378940][T15452] loop0: detected capacity change from 0 to 32768
[  387.384025][T15452] ERROR: (device loop0): xtSearch: xt_getpage: xtree page corrupt
[  387.384025][T15452] 
[  387.388218][T15452] xtLookup: xtSearch returned -5
[  387.392769][T15452] read_mapping_page failed!
[  387.394203][T15452] jfs_mount: diMount failed w/rc = -5
[  387.396758][T15452] Mount JFS Failure: -5
[  387.406887][T15452] jfs_mount failed w/return code = -5
[  387.604537][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3548'.
[  387.723837][T15469] loop3: detected capacity change from 0 to 4096
[  387.771317][T15473] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  387.929374][ T5985] Bluetooth: hci2: command tx timeout
[  388.089107][T15483] fuse: root generation should be zero
[  388.113967][T15488] loop0: detected capacity change from 0 to 128
[  388.123577][T15488] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  388.136220][T15488] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  388.156559][T15488] EXT4-fs (loop0): shut down requested (1)
[  388.159469][T15488] fscrypt (loop0, inode 12): Error -5 getting encryption context
[  388.189909][T15136] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  388.739078][T15505] loop0: detected capacity change from 0 to 32768
[  388.742093][T15505] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3566 (15505)
[  388.756879][T15505] BTRFS info (device loop0 state S): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  388.761001][T15505] BTRFS info (device loop0 state S): using sha256 checksum algorithm
[  388.766753][T15505] BTRFS error (device loop0 state S): ignoremetacsums must be used with ro mount option
[  388.770406][T15505] BTRFS error (device loop0 state S): open_ctree failed: -22
[  389.061872][   T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  389.239328][   T31] usb 1-1: Using ep0 maxpacket: 8
[  389.244612][   T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  389.253023][   T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  389.255844][   T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  389.278279][   T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  389.282282][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.312765][   T31] usb 1-1: Product: syz
[  389.314483][   T31] usb 1-1: Manufacturer: syz
[  389.328273][   T31] usb 1-1: SerialNumber: syz
[  389.666400][T15528] loop3: detected capacity change from 0 to 131072
[  389.669142][T15528] xfs: Deprecated parameter 'ikeep'
[  389.670801][T15528] XFS: ikeep mount option is deprecated.
[  389.871108][   T31] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[  389.874132][T15528] XFS (loop3): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  389.890558][   T31] cdc_ncm 1-1:1.0: bind() failure
[  389.894720][   T31] usbtest 1-1:1.0: Linux user mode ISO test driver
[  389.898375][   T31] usbtest 1-1:1.0: high-speed {control iso-in} tests (+alt)
[  389.914514][   T31] usb 1-1: USB disconnect, device number 14
[  389.922492][T15528] XFS (loop3): Starting recovery (logdev: internal)
[  389.943121][T15528] XFS (loop3): Ending recovery (logdev: internal)
[  390.093688][T13505] XFS (loop3): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  390.436207][T15548] loop3: detected capacity change from 0 to 512
[  390.468716][T15548] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3582: bad orphan inode 15
[  390.475140][T15548] loop3: lost filesystem error report for type 5 error -117
[  390.475362][T15548] ext4_test_bit(bit=14, block=18) = 1
[  390.478016][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  390.478028][    C0] EXT4-fs (loop3): initial error at time 1778873468: ext4_orphan_get:1417
[  390.478041][    C0] EXT4-fs (loop3): last error at time 1778873468: ext4_orphan_get:1417
[  390.493993][T15548] is_bad_inode(inode)=0
[  390.496277][T15548] NEXT_ORPHAN(inode)=1023
[  390.498358][T15548] max_ino=32
[  390.499611][T15548] i_nlink=0
[  390.501397][T15548] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2970: inode #15: comm syz.3.3582: corrupted xattr block 19: invalid header
[  390.509075][T15548] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  390.509308][T15548] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117)
[  390.519049][T15548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  390.523033][T15548] ext4 filesystem being mounted at /230/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  390.529926][T15548] EXT4-fs error (device loop3): ext4_empty_dir:3078: inode #12: comm syz.3.3582: Directory hole found for htree leaf block 0
[  390.547021][T13505] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  390.628712][T15558] loop0: detected capacity change from 0 to 2048
[  390.678767][ T5881]  loop0: p1 p2 p3
[  390.678767][ T5881]  p1: <netbsd: >
[  390.681720][ T5881] loop0: p1 size 16779263 extends beyond EOD, truncated
[  390.685909][ T5881] loop0: p2 size 458752 extends beyond EOD, truncated
[  390.689523][ T5881] loop0: p3 start 3036741376 is beyond EOD, truncated
[  390.694446][T15558]  loop0: p1 p2 p3
[  390.694446][T15558]  p1: <netbsd: >
[  390.700106][T15558] loop0: p1 size 16779263 extends beyond EOD, truncated
[  390.703610][T15558] loop0: p2 size 458752 extends beyond EOD, truncated
[  390.710667][T15558] loop0: p3 start 3036741376 is beyond EOD, truncated
[  390.787066][T10839] udevd[10839]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  390.794098][ T5881] udevd[5881]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  390.812362][T10839] udevd[10839]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  390.817113][ T5881] udevd[5881]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  391.309262][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3601'.
[  391.312295][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3601'.
[  391.354597][   T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  391.498301][   T10] usb 4-1: Using ep0 maxpacket: 8
[  391.508897][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  391.512920][   T10] usb 4-1: config 11 has an invalid interface number: 91 but max is 1
[  391.523817][   T10] usb 4-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config
[  391.528048][   T10] usb 4-1: config 11 has 1 interface, different from the descriptor's value: 2
[  391.531516][   T10] usb 4-1: config 11 has no interface number 0
[  391.533810][   T10] usb 4-1: config 11 interface 91 has no altsetting 0
[  391.542186][   T10] usb 4-1: New USB device found, idVendor=a168, idProduct=0610, bcdDevice=48.dd
[  391.546338][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.549381][   T10] usb 4-1: Product: syz
[  391.551007][   T10] usb 4-1: Manufacturer: syz
[  391.552790][   T10] usb 4-1: SerialNumber: syz
[  391.764353][   T10] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0610
[  391.773079][   T10] gspca_sn9c20x: Write register 1000 failed -71
[  391.783556][   T10] gspca_sn9c20x: Device initialization failed
[  391.785672][   T10] gspca_sn9c20x 4-1:11.91: probe with driver gspca_sn9c20x failed with error -71
[  391.798306][   T10] usb 4-1: USB disconnect, device number 10
[  392.412369][T15657] loop3: detected capacity change from 0 to 1024
[  392.439669][T15657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  392.457793][T15657] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  392.466932][T15657] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3612'.
[  392.493352][T13505] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  392.645145][T15667] netlink: 'syz.3.3615': attribute type 1 has an invalid length.
[  393.126747][T15693] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3627'.
[  393.177019][T15695] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  393.582692][T15710] loop0: detected capacity change from 0 to 512
[  393.587937][T15710] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3634: inode has both inline data and extents flags
[  393.591922][T15710] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  393.592473][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  393.597421][    C0] EXT4-fs (loop0): initial error at time 1778873471: ext4_orphan_get:1391: inode 15
[  393.600275][    C0] EXT4-fs (loop0): last error at time 1778873471: ext4_orphan_get:1391: inode 15
[  393.601943][T15710] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3634: couldn't read orphan inode 15 (err -117)
[  393.611025][T15710] loop0: lost filesystem error report for type 5 error -117
[  393.615910][T15710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  393.668257][T15136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.117370][T15716] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  394.364687][T15726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3641'.
