last executing test programs:

1.730707299s ago: executing program 1 (id=4611):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x150, 0x150, 0x0, 0x0, 0x240, 0x238, 0x238, 0x240, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'batadv0\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0x8}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @common=@inet=@hashlimit1={{0x58}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@empty, @local, [0xff000000, 0xffffffff, 0xffffffff, 0xff], [0xff000000, 0xff, 0xff000000, 0xff], 'sit0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x3b, 0x3, 0x1, 0x21}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370)

1.730427929s ago: executing program 1 (id=4612):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x73}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0)

1.708554529s ago: executing program 1 (id=4616):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000300))

1.69664773s ago: executing program 1 (id=4618):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x2a0, 0xf0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @mcast2, [], [], 'wg0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth0_to_hsr\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@private0, @local, [], [], 'caif0\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)

1.679585569s ago: executing program 1 (id=4620):
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x2, 0x0, &(0x7f0000000040), 0x0)

1.02322577s ago: executing program 2 (id=4709):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSKBLED(r0, 0x4b65, 0xfdfd)

1.00621781s ago: executing program 2 (id=4712):
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
munlock(&(0x7f0000ff3000/0xa000)=nil, 0xa000)

999.41092ms ago: executing program 2 (id=4714):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)

933.59379ms ago: executing program 2 (id=4720):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

919.51323ms ago: executing program 2 (id=4721):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast1, 0x80000006}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000240)="8000f7ffffffffff", 0x8}], 0x1, &(0x7f0000000100)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x2e, 0x0, 0x2, 0x4}}}], 0x18}}], 0x1, 0x84)

763.31522ms ago: executing program 1 (id=4723):
syz_mount_image$f2fs(&(0x7f0000000680), &(0x7f0000010280)='./mnt\x00', 0x40004c0, &(0x7f0000000580)=ANY=[], 0x1, 0x1023a, &(0x7f0000020500)="$eJzs3E9rHGUcB/DfNjZUW2sQD958QIUNmGX/JEXrJVhKD5oSbD162Oxulm2T3ZBNNrEX9eCfF+FNT74HX4A3Lz30HQjeBC9FUHZmIloEa93ums3nAzPfmWcmv+eZZSH8hpAAzqyl9MvPpbgcz0bEQkRcisiOS8WWWc/j5Yh4JSLO/WkrFeN/DCxGxHMRcXlcPK9ZKi59/d3nH37z47uvf/Xt9wvVL7/4aXZPDczaaxGxu5cfH+3mOejmeacYb456We6ujorML+zeLc4HeR51trIKR82T+5pZNrr5/YO9w+E4t3earXF2e9vZ+F4/n3A46p7UyX7gTnM/O293trLsDQdZdu/l6zou8t7wIK/TLup9lJWPg4OTzMc7x538efbuZtnqHxTjed1Bu3M8zlGRxXTR3nryz/e0eK/XPzxOo87+sDfop7VKrVqpruy3rqxUq7W3GivddnO7daVTX203t1dTubM+HOwsp3K31UrlG9euLadatVKvVN9IN25+kHbaqTzOd3r9w4PeznA51SuNtUptOb1aS7c2NtPm+9evb2zeThuDfro5GKVGNdUaV9fqVxtvps1bt1O9Wq96/qn6dMrzMWdKs14AwOmj/wdm4Yn6/wv5+F/7//MRof8/rf5V/zv+5TRn/e9Z7/+1b/wnvkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGfWxR/ePswOlvLzc8X488XQi8V5qbj2298oPVJzYVw3Is4/5v2flSIWizlOtmciYr3Yfn3h6X4GAAAAMM8ePCzfL2Xder5bmvWCmKbFbF+69MmE6mWvdSb2HcpeRL00qWoL2fom9aQXo3hDNRHnx7sLk6r2WBamOhsAAPD/8A+dwMfTWgcAAADwVDz6Z/gAAADA/NH/AwAAwPzL+n///w8AAADm24OH5fuzXgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Dt7d3OqMBAEAHjynnoJotiOF0vwYCuWYCFWYCteU4c3kSjiCCLiD1GU8H0wJJOE7M5x9zALAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNuV6/G82h7vikb/qffNvKseAAAA4I7h6fKXaT8fjTIv8t2ttfv1zsF/RJQR0X3y+0UR0csxztGJiEnGbvDp4gEAAKC9quVm+u05AAAAAAAAAAAAAAAAAAAAABd+ov/fahav9P+rHRwAAAAAj+j/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBgd15OAIBBGID2s0D3n7YIuoHg5T1IyDEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTZmXVq3Kg3/QsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM+OHJQAAAJREF3WAlayfxEvdhD5LeQ9mMsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfzurao/Ub8z8vuzXIQqAUBBF0SduwOTOzO7WNdkUZJKYHcRz4PPCL7dO/S/Htj7t3ZBkfyv6i+buAAAAAP5grJe61a+dGoMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk905NAIYBsEw2tLrOgyT/YeJ4LA5VNR7hl98AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAY+UbF+0TPqAkAQMm+earWf+cbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDNDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UaHRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXwEAAP//CR8ZVA==")