[  395.805006][T15776] loop3: detected capacity change from 0 to 8192
[  395.844268][T15776]  loop3: p1 < > p3[EZD]
[  395.865932][T15776] loop3: p3 start 3238002688 is beyond EOD, truncated
[  395.882840][   T33] audit: type=1326 audit(1778873473.691:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15780 comm="syz.9.3663" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dec59ce59 code=0x7ffc0000
[  395.915261][   T33] audit: type=1326 audit(1778873473.691:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15780 comm="syz.9.3663" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dec59ce59 code=0x7ffc0000
[  395.936420][   T33] audit: type=1326 audit(1778873473.691:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15780 comm="syz.9.3663" exe="/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f0dec59ce59 code=0x7ffc0000
[  395.956502][   T33] audit: type=1326 audit(1778873473.691:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15780 comm="syz.9.3663" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dec59ce59 code=0x7ffc0000
[  395.969647][   T33] audit: type=1326 audit(1778873473.691:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15780 comm="syz.9.3663" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dec59ce59 code=0x7ffc0000
[  396.162258][ T5881] udevd[5881]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  396.373112][T15805] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3674'.
[  396.774019][T15820] dvmrp1: entered allmulticast mode
[  396.909787][T15828] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3684'.
[  397.183510][T15845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3692'.
[  397.204177][T15845] netlink: 'syz.0.3692': attribute type 1 has an invalid length.
[  397.207144][T15845] netlink: 'syz.0.3692': attribute type 2 has an invalid length.
[  397.345769][ T6046] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  397.488481][   T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  397.492232][ T6046] usb 4-1: Using ep0 maxpacket: 32
[  397.500117][ T6046] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  397.503613][ T6046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.506793][ T6046] usb 4-1: Product: syz
[  397.508829][ T6046] usb 4-1: Manufacturer: syz
[  397.510746][ T6046] usb 4-1: SerialNumber: syz
[  397.515879][ T6046] usb 4-1: config 0 descriptor??
[  397.631535][   T10] usb 1-1: Using ep0 maxpacket: 32
[  397.635474][   T10] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  397.641113][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  397.643750][   T10] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[  397.646986][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.655967][   T10] usb 1-1: config 0 descriptor??
[  397.916467][ T6046] airspy 4-1:0.0: Board ID: 00
[  397.924805][ T6046] airspy 4-1:0.0: Firmware version: 
[  398.056246][   T10] uclogic 0003:2179:0053.0010: interface is invalid, ignoring
[  398.252250][   T10] usb 1-1: USB disconnect, device number 15
[  398.891635][ T6046] airspy 4-1:0.0: Registered as swradio24
[  398.893889][ T6046] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  399.071508][   T10] usb 4-1: USB disconnect, device number 11
[  399.097087][T15924] loop0: detected capacity change from 0 to 512
[  399.112744][T15924] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  399.145560][T15924] EXT4-fs (loop0): invalid journal inode
[  399.148518][T15924] EXT4-fs (loop0): can't get journal size
[  399.154537][T15924] EXT4-fs (loop0): 1 truncate cleaned up
[  399.159438][T15924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  399.213016][T15136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.970718][T15935] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3734'.
[  400.300266][T15949] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3741'.
[  400.315163][T15949] : entered promiscuous mode
[  400.316990][T15949] : entered allmulticast mode
[  400.337167][T15949] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3741'.
[  401.071881][T15961] netlink: 'syz.0.3746': attribute type 2 has an invalid length.
[  401.130740][T15959] loop3: detected capacity change from 0 to 40427
[  401.133919][T15959] F2FS-fs: heap/no_heap options were deprecated
[  401.139087][T15959] F2FS-fs (loop3): Encrypt feature is off
[  401.309389][T15975] loop3: detected capacity change from 0 to 512
[  401.380293][T15979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3755'.
[  401.389432][T15975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  401.403733][T15975] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  401.416925][T15979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3755'.
[  401.757557][T13505] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.182770][T15995] loop0: detected capacity change from 0 to 128
[  402.268300][ T5985] Bluetooth: min 0 < 6
[  402.305342][T16003] loop0: detected capacity change from 0 to 64
[  402.314632][T16005] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3764'.
[  402.877113][   T33] audit: type=1326 audit(1778873481.029:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16024 comm="syz.3.3774" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912e39ce59 code=0x7ffc0000
[  402.885063][   T33] audit: type=1326 audit(1778873481.029:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16024 comm="syz.3.3774" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912e39ce59 code=0x7ffc0000
[  402.893141][   T33] audit: type=1326 audit(1778873481.039:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16024 comm="syz.3.3774" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f912e39ce59 code=0x7ffc0000
[  402.902389][   T33] audit: type=1326 audit(1778873481.039:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16024 comm="syz.3.3774" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912e39ce59 code=0x7ffc0000
[  402.916652][   T33] audit: type=1326 audit(1778873481.039:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16024 comm="syz.3.3774" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912e39ce59 code=0x7ffc0000
[  402.935219][   T33] audit: type=1326 audit(1778873481.050:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16024 comm="syz.3.3774" exe="/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f912e39ce59 code=0x7ffc0000
[  402.944719][   T33] audit: type=1326 audit(1778873481.050:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16024 comm="syz.3.3774" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912e39ce59 code=0x7ffc0000
[  402.954869][   T33] audit: type=1326 audit(1778873481.050:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16024 comm="syz.3.3774" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912e39ce59 code=0x7ffc0000
[  404.208285][T16062] overlayfs: failed to clone upperpath
[  404.251516][ T5985] Bluetooth: hci1: command 0x0406 tx timeout
[  404.840190][   T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  404.993756][T16079] loop3: detected capacity change from 0 to 512
[  405.008190][T16079] EXT4-fs: Ignoring removed mblk_io_submit option
[  405.016600][T16079] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.3798: corrupted in-inode xattr: e_value size too large
[  405.021915][T16079] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  405.022283][T16079] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3798: couldn't read orphan inode 15 (err -117)
[  405.025655][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  405.025668][    C0] EXT4-fs (loop3): initial error at time 1778873483: ext4_iget_extra_inode:5025: inode 15
[  405.025684][    C0] EXT4-fs (loop3): last error at time 1778873483: ext4_iget_extra_inode:5025: inode 15
[  405.040139][T16079] loop3: lost filesystem error report for type 5 error -117
[  405.043138][   T10] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  405.048837][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.051450][   T10] usb 1-1: Product: syz
[  405.052936][   T10] usb 1-1: Manufacturer: syz
[  405.053003][T16079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  405.054554][   T10] usb 1-1: SerialNumber: syz
[  405.065423][   T10] usb 1-1: config 0 descriptor??
[  405.074270][   T10] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  405.104637][T13505] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.279093][   T10] gspca_sunplus: reg_w_riv err -71
[  406.281366][   T10] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  406.305550][   T10] usb 1-1: USB disconnect, device number 16
[  406.531871][T16108] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  406.600910][T16112] netlink: 'syz.9.3812': attribute type 9 has an invalid length.
[  406.603416][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3812'.
[  406.611912][T16112] macvlan0: entered promiscuous mode
[  406.613683][T16112] team0: entered promiscuous mode
[  406.620657][T16112] team_slave_0: entered promiscuous mode
[  406.623097][T16112] team_slave_1: entered promiscuous mode
[  406.626453][T16112] macvlan0: entered allmulticast mode
[  407.098975][T16106] loop3: detected capacity change from 0 to 131072
[  407.102151][T16106] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  407.104677][T16106] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  407.108100][T16106] F2FS-fs (loop3): invalid crc value
[  407.110747][T16106] F2FS-fs (loop3): invalid crc value
[  407.113969][T16106] F2FS-fs (loop3): Failed to get valid F2FS checkpoint
[  408.001893][T16154] trusted_key: encrypted_key: master key parameter is missing
[  408.162828][T16162] loop0: detected capacity change from 0 to 512
[  408.187690][T16162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  408.228172][T16162] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  408.297024][T15136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.619999][T16178] loop0: detected capacity change from 0 to 32768
[  408.622914][T16178] btrfs: Deprecated parameter 'usebackuproot'
[  408.625346][T16178] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  408.631004][T16178] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3838 (16178)
[  408.637015][T16178] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  408.640053][T16178] BTRFS info (device loop0): using crc32c checksum algorithm
[  408.642446][T16178] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  408.685793][T12448] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0
[  408.690564][T16178] BTRFS warning (device loop0): couldn't read tree root
[  408.692976][T16178] BTRFS warning (device loop0): try to load backup roots slot 1
[  408.696013][T12443] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0
[  408.706268][T16178] BTRFS warning (device loop0): couldn't read tree root
[  408.708796][T16178] BTRFS warning (device loop0): try to load backup roots slot 2
[  408.712150][T12448] BTRFS warning (device loop0): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1
[  408.730416][T16178] BTRFS warning (device loop0): couldn't read tree root
[  408.733189][T16178] BTRFS warning (device loop0): try to load backup roots slot 3
[  408.743460][T16178] BTRFS info (device loop0): rebuilding free space tree
[  408.765023][T16178] BTRFS info (device loop0): disabling free space tree
[  408.771942][T16178] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  408.775665][T16178] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  408.784422][T16178] BTRFS info (device loop0): enabling ssd optimizations
[  408.787336][T16178] BTRFS info (device loop0): turning off barriers
[  408.789887][T16178] BTRFS info (device loop0): turning on sync discard
[  408.792524][T16178] BTRFS info (device loop0): enabling disk space caching
[  408.795291][T16178] BTRFS info (device loop0): force clearing of disk cache
[  408.798388][T16178] BTRFS info (device loop0): enabling auto defrag
[  408.801293][T16178] BTRFS info (device loop0): trying to use backup root at mount time
[  408.804415][T16178] BTRFS info (device loop0): max_inline set to 0
[  408.885932][T15136] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  408.951348][    C1] hpet: Lost 1 RTC interrupts
[  409.239392][T16210] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3847'.
[  409.243674][T16210] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3847'.
[  409.583494][T16216] binfmt_misc: register: failed to install interpreter file ./file0
[  409.758451][ T9586] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  410.000883][ T9586] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  410.004666][ T9586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.010750][ T9586] usb 4-1: Product: syz
[  410.013127][ T9586] usb 4-1: Manufacturer: syz
[  410.016473][ T9586] usb 4-1: SerialNumber: syz
[  410.031942][ T9586] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  410.034916][T16221] fuse: Bad value for 'fd'
[  410.056274][   T31] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  410.466132][T16227] IPv6: addrconf: prefix option has invalid lifetime
[  411.586790][ T6448] usb 4-1: USB disconnect, device number 12
[  411.703268][   T31] usb 4-1: Service connection timeout for: 258
[  411.710320][   T31] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[  411.714078][   T31] ath9k_htc: Failed to initialize the device
[  411.722590][ T6448] usb 4-1: ath9k_htc: USB layer deinitialized
[  411.766284][T16244] loop3: detected capacity change from 0 to 32768
[  411.775442][T16244] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  411.782489][T16244] JBD2: Ignoring recovery information on journal
[  411.805128][T16244] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  411.820293][T16229] kexec: Could not allocate control_code_buffer
[  411.919155][T13505] ocfs2: Unmounting device (7,3) on (node local)
[  411.922497][T16252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3864'.
[  411.925279][T16252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3864'.
[  412.088654][T16256] bridge0: port 1(bridge_slave_0) entered forwarding state
[  412.099190][T16256] xt_hashlimit: size too large, truncated to 1048576
[  412.187306][T16266] FAULT_FLAG_ALLOW_RETRY missing 801
[  412.189530][T16266] CPU: 0 UID: 0 PID: 16266 Comm: syz.3.3867 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  412.189547][T16266] Tainted: [L]=SOFTLOCKUP
[  412.189550][T16266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  412.189556][T16266] Call Trace:
[  412.189562][T16266]  <TASK>
[  412.189566][T16266]  dump_stack_lvl+0xe8/0x150
[  412.189585][T16266]  handle_userfault+0x1532/0x17f0
[  412.189606][T16266]  ? __pfx___folio_put+0x10/0x10
[  412.189620][T16266]  ? __pfx_handle_userfault+0x10/0x10
[  412.189643][T16266]  handle_mm_fault+0x1bec/0x3310
[  412.189666][T16266]  ? handle_mm_fault+0xee/0x3310
[  412.189683][T16266]  ? __pfx_handle_mm_fault+0x10/0x10
[  412.189697][T16266]  ? follow_page_pte+0x841/0x1450
[  412.189716][T16266]  ? __pfx_follow_page_pte+0x10/0x10
[  412.189735][T16266]  __get_user_pages+0x165b/0x29d0
[  412.189759][T16266]  populate_vma_page_range+0x2be/0x3c0
[  412.189772][T16266]  ? __pfx_populate_vma_page_range+0x10/0x10
[  412.189782][T16266]  ? vma_wants_writenotify+0xb3/0x2a0
[  412.189796][T16266]  ? vma_set_page_prot+0xc3/0x100
[  412.189809][T16266]  mprotect_fixup+0x893/0xa80
[  412.189822][T16266]  ? __pfx_mprotect_fixup+0x10/0x10
[  412.189832][T16266]  ? apparmor_file_mprotect+0x1d0/0x400
[  412.189843][T16266]  ? security_file_mprotect+0x1a/0x290
[  412.189887][T16266]  do_mprotect_pkey+0x8ab/0xcd0
[  412.189905][T16266]  ? __pfx_do_mprotect_pkey+0x10/0x10
[  412.189922][T16266]  ? __se_sys_futex+0x3a8/0x450
[  412.189943][T16266]  __x64_sys_mprotect+0x80/0x90
[  412.189953][T16266]  do_syscall_64+0x14d/0xf80
[  412.189970][T16266]  ? trace_irq_disable+0x3b/0x150
[  412.189983][T16266]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.189996][T16266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.190008][T16266] RIP: 0033:0x7f912e39ce59
[  412.190020][T16266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  412.190028][T16266] RSP: 002b:00007f912f307028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a
[  412.190039][T16266] RAX: ffffffffffffffda RBX: 00007f912e616090 RCX: 00007f912e39ce59
[  412.190046][T16266] RDX: 000000000000000a RSI: 0000000000c00000 RDI: 0000200000400000
[  412.190053][T16266] RBP: 00007f912e432d6f R08: 0000000000000000 R09: 0000000000000000
[  412.190058][T16266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  412.190064][T16266] R13: 00007f912e616128 R14: 00007f912e616090 R15: 00007ffff70bfe08
[  412.190078][T16266]  </TASK>
[  412.732367][   T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  412.978581][   T10] usb 1-1: Using ep0 maxpacket: 8
[  412.982634][   T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  412.986008][   T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  413.006003][   T10] usb 1-1: config 1 has no interface number 1
[  413.008381][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  413.031166][   T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  413.043202][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  413.048235][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.057093][   T10] usb 1-1: Product: syz
[  413.061488][   T10] usb 1-1: Manufacturer: syz
[  413.079527][   T10] usb 1-1: SerialNumber: syz
[  413.297514][T16294] overlayfs: failed to clone upperpath
[  413.336007][   T10] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  413.346613][   T10] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  413.424254][   T10] usb 1-1: USB disconnect, device number 17
[  413.447791][T10839] udevd[10839]: setting mode of /dev/bus/usb/001/017 to 020664 failed: No such file or directory
[  413.456881][T10839] udevd[10839]: setting owner of /dev/bus/usb/001/017 to uid=0, gid=0 failed: No such file or directory
[  413.503353][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  414.060736][T16308] netlink: 'syz.3.3889': attribute type 12 has an invalid length.