763.21619ms ago: executing program 2 (id=4724):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)

201.81051ms ago: executing program 0 (id=4767):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x65, 0x800, 0x0, 0x2f, 0x0, @remote, @remote}}}})

178.52049ms ago: executing program 3 (id=4770):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00')
read$FUSE(r0, 0x0, 0x0)

159.128851ms ago: executing program 3 (id=4771):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00')
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/29, 0x1d}], 0x1, 0x0, 0x0)

158.966971ms ago: executing program 4 (id=4772):
munmap(&(0x7f00007fe000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000)

154.37602ms ago: executing program 0 (id=4773):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a, 0x7}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278)

128.11387ms ago: executing program 4 (id=4774):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setregid(0x0, 0x0)

125.75964ms ago: executing program 3 (id=4775):
r0 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xff\x90\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
fcntl$addseals(r0, 0x409, 0x20)

104.533991ms ago: executing program 0 (id=4776):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'tunl0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x700, 0x20, 0xffff, 0x7, {{0x5, 0x4, 0x1, 0x2, 0x14, 0x64, 0x0, 0xe, 0x29, 0x0, @broadcast, @rand_addr=0x64010102}}}})

103.457211ms ago: executing program 4 (id=4777):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/uevent_seqnum', 0x0, 0x0)
lseek(r0, 0x200000000000000, 0x1)

90.006201ms ago: executing program 3 (id=4778):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
preadv(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x2}], 0x3e8, 0x0, 0x0)

83.842011ms ago: executing program 4 (id=4779):
r0 = syz_clone(0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0)
rt_sigqueueinfo(r0, 0x9, &(0x7f00000007c0)={0x0, 0x0, 0xffffffc0})

77.97158ms ago: executing program 0 (id=4780):
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000004640), 0x0, 0x0)
preadv(r0, &(0x7f0000004bc0)=[{&(0x7f0000004a00)=""/20, 0x14}], 0x1, 0xffff7fff, 0x4040)

55.0267ms ago: executing program 3 (id=4781):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x2}]}, 0x10)

42.49305ms ago: executing program 0 (id=4782):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KDSIGACCEPT(r0, 0x5405, 0xfffffffffffffffd)

41.31756ms ago: executing program 4 (id=4783):
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000140)={'vlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x0, 0x0, 0x0, 0xfff6, 0x0, 0x0, 0x0, 0xf, 0x6, 0x1, 0x0, 0x0, 0x2, 0x0, 0x44, 0x0, [0x0, 0x1]}})

27.7681ms ago: executing program 3 (id=4784):
r0 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00')
getdents(r0, 0x0, 0x500)

10.04431ms ago: executing program 4 (id=4785):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x5, 0x0, &(0x7f0000000180))