[  414.063821][T16308] netlink: 'syz.3.3889': attribute type 2 has an invalid length.
[  414.066171][T16308] netlink: 460 bytes leftover after parsing attributes in process `syz.3.3889'.
[  414.845860][T16344] bond0: entered promiscuous mode
[  414.853406][T16344] bond_slave_0: entered promiscuous mode
[  414.859986][T16344] bond_slave_1: entered promiscuous mode
[  414.863205][T16344] batadv0: entered promiscuous mode
[  414.868121][T16344] 8021q: adding VLAN 0 to HW filter on device hsr1
[  414.894866][T16344] bond0: left promiscuous mode
[  414.903225][T16344] bond_slave_0: left promiscuous mode
[  414.905287][T16344] bond_slave_1: left promiscuous mode
[  414.915065][T16344] batadv0: left promiscuous mode
[  415.037873][T16352] overlayfs: failed to clone upperpath
[  415.101689][   T33] audit: type=1326 audit(1778873493.847:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16355 comm="syz.0.3908" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f273919ce59 code=0x0
[  415.118075][T16358] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3909'.
[  415.121784][T16358] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3909'.
[  415.562739][T16373] loop3: detected capacity change from 0 to 4096
[  415.612019][T16376] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  416.893246][T16412] netlink: 'syz.9.3933': attribute type 12 has an invalid length.
[  416.896884][T16412] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3933'.
[  417.125063][   T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  417.174304][ T5985] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  417.276153][   T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  417.279415][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.284332][   T10] usb 4-1: config 0 descriptor??
[  417.287945][   T10] cp210x 4-1:0.0: cp210x converter detected
[  418.090167][   T10] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71
[  418.102309][   T10] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  418.108124][   T10] usb 4-1: cp210x converter now attached to ttyUSB0
[  418.114634][   T10] usb 4-1: USB disconnect, device number 13
[  418.122065][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  418.135140][   T10] cp210x 4-1:0.0: device disconnected
[  418.334544][T16454] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3951'.
[  419.000602][T16475] overlayfs: failed to clone upperpath
[  419.080177][T16486] nbd: couldn't find a device at index -2133000188
[  419.445659][T16510] loop3: detected capacity change from 0 to 164
[  419.485325][T16510] Unsupported NM flag settings (8)
[  419.687673][T16521] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3984'.
[  419.797469][ T5985] Bluetooth: hci0: unexpected event for opcode 0x2024
[  419.918282][T16532] netlink: 212348 bytes leftover after parsing attributes in process `syz.9.3989'.
[  420.363526][ T6031] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  420.525949][ T6031] usb 1-1: config 7 has an invalid interface number: 212 but max is 0
[  420.537967][ T6031] usb 1-1: config 7 has no interface number 0
[  420.540467][ T6031] usb 1-1: config 7 interface 212 has no altsetting 0
[  420.554198][ T6031] usb 1-1: New USB device found, idVendor=056c, idProduct=8007, bcdDevice=63.1e
[  420.557792][ T6031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.585010][ T6031] usb 1-1: Product: syz
[  420.586788][ T6031] usb 1-1: Manufacturer: syz
[  420.593567][ T6031] usb 1-1: SerialNumber: syz
[  420.800207][ T6031] belkin_sa 1-1:7.212: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  420.804241][ T6031] usb 1-1: bcdDevice: 631e, bfc: 0
[  420.810281][ T6031] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  420.815628][ T6031] usb 1-1: USB disconnect, device number 18
[  420.826151][ T6031] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  420.830442][ T6031] belkin_sa 1-1:7.212: device disconnected
[  421.081886][   T31] IPVS: starting estimator thread 0...
[  421.169471][T16578] IPVS: using max 38 ests per chain, 91200 per kthread
[  421.366351][T16585] loop0: detected capacity change from 0 to 2048
[  421.408895][T16585]  loop0: p1 p2 p3
[  421.408895][T16585]  p1: <netbsd: (ignored 752 more) >
[  421.416318][T16585] loop0: p2 size 458752 extends beyond EOD, truncated
[  421.421341][T16585] loop0: p3 start 65280 is beyond EOD, truncated
[  421.818292][T16599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4018'.
[  421.970301][T16587] loop3: detected capacity change from 0 to 32768
[  422.012873][T16587] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  422.062259][T16587] XFS (loop3): Ending clean mount
[  422.145119][T13505] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  422.369859][    C1] hpet: Lost 1 RTC interrupts
[  422.488786][T16629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4026'.
[  422.543433][T16635] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4030'.
[  422.623641][    C1] hpet: Lost 1 RTC interrupts
[  422.755626][T16649] loop3: detected capacity change from 0 to 4096
[  422.778061][T16649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  422.860641][T13505] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.284094][ T6031] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  423.426724][ T6031] usb 4-1: Using ep0 maxpacket: 8
[  423.435540][ T6031] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  423.442542][ T6031] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.449416][ T6031] usb 4-1: Product: syz
[  423.451307][ T6031] usb 4-1: Manufacturer: syz
[  423.453283][ T6031] usb 4-1: SerialNumber: syz
[  423.466249][ T6031] usb 4-1: config 0 descriptor??
[  423.484065][ T6031] gspca_main: se401-2.14.0 probing 047d:5003
[  423.968822][T16695] set match dimension is over the limit!
[  424.062858][ T6031] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19
[  424.281598][ T6031] usb 4-1: USB disconnect, device number 14
[  424.719450][T16719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  424.998440][   T31] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  425.172998][   T31] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 64, changing to 10
[  425.177029][   T31] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  425.191938][   T31] usb 1-1: config 0 interface 0 has no altsetting 0
[  425.194930][   T31] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[  425.199563][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.215782][   T31] usb 1-1: config 0 descriptor??
[  425.592341][T16734] loop3: detected capacity change from 0 to 32768
[  425.598435][T16734] OCFS2: ERROR (device loop3): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #70: OCFS2_VALID_FL not set
[  425.611121][T16734] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  425.614818][   T31] uclogic 0003:5543:0042.0011: unknown main item tag 0x0
[  425.614859][T16734] OCFS2: File system is now read-only.
[  425.617176][   T31] uclogic 0003:5543:0042.0011: unknown main item tag 0x0
[  425.617198][   T31] uclogic 0003:5543:0042.0011: unknown main item tag 0x0
[  425.617211][   T31] uclogic 0003:5543:0042.0011: unknown main item tag 0x0
[  425.617226][   T31] uclogic 0003:5543:0042.0011: unknown main item tag 0x0
[  425.617238][   T31] uclogic 0003:5543:0042.0011: unknown main item tag 0x0
[  425.628375][T16734] (syz.3.4073,16734,0):ocfs2_read_locked_inode:599 ERROR: status = -30
[  425.644605][T16734] (syz.3.4073,16734,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  425.649215][   T31] uclogic 0003:5543:0042.0011: unknown main item tag 0x0
[  425.649238][   T31] uclogic 0003:5543:0042.0011: unknown main item tag 0x0
[  425.649252][   T31] uclogic 0003:5543:0042.0011: unknown main item tag 0x0
[  425.649266][   T31] uclogic 0003:5543:0042.0011: unknown main item tag 0x0
[  425.666985][   T31] uclogic 0003:5543:0042.0011: hidraw0: USB HID v0.06 Device [HID 5543:0042] on usb-dummy_hcd.0-1/input0
[  425.683993][T16734] (syz.3.4073,16734,0):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[  425.689926][T16734] (syz.3.4073,16734,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  425.689959][T16734] (syz.3.4073,16734,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  425.698900][T16734] (syz.3.4073,16734,0):ocfs2_initialize_super:2198 ERROR: status = -30
[  425.702326][T16734] (syz.3.4073,16734,0):ocfs2_fill_super:1177 ERROR: status = -30
[  425.812182][ T6448] usb 1-1: USB disconnect, device number 19
[  426.263765][T16758] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4084'.
[  426.456612][T16768] loop0: detected capacity change from 0 to 512
[  426.473998][T16768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  426.486635][T16768] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4089: invalid indirect mapped block 4294967295 (level 1)
[  426.492262][T16768] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  426.492703][T16768] EXT4-fs (loop0): Remounting filesystem read-only
[  426.497480][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  426.497503][    C1] EXT4-fs (loop0): initial error at time 1778873505: ext4_free_branches:1023: inode 11
[  426.497530][    C1] EXT4-fs (loop0): last error at time 1778873505: ext4_free_branches:1023: inode 11
[  426.513979][T16768] EXT4-fs (loop0): 2 truncates cleaned up
[  426.517592][T16768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  426.551012][T15136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.750183][T16762] loop3: detected capacity change from 0 to 32768
[  426.823485][T16762] read_mapping_page failed!
[  426.825828][T16762] ERROR: (device loop3): txCommit: 
[  426.825828][T16762] 
[  426.855614][T12442] read_mapping_page failed!
[  426.860376][T12442] ERROR: (device loop3): txCommit: 
[  426.860376][T12442] 
[  426.863327][T12442] jfs_write_inode: jfs_commit_inode failed!
[  427.279249][T16807] netlink: 'syz.0.4108': attribute type 1 has an invalid length.
[  427.282268][T16807] netlink: 'syz.0.4108': attribute type 1 has an invalid length.
[  427.286398][T16807] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  427.832154][   T33] audit: type=1800 audit(1778873507.232:762): pid=16833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.4120" name="/newroot/185/bus/#976//deleted" dev="tmpfs" ino=976 res=0 errno=0
[  429.061038][T16863] openvswitch: netlink: Flow key attribute not present in set flow.
[  429.065373][    C1] hrtimer: interrupt took 73816 ns
[  429.107617][    C1] hpet: Lost 1 RTC interrupts
[  429.116994][T16865] loop0: detected capacity change from 0 to 1024
[  429.160363][T16865] hfsplus: keylen 65060 too large
[  430.630422][T16913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4154'.
[  431.204722][T16929] netlink: 'syz.0.4163': attribute type 40 has an invalid length.
[  431.281513][T16931] loop0: detected capacity change from 0 to 4096
[  431.285466][T16931] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  431.334742][   T33] audit: type=1800 audit(1778873510.885:763): pid=16931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4164" name="file1" dev="loop0" ino=30 res=0 errno=0
[  431.340920][T16931] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  431.344581][T16931] ntfs3(loop0): ino=1e, "file1" attr_set_size_ex
[  431.347878][T16930] ntfs3(loop0): ino=1e, "file1" attr_set_size_ex
[  431.389368][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  431.395610][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  431.414885][  T136] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  431.418336][T15136] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  431.421822][T15136] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  431.424944][T15136] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  431.438991][   T26] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  431.607249][T16946] netlink: 277 bytes leftover after parsing attributes in process `syz.9.4170'.
[  432.199730][ T6031] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  432.213457][T16967] loop3: detected capacity change from 0 to 32768
[  432.223562][T16967] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4180 (16967)
[  432.242707][T16967] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  432.246755][T16967] BTRFS info (device loop3): using sha256 checksum algorithm
[  432.344159][ T6031] usb 1-1: Using ep0 maxpacket: 16
[  432.355431][ T6031] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.360593][ T6031] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  432.366709][ T6031] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.383765][ T6031] usb 1-1: config 0 descriptor??
[  432.411079][T16967] BTRFS info (device loop3): enabling ssd optimizations
[  432.414000][T16967] BTRFS info (device loop3): turning on async discard
[  432.420793][T16967] BTRFS info (device loop3): enabling free space tree
[  432.520380][T13505] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  432.816859][ T6031] hid_parser_main: 26 callbacks suppressed
[  432.816896][ T6031] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0
[  432.851116][ T6031] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0
[  432.854190][ T6031] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0
[  432.857104][ T6031] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0
[  432.870459][ T6031] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0
[  432.874178][ T6031] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  433.031326][    C0] usb 1-1: input irq status -75 received
[  433.260193][ T6031] usb 1-1: USB disconnect, device number 20
[  433.623949][T16992] loop3: detected capacity change from 0 to 16
[  433.638835][T16992] erofs (device loop3): mounted with root inode @ nid 36.
[  433.699934][T16992] ip6tnl1: entered allmulticast mode
[  433.709659][T15195] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  433.713303][T15195] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  433.733563][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  433.980727][T17004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4191'.
[  434.001490][T17002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4190'.
[  434.016820][T17002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4190'.
[  434.184387][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  434.412119][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  434.428065][T17017] loop0: detected capacity change from 0 to 1024
[  434.436031][T17017] EXT4-fs: inline encryption not supported
[  434.445775][T17017] journal_path: not usable as path
[  434.461017][T17017] EXT4-fs: error: could not find journal device path
[  435.654014][T17028] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  436.128774][T17040] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  436.322344][T17049] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4210'.