0s ago: executing program 0 (id=4786):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0)
writev(r0, &(0x7f0000000380)=[{&(0x7f0000000e40)="c15b", 0x2}], 0x1)

kernel console output (not intermixed with test programs):

ice strings: Mfr=1, Product=2, SerialNumber=3
[  142.839890][  T357] usb 4-1: Manufacturer: 嚸랹ܹ戲⮞愤煲끝㍩熬᯹ꙹ꿀쥂逓≯쩾⪀㬜ᮞ謳釀摰᬴咾즩䪷벆䝓냢駑캵ꂏ值ᕮ坔ㄳ蛲飺ꫲ懁ꙮ䱕⩅탿ꖜᱛ䨘쎎ᡫ
[  142.858234][   T39] usb 5-1: config 0 descriptor??
[  142.863049][  T357] usb 4-1: SerialNumber: syz
[  142.886836][ T1657] udevd[1657]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  142.971996][  T309] usb 3-1: Using ep0 maxpacket: 16
[  142.978052][  T309] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  142.991509][  T309] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  143.000375][  T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  143.008303][  T309] usb 3-1: SerialNumber: syz
[  143.087508][   T39] hub 5-1:0.125: bad descriptor, ignoring hub
[  143.093540][  T357] usb 4-1: USB disconnect, device number 62
[  143.099390][   T39] hub: probe of 5-1:0.125 failed with error -5
[  143.109404][   T39] usb 5-1: Found UVC 15.ff device syz (17dc:0202)
[  143.115730][   T39] usb 5-1: No valid video chain found.
[  143.143328][   T39] usb 5-1: USB disconnect, device number 61
[  143.234576][    T6] usb 3-1: USB disconnect, device number 56
[  143.382817][ T6558] loop1: detected capacity change from 0 to 128
[  143.389709][ T6558] FAT-fs (loop1): FAT read failed (blocknr 65312)
[  143.549314][  T309] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  143.701038][ T6582] loop3: detected capacity change from 0 to 1024
[  143.717784][ T6582] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  143.731106][  T653] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  143.752423][  T309] usb 1-1: Using ep0 maxpacket: 32
[  143.762757][ T6592] loop3: detected capacity change from 0 to 512
[  143.771175][  T309] usb 1-1: unable to get BOS descriptor or descriptor too short
[  143.781532][  T309] usb 1-1: config 2 has an invalid interface number: 149 but max is 0
[  143.795244][  T309] usb 1-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  143.806599][ T6592] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  143.818240][  T309] usb 1-1: config 2 has an invalid descriptor of length 175, skipping remainder of the config
[  143.836570][  T309] usb 1-1: config 2 has no interface number 0
[  143.842557][  T309] usb 1-1: config 2 interface 149 has no altsetting 0
[  143.859729][  T309] usb 1-1: New USB device found, idVendor=0421, idProduct=00ab, bcdDevice=e7.66
[  143.869169][ T6592] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  143.878280][  T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.886479][ T6592] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2914: invalid indirect mapped block 2683928664 (level 1)
[  143.900449][  T309] usb 1-1: Product: syz
[  143.904473][  T309] usb 1-1: Manufacturer: syz
[  143.908853][  T309] usb 1-1: SerialNumber: syz
[  143.913007][ T6592] EXT4-fs (loop3): Remounting filesystem read-only
[  143.923447][  T653] usb 2-1: Using ep0 maxpacket: 32
[  143.928857][ T6592] EXT4-fs (loop3): 1 truncate cleaned up
[  143.934002][ T6614] loop2: detected capacity change from 0 to 8192
[  143.935894][  T653] usb 2-1: unable to get BOS descriptor or descriptor too short
[  143.940685][ T6592] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  143.968223][  T653] usb 2-1: config 139 has an invalid interface number: 37 but max is 0
[  143.981544][  T302] EXT4-fs (loop3): unmounting filesystem.
[  143.987217][  T653] usb 2-1: config 139 has an invalid interface association descriptor of length 2, skipping
[  143.997479][ T6614]  loop2: p1 < > p2 p3 < p5 p6 > p4
[  143.998014][  T653] usb 2-1: config 139 has no interface number 0
[  144.008977][ T6614] loop2: partition table partially beyond EOD, truncated
[  144.019753][ T6614] loop2: p1 start 277760 is beyond EOD, truncated
[  144.026106][ T6614] loop2: p2 start 6684676 is beyond EOD, truncated
[  144.030248][  T653] usb 2-1: config 139 interface 37 altsetting 1 has an invalid endpoint with address 0x80, skipping
[  144.045918][ T6614] loop2: p5 start 6684676 is beyond EOD, truncated
[  144.046087][  T653] usb 2-1: config 139 interface 37 has no altsetting 0