[  436.602048][T17058] loop0: detected capacity change from 0 to 4096
[  436.616128][T17058] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  436.718272][T17058] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  436.721107][T17058] ntfs3(loop0): ino=19, mi_enum_attr
[  436.731430][T17058] ntfs3(loop0): failed to convert "c46c" to maccyrillic
[  436.735138][T17058] ntfs3(loop0): ino=20, mi_enum_attr
[  437.277569][   T10] usb 4-1: new low-speed USB device number 15 using dummy_hcd
[  437.433325][   T10] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  437.437295][   T10] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1
[  437.451921][   T10] usb 4-1: string descriptor 0 read error: -22
[  437.454052][   T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice=10.1c
[  437.456930][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.459963][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  438.580113][   T10] usb 4-1: USB disconnect, device number 15
[  439.834569][T17101] loop3: detected capacity change from 0 to 131072
[  439.838185][T17101] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  439.840975][T17101] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  439.847240][T17101] F2FS-fs (loop3): invalid crc value
[  439.926295][T17101] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  439.934740][T17101] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  439.938666][T17101] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  440.048236][T17107] loop0: detected capacity change from 0 to 128
[  440.213765][T17111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4234'.
[  440.218955][T17111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4234'.
[  440.382127][T17115] loop0: detected capacity change from 0 to 128
[  440.397672][T17115] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  440.418663][T17115] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8)
[  440.422239][T17115] FAT-fs (loop0): Filesystem has been set read-only
[  440.424472][T17115] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522)
[  440.939737][T17125] netlink: 'syz.0.4242': attribute type 83 has an invalid length.
[  441.756555][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4259'.
[  441.760415][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4259'.
[  445.383936][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  461.236659][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  492.941567][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  541.841987][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  541.844347][    C0] rcu: 	1-...!: (0 ticks this GP) idle=5e6c/1/0x4000000000000000 softirq=87632/87632 fqs=0
[  541.849520][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P17160/1:b..l
[  541.852150][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=84697, q=181 ncpus=2)
[  541.854784][    C0] Sending NMI from CPU 0 to CPUs 1:
[  541.854879][    C1] NMI backtrace for cpu 1
[  541.854906][    C1] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  541.854925][    C1] Tainted: [L]=SOFTLOCKUP
[  541.854931][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  541.854945][    C1] Workqueue: events_power_efficient gc_worker
[  541.854978][    C1] RIP: 0010:lock_is_held_type+0x8d/0x150
[  541.854999][    C1] Code: bd 50 0b 00 00 00 7e 48 4c 89 eb 48 81 c3 58 0b 00 00 45 31 ff 49 83 ff 31 73 24 48 89 df 4c 89 f6 e8 f7 01 00 00 85 c0 75 2a <49> ff c7 49 63 85 50 0b 00 00 48 83 c3 28 49 39 c7 7c d8 eb 11 48
[  541.855012][    C1] RSP: 0018:ffffc90000a08a98 EFLAGS: 00000046
[  541.855030][    C1] RAX: 0000000000000000 RBX: ffff888160a9e368 RCX: 0000000080010101
[  541.855042][    C1] RDX: ffff888160a9d7c0 RSI: ffff88816ae2f2c0 RDI: ffff888160a9e368
[  541.855053][    C1] RBP: 00000000ffffffff R08: 0000000000000003 R09: 0000000000000004
[  541.855063][    C1] R10: dffffc0000000000 R11: fffff52000141148 R12: 0000000000000046
[  541.855074][    C1] R13: ffff888160a9d7c0 R14: ffff88816ae2f2c0 R15: 0000000000000002
[  541.855114][    C1] FS:  0000000000000000(0000) GS:ffff8882a945d000(0000) knlGS:0000000000000000
[  541.855125][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  541.855136][    C1] CR2: 0000001b31823ffc CR3: 0000000112c98000 CR4: 00000000000006f0
[  541.855172][    C1] Call Trace:
[  541.855183][    C1]  <IRQ>
[  541.855194][    C1]  advance_sched+0x1d2/0xc90
[  541.855218][    C1]  ? do_raw_spin_unlock+0x4d/0x210
[  541.855238][    C1]  ? __pfx_advance_sched+0x10/0x10
[  541.855251][    C1]  __hrtimer_run_queues+0x53a/0xcc0
[  541.855280][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  541.855299][    C1]  ? kvm_clock_get_cycles+0x47/0x60
[  541.855316][    C1]  ? ktime_get_update_offsets_now+0x3b2/0x3d0
[  541.855336][    C1]  hrtimer_interrupt+0x42b/0x1010
[  541.855364][    C1]  __sysvec_apic_timer_interrupt+0x102/0x460
[  541.855386][    C1]  sysvec_apic_timer_interrupt+0x52/0xc0
[  541.855400][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  541.855418][    C1] RIP: 0010:handle_softirqs+0x160/0x870
[  541.855440][    C1] Code: 89 6c 24 20 0f b7 db 48 c7 c7 c0 28 cb 8b e8 97 e2 26 0a 65 66 c7 05 05 35 94 11 00 00 e8 98 8f 45 00 fb 48 c7 c5 c0 c0 40 8e <b8> ff ff ff ff 0f bc c3 41 89 c6 41 ff c6 0f 84 30 04 00 00 89 5c
[  541.855452][    C1] RSP: 0018:ffffc90000a08f38 EFLAGS: 00000206
[  541.855464][    C1] RAX: 000000000013e048 RBX: 0000000000000004 RCX: 0000000080000100
[  541.855475][    C1] RDX: 0000000000000002 RSI: ffffffff8def8736 RDI: ffffffff8c27c500
[  541.855485][    C1] RBP: ffffffff8e40c0c0 R08: ffffffff9011b1b7 R09: 1ffffffff2023636
[  541.855496][    C1] R10: dffffc0000000000 R11: fffffbfff2023637 R12: 0000000000000000
[  541.855506][    C1] R13: 0000000000000000 R14: ffff888160a9d7c0 R15: 0000000000000000
[  541.855521][    C1]  ? handle_softirqs+0x158/0x870
[  541.855540][    C1]  ? __irq_exit_rcu+0x5f/0x150
[  541.855561][    C1]  __irq_exit_rcu+0x5f/0x150
[  541.855577][    C1]  irq_exit_rcu+0x9/0x30
[  541.855591][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  541.855605][    C1]  </IRQ>
[  541.855612][    C1]  <TASK>
[  541.855619][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  541.855635][    C1] RIP: 0010:seqcount_lockdep_reader_access+0xed/0x100
[  541.855656][    C1] Code: 00 75 11 e8 25 80 fb f7 4d 85 f6 75 16 e8 1b 80 fb f7 eb 15 e8 14 80 fb f7 e8 6f a0 e4 01 4d 85 f6 74 ea e8 05 80 fb f7 fb 5b <41> 5e c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90
[  541.855668][    C1] RSP: 0018:ffffc90000a67970 EFLAGS: 00000293
[  541.855680][    C1] RAX: ffffffff89ca222b RBX: 0000000000000001 RCX: ffff888160a9d7c0