[  144.064306][  T103]  loop2: p1 < > p2 p3 < p5 p6 > p4
[  144.070810][  T653] usb 2-1: New USB device found, idVendor=7392, idProduct=4085, bcdDevice=49.58
[  144.073186][  T103] loop2: partition table partially beyond EOD, truncated
[  144.089773][  T653] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.089801][  T103] loop2: p1 start 277760 is beyond EOD, 
[  144.097635][  T653] usb 2-1: Product: syz
[  144.097650][  T653] usb 2-1: Manufacturer: syz
[  144.097663][  T653] usb 2-1: SerialNumber: syz
[  144.117389][  T103] truncated
[  144.120352][  T103] loop2: p2 start 6684676 is beyond EOD, truncated
[  144.127753][  T103] loop2: p5 start 6684676 is beyond EOD, truncated
[  144.137777][  T309] rndis_host 1-1:2.149: skipping garbage
[  144.143234][  T309] rndis_host 1-1:2.149: invalid descriptor buffer length
[  144.156505][  T309] usb 1-1: bad CDC descriptors
[  144.161615][  T309] cdc_acm 1-1:2.149: skipping garbage
[  144.166843][  T309] cdc_acm 1-1:2.149: invalid descriptor buffer length
[  144.174479][  T309] usb 1-1: USB disconnect, device number 65
[  144.180716][  T301] __loop_clr_fd: partition scan of loop2 failed (rc=-16)
[  144.182685][  T415] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  144.187684][  T371] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  144.206607][ T1657] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  144.206872][  T371] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  144.226856][ T1657] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  144.231818][  T415] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  144.251137][  T371] Buffer I/O error on dev loop2p4, logical block 1, async page read
[  144.256757][ T1657] Buffer I/O error on dev loop2p3, logical block 0, async page read
[  144.259346][  T415] Buffer I/O error on dev loop2p6, logical block 1, async page read
[  144.276732][ T1657] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  144.286517][ T1657] Buffer I/O error on dev loop2p3, logical block 0, async page read
[  144.294563][ T1657] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  144.303765][ T1657] Buffer I/O error on dev loop2p3, logical block 0, async page read
[  144.311843][ T1657] Buffer I/O error on dev loop2p3, logical block 0, async page read
[  144.320437][ T1657] Buffer I/O error on dev loop2p3, logical block 0, async page read
[  144.339803][  T653] usb 2-1: USB disconnect, device number 62
[  144.340472][  T371] udevd[371]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  144.347703][  T530] udevd[530]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  144.356225][  T415] udevd[415]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[  144.374247][  T357] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  144.392598][  T371] udevd[371]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[  144.392609][ T1657] udevd[1657]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  144.554354][   T39] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  144.587399][  T357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  144.596965][  T357] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  144.606483][  T357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  144.615978][  T357] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  144.626740][  T357] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  144.635680][  T357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.643531][  T357] usb 4-1: Product: syz
[  144.647490][  T357] usb 4-1: Manufacturer: syz
[  144.651978][  T357] usb 4-1: SerialNumber: syz
[  144.657806][  T357] usb 4-1: config 0 descriptor??
[  144.663342][  T357] ums-isd200 4-1:0.0: USB Mass Storage device detected
[  144.715045][  T558] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  144.757449][   T39] usb 3-1: Using ep0 maxpacket: 32
[  144.763495][   T39] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.774278][   T39] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.783816][   T39] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  144.793342][   T39] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  144.803172][   T39] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  144.812755][   T39] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  144.822626][   T39] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  144.836119][   T39] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  144.844987][   T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  144.852783][   T39] usb 3-1: SerialNumber: syz
[  144.858738][   T39] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  144.866460][   T39] cdc_acm: probe of 3-1:1.0 failed with error -12
[  144.878536][  T357] scsi host1: usb-storage 4-1:0.0
[  144.884759][  T357] usb 4-1: USB disconnect, device number 63
[  144.932094][  T558] usb 5-1: config index 0 descriptor too short (expected 19, got 18)
[  144.943531][  T558] usb 5-1: config 241 has no interfaces?
[  144.949018][  T558] usb 5-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[  144.962129][  T558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.003220][  T493] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  145.073724][  T558] usb 3-1: USB disconnect, device number 57
[  145.189997][    T6] usb 5-1: USB disconnect, device number 62
[  145.195764][  T493] usb 1-1: Using ep0 maxpacket: 8
[  145.202469][  T493] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.213240][  T493] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.222738][  T493] usb 1-1: New USB device found, idVendor=0404, idProduct=f002, bcdDevice= 0.00
[  145.231600][  T493] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.239854][  T493] usb 1-1: config 0 descriptor??
[  145.245518][  T493] usbhid 1-1:0.0: can't add hid device: -22
[  145.251342][  T653] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  145.258701][  T493] usbhid: probe of 1-1:0.0 failed with error -22
[  145.453627][  T653] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.468526][  T653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  145.479499][  T653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  145.489196][  T653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  145.498777][  T653] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9
[  145.507892][  T653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.517116][    T6] usb 1-1: USB disconnect, device number 66
[  145.523816][  T653] usb 2-1: config 0 descriptor??
[  145.532537][  T653] usb 2-1: MIDIStreaming interface descriptor not found
[  145.748605][    T6] usb 2-1: USB disconnect, device number 63
[  145.762913][ T6691] loop4: detected capacity change from 0 to 128
[  145.769503][ T6691] FAT-fs (loop4): bogus number of FAT sectors
[  145.775550][ T6691] FAT-fs (loop4): Can't find a valid FAT filesystem
[  145.858580][  T653] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  145.943993][  T558] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  146.050881][  T653] usb 4-1: Using ep0 maxpacket: 32
[  146.056727][   T28] audit: type=1326 audit(1868261652.777:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.0.2972" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7588185d19 code=0x0
[  146.057218][  T653] usb 4-1: config 0 has an invalid interface number: 151 but max is 0
[  146.087317][  T653] usb 4-1: config 0 has no interface number 0
[  146.094972][  T653] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  146.103807][  T653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.111725][  T653] usb 4-1: Product: syz
[  146.115881][  T653] usb 4-1: Manufacturer: syz
[  146.120471][  T653] usb 4-1: SerialNumber: syz
[  146.125755][  T653] usb 4-1: config 0 descriptor??
[  146.126204][  T357] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  146.139445][  T558] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[  146.156274][  T558] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.168243][  T558] usb 3-1: config 0 descriptor??
[  146.174398][  T558] usb 3-1: bad CDC descriptors
[  146.359004][  T653] usb 4-1: USB disconnect, device number 64
[  146.371682][  T357] usb 5-1: Using ep0 maxpacket: 16
[  146.380606][  T357] usb 5-1: config 0 has an invalid interface number: 195 but max is 0
[  146.388908][  T357] usb 5-1: config 0 has no interface number 0
[  146.392664][  T493] usb 3-1: USB disconnect, device number 58
[  146.396968][  T357] usb 5-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=95.ff