[  541.855691][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  541.855700][    C1] RBP: ffffc90000a67ad0 R08: ffffffff9011b1b7 R09: 1ffffffff2023636
[  541.855710][    C1] R10: dffffc0000000000 R11: fffffbfff2023637 R12: dffffc0000000000
[  541.855722][    C1] R13: ffff8881616a3318 R14: 0000000000000200 R15: 000000000000c7ab
[  541.855734][    C1]  ? seqcount_lockdep_reader_access+0xeb/0x100
[  541.855756][    C1]  gc_worker+0x304/0x1290
[  541.855779][    C1]  ? gc_worker+0x25d/0x1290
[  541.855799][    C1]  ? __pfx_gc_worker+0x10/0x10
[  541.855818][    C1]  ? process_scheduled_works+0xa8d/0x18c0
[  541.855836][    C1]  ? process_scheduled_works+0xa8d/0x18c0
[  541.855855][    C1]  process_scheduled_works+0xb6e/0x18c0
[  541.855884][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  541.855905][    C1]  ? assign_work+0x3d5/0x5e0
[  541.855924][    C1]  worker_thread+0xa53/0xfc0
[  541.855951][    C1]  kthread+0x388/0x470
[  541.855966][    C1]  ? __pfx_worker_thread+0x10/0x10
[  541.855982][    C1]  ? __pfx_kthread+0x10/0x10
[  541.855995][    C1]  ret_from_fork+0x51e/0xb90
[  541.856024][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  541.856041][    C1]  ? __switch_to+0xc7d/0x1450
[  541.856059][    C1]  ? __pfx_kthread+0x10/0x10
[  541.856072][    C1]  ret_from_fork_asm+0x1a/0x30
[  541.856155][    C1]  </TASK>
[  541.856830][    C0] task:syz.9.4258      state:R  running task     stack:26720 pid:17160 tgid:17160 ppid:9417   task_flags:0x400040 flags:0x00080000
[  542.026421][    C0] Call Trace:
[  542.027490][    C0]  <TASK>
[  542.028515][    C0]  __schedule+0x15dd/0x52d0
[  542.030062][    C0]  ? irqentry_exit+0x59e/0x620
[  542.031732][    C0]  ? trace_irq_disable+0x3b/0x150
[  542.033441][    C0]  ? __pfx___schedule+0x10/0x10
[  542.035049][    C0]  preempt_schedule_irq+0x4d/0xa0
[  542.036939][    C0]  irqentry_exit+0x599/0x620
[  542.038618][    C0]  ? trace_irq_disable+0x3b/0x150
[  542.040292][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  542.042264][    C0] RIP: 0010:unwind_next_frame+0x1445/0x23c0
[  542.044195][    C0] Code: 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 a0 5e b9 00 48 8b 3b 48 85 ff 0f 84 92 04 00 00 48 83 c7 20 e8 cb 1b 00 00 <48> 89 c3 4d 8d 7e 40 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc
[  542.050773][    C0] RSP: 0000:ffffc90003da7378 EFLAGS: 00000282
[  542.052745][    C0] RAX: 0000000000000000 RBX: ffffc90003da747e RCX: dffffc0000000000
[  542.055302][    C0] RDX: ffffffff909d2aec RSI: 0000000000000000 RDI: ffffc90003da7f68
[  542.057836][    C0] RBP: dffffc0000000000 R08: 000000000000001c R09: ffffffff8e75e5e0
[  542.060405][    C0] R10: ffffc90003da7498 R11: ffffffff81b0c390 R12: ffffc90003da7498
[  542.063347][    C0] R13: ffffc90003da7450 R14: ffffc90003da7448 R15: 1ffffffff213a55d
[  542.066593][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  542.069131][    C0]  ? unwind_next_frame+0x1445/0x23c0
[  542.071318][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  542.073445][    C0]  ? asm_exc_page_fault+0x26/0x30
[  542.075593][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  542.078147][    C0]  arch_stack_walk+0x11b/0x150
[  542.080171][    C0]  ? jbd2__journal_start+0x145/0x5b0
[  542.082400][    C0]  stack_trace_save+0xa9/0x100
[  542.084418][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  542.086658][    C0]  kasan_save_track+0x3e/0x80
[  542.088670][    C0]  ? kasan_save_track+0x3e/0x80
[  542.090644][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[  542.092371][    C0]  ? kmem_cache_alloc_noprof+0x2bc/0x650
[  542.094186][    C0]  ? jbd2__journal_start+0x145/0x5b0
[  542.096404][    C0]  ? __ext4_journal_start_sb+0x203/0x620
[  542.098736][    C0]  ? ext4_dirty_inode+0x93/0x110
[  542.100790][    C0]  ? __mark_inode_dirty+0x3a4/0x1470
[  542.102989][    C0]  ? file_update_time_flags+0x3ee/0x4a0
[  542.105278][    C0]  ? ext4_page_mkwrite+0x219/0x11a0
[  542.106956][    C0]  ? do_page_mkwrite+0x14d/0x310
[  542.108560][    C0]  ? do_pte_missing+0x69d/0x3490
[  542.110309][    C0]  ? handle_mm_fault+0x1bec/0x3310
[  542.112435][    C0]  ? do_user_addr_fault+0xa73/0x1340
[  542.114648][    C0]  ? exc_page_fault+0x6a/0xc0
[  542.116621][    C0]  ? asm_exc_page_fault+0x26/0x30
[  542.118333][    C0]  __kasan_slab_alloc+0x6c/0x80
[  542.119959][    C0]  kmem_cache_alloc_noprof+0x2bc/0x650
[  542.121741][    C0]  ? jbd2__journal_start+0x145/0x5b0
[  542.123471][    C0]  ? kmem_cache_alloc_noprof+0x15a/0x650
[  542.125275][    C0]  jbd2__journal_start+0x145/0x5b0
[  542.126940][    C0]  __ext4_journal_start_sb+0x203/0x620
[  542.128731][    C0]  ext4_dirty_inode+0x93/0x110
[  542.130308][    C0]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  542.132034][    C0]  __mark_inode_dirty+0x3a4/0x1470
[  542.133697][    C0]  file_update_time_flags+0x3ee/0x4a0
[  542.135464][    C0]  ext4_page_mkwrite+0x219/0x11a0
[  542.137451][    C0]  ? __pfx_filemap_fault+0x10/0x10
[  542.139152][    C0]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  542.140941][    C0]  ? lruvec_stat_mod_folio+0x264/0x4b0
[  542.143100][    C0]  do_page_mkwrite+0x14d/0x310
[  542.144800][    C0]  do_pte_missing+0x69d/0x3490
[  542.146369][    C0]  handle_mm_fault+0x1bec/0x3310
[  542.148002][    C0]  ? handle_mm_fault+0xee/0x3310
[  542.149689][    C0]  ? __pfx_handle_mm_fault+0x10/0x10
[  542.151502][    C0]  ? lock_vma_under_rcu+0x45a/0x500
[  542.153619][    C0]  ? sched_clock+0x3f/0x60
[  542.155188][    C0]  do_user_addr_fault+0xa73/0x1340
[  542.156887][    C0]  ? rcu_is_watching+0x15/0xb0
[  542.158518][    C0]  ? trace_page_fault_user+0x84/0x210
[  542.160395][    C0]  exc_page_fault+0x6a/0xc0
[  542.161887][    C0]  asm_exc_page_fault+0x26/0x30
[  542.163466][    C0] RIP: 0033:0x7f0dec4715e0
[  542.164858][    C0] RSP: 002b:00007fff6e1087a0 EFLAGS: 00010202
[  542.166863][    C0] RAX: 0000001b31824000 RBX: 0000000000000000 RCX: 00000000005ffde8
[  542.169555][    C0] RDX: 0000001b31823ffc RSI: 00000000005ffde8 RDI: 00007f0ded345700
[  542.172040][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f0dec802000
[  542.174533][    C0] R10: 00007f0ded345700 R11: 0000000000000000 R12: 0000000000000000
[  542.177028][    C0] R13: 000000000000071c R14: ffffffff816c013e R15: 00007f0ded345720
[  542.179691][    C0]  ? fpregs_assert_state_consistent+0xee/0x150
[  542.181718][    C0]  </TASK>
[  542.182731][    C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g84697 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  542.186360][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  542.189428][    C0] rcu: RCU grace-period kthread stack dump:
[  542.191306][    C0] task:rcu_preempt     state:R  running task     stack:27696 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  542.195474][    C0] Call Trace:
[  542.196487][    C0]  <TASK>
[  542.197446][    C0]  __schedule+0x15dd/0x52d0
[  542.198904][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  542.200490][    C0]  ? __pfx___schedule+0x10/0x10
[  542.202072][    C0]  ? schedule+0x90/0x360
[  542.203498][    C0]  schedule+0x164/0x360
[  542.205233][    C0]  schedule_timeout+0x158/0x2c0
[  542.207261][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  542.209499][    C0]  ? __pfx_process_timeout+0x10/0x10
[  542.211650][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  542.214045][    C0]  ? prepare_to_swait_event+0x340/0x370
[  542.216354][    C0]  rcu_gp_fqs_loop+0x312/0x11d0
[  542.218368][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  542.220501][    C0]  ? rcu_gp_init+0x1315/0x15b0
[  542.222493][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  542.224676][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  542.226863][    C0]  rcu_gp_kthread+0x9e/0x2b0
[  542.228818][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  542.230972][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  542.233388][    C0]  ? __kthread_parkme+0x7a/0x1f0
[  542.235477][    C0]  ? __kthread_parkme+0x19c/0x1f0
[  542.237593][    C0]  kthread+0x388/0x470
[  542.239319][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  542.241501][    C0]  ? __pfx_kthread+0x10/0x10
[  542.243455][    C0]  ret_from_fork+0x51e/0xb90
[  542.245386][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  542.247535][    C0]  ? __switch_to+0xc7d/0x1450
[  542.249525][    C0]  ? __pfx_kthread+0x10/0x10
[  542.251489][    C0]  ret_from_fork_asm+0x1a/0x30
[  542.253530][    C0]  </TASK>
[  542.254831][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  542.257485][    C0] CPU: 0 UID: 0 PID: 17170 Comm: syz.3.4260 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  542.261992][    C0] Tainted: [L]=SOFTLOCKUP
[  542.263807][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  542.267993][    C0] RIP: 0010:smp_call_function_many_cond+0xce5/0x12c0
[  542.270826][    C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 b4 e6 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 5f e2 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 43 e2
[  542.277794][    C0] RSP: 0018:ffffc90003d673e0 EFLAGS: 00000246
[  542.279745][    C0] RAX: ffffffff81b9bfed RBX: 1ffff110478c813d RCX: 0000000000080000
[  542.282268][    C0] RDX: ffffc9002422c000 RSI: 000000000007ffff RDI: 0000000000080000
[  542.284898][    C0] RBP: ffffc90003d67520 R08: ffffffff9011b1b7 R09: 1ffffffff2023636
[  542.287409][    C0] R10: dffffc0000000000 R11: fffffbfff2023637 R12: ffff88823c6409e8
[  542.289984][    C0] R13: dffffc0000000000 R14: ffff88812103c000 R15: 0000000000000001
[  542.292501][    C0] FS:  00007f912f3076c0(0000) GS:ffff88818de5d000(0000) knlGS:0000000000000000
[  542.295389][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  542.297473][    C0] CR2: 0000001b30a18ff8 CR3: 0000000113b94000 CR4: 00000000000006f0
[  542.300010][    C0] Call Trace:
[  542.301106][    C0]  <TASK>
[  542.302092][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  542.303742][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  542.305769][    C0]  ? __SCT__tp_func_azx_runtime_resume+0x8/0x8
[  542.307795][    C0]  ? __pfx___text_poke+0x10/0x10
[  542.309438][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  542.311061][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  542.312699][    C0]  smp_text_poke_batch_finish+0x5f5/0x1160
[  542.314570][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  542.316602][    C0]  ? arch_static_call_transform+0x2d/0xc0
[  542.318430][    C0]  ? __SCT__tp_func_azx_runtime_resume+0x8/0x8
[  542.320389][    C0]  __static_call_transform+0x4ff/0x790
[  542.322175][    C0]  ? __SCT__tp_func_azx_runtime_resume+0x8/0x8
[  542.324329][    C0]  ? 0xffffffffa0003880
[  542.325677][    C0]  ? __pfx___static_call_transform+0x10/0x10
[  542.327598][    C0]  ? __SCT__tp_func_azx_runtime_resume+0x8/0x8
[  542.329574][    C0]  ? __static_call_validate+0x16f/0x270
[  542.331570][    C0]  ? 0xffffffffa0003880
[  542.333012][    C0]  ? __SCT__tp_func_azx_runtime_resume+0x8/0x8
[  542.335012][    C0]  arch_static_call_transform+0x98/0xc0
[  542.337074][    C0]  __static_call_update+0xf2/0x620
[  542.338988][    C0]  ? 0xffffffffa0003880
[  542.340514][    C0]  ? 0xffffffffa0003880
[  542.342085][    C0]  ? __SCT__tp_func_azx_runtime_resume+0x8/0x8
[  542.344356][    C0]  ? __pfx_sort+0x10/0x10
[  542.345766][    C0]  ? __pfx___static_call_update+0x10/0x10
[  542.347681][    C0]  ? 0xffffffffa0003880
[  542.349067][    C0]  ? 0xffffffffa0003880
[  542.350507][    C0]  bpf_dispatcher_change_prog+0xbee/0xd70
[  542.352358][    C0]  ? 0xffffffffa0003880
[  542.353757][    C0]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[  542.355783][    C0]  ? 0xffffffffa0000858
[  542.357152][    C0]  ? _copy_from_user+0x94/0xb0
[  542.358666][    C0]  ? bpf_test_init+0x113/0x150
[  542.360232][    C0]  ? xdp_convert_md_to_buff+0x5b/0x330
[  542.361986][    C0]  bpf_prog_test_run_xdp+0x794/0x1160
[  542.363743][    C0]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  542.365605][    C0]  ? __fget_files+0x2a/0x420
[  542.367100][    C0]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  542.368963][    C0]  bpf_prog_test_run+0x2c7/0x340
[  542.370577][    C0]  __sys_bpf+0x643/0x950
[  542.371933][    C0]  ? __pfx___sys_bpf+0x10/0x10
[  542.373481][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  542.375333][    C0]  ? rcu_is_watching+0x15/0xb0
[  542.376952][    C0]  __x64_sys_bpf+0x7c/0x90
[  542.378379][    C0]  do_syscall_64+0x14d/0xf80
[  542.379855][    C0]  ? trace_irq_disable+0x3b/0x150
[  542.381459][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.383349][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.385280][    C0] RIP: 0033:0x7f912e39ce59
[  542.387132][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  542.393861][    C0] RSP: 002b:00007f912f307028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  542.396575][    C0] RAX: ffffffffffffffda RBX: 00007f912e616090 RCX: 00007f912e39ce59
[  542.399119][    C0] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  542.401662][    C0] RBP: 00007f912e432d6f R08: 0000000000000000 R09: 0000000000000000
[  542.404211][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  542.406750][    C0] R13: 00007f912e616128 R14: 00007f912e616090 R15: 00007ffff70bfe08
[  542.409355][    C0]  </TASK>