[  146.409457][  T357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.417278][  T357] usb 5-1: Product: syz
[  146.421174][  T357] usb 5-1: Manufacturer: syz
[  146.425753][  T357] usb 5-1: SerialNumber: syz
[  146.430649][  T357] usb 5-1: config 0 descriptor??
[  146.436236][  T357] rndis_host 5-1:0.195: More than one union descriptor, skipping ...
[  146.444123][  T357] usb 5-1: bad CDC descriptors
[  146.448904][  T357] cdc_acm 5-1:0.195: More than one union descriptor, skipping ...
[  146.457185][    T6] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  146.586171][  T530] udevd[530]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  146.649670][    T6] usb 1-1: Using ep0 maxpacket: 16
[  146.655867][    T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.665939][    T6] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30
[  146.667802][  T357] usb 5-1: USB disconnect, device number 63
[  146.676804][ T1479] usb 2-1: new low-speed USB device number 64 using dummy_hcd
[  146.689742][    T6] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254
[  146.703407][    T6] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  146.712243][    T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  146.720113][    T6] usb 1-1: SerialNumber: syz
[  146.725716][    T6] cdc_acm 1-1:1.0: Zero length descriptor references
[  146.732209][    T6] cdc_acm: probe of 1-1:1.0 failed with error -22
[  146.738585][    T6] usb-storage 1-1:1.0: USB Mass Storage device detected
[  146.746004][    T6] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  146.896915][ T1479] usb 2-1: unable to get BOS descriptor or descriptor too short
[  146.905089][ T1479] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  146.915757][ T1479] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  146.925759][ T1479] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  146.951658][    T6] usb 1-1: USB disconnect, device number 67
[  146.964627][ T1479] usb 2-1: string descriptor 0 read error: -22
[  146.973835][ T1479] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  146.981020][ T6752] IPv6: addrconf: prefix option has invalid lifetime
[  146.983077][ T1479] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.009877][   T28] audit: type=1400 audit(1868261653.675:213): avc:  denied  { create } for  pid=6754 comm="syz.2.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1
[  147.034206][ T6740] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  147.041564][ T6740] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  147.048964][ T6740] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  147.054040][ T6760] loop2: detected capacity change from 0 to 128
[  147.057808][ T1479] cdc_ether: probe of 2-1:1.0 failed with error -22
[  147.195612][ T6780] loop2: detected capacity change from 0 to 256
[  147.202141][ T6780] exFAT-fs (loop2): bogus sector size bits : 0
[  147.208238][ T6780] exFAT-fs (loop2): failed to read boot sector
[  147.214285][ T6780] exFAT-fs (loop2): failed to recognize exfat type
[  147.312378][  T357] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  147.360432][   T39] usb 2-1: USB disconnect, device number 64
[  147.370895][ T6803] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0003 with DS=0xe
[  147.457786][ T6815] loop2: detected capacity change from 0 to 512
[  147.464246][ T6815] EXT4-fs: Ignoring removed nomblk_io_submit option
[  147.471043][ T6815] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  147.484203][ T6815] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=a003e128, mo2=0000]
[  147.492032][ T6815] EXT4-fs (loop2): failed to initialize system zone (-117)
[  147.499499][ T6815] EXT4-fs (loop2): mount failed
[  147.516792][  T357] usb 4-1: unable to get BOS descriptor or descriptor too short
[  147.525102][  T357] usb 4-1: config 6 has an invalid interface number: 162 but max is 3
[  147.533267][  T357] usb 4-1: config 6 contains an unexpected descriptor of type 0x2, skipping
[  147.542002][  T357] usb 4-1: config 6 contains an unexpected descriptor of type 0x2, skipping
[  147.559541][  T357] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  147.579306][  T357] usb 4-1: config 6 has 2 interfaces, different from the descriptor's value: 4
[  147.588230][  T357] usb 4-1: config 6 has no interface number 1
[  147.595891][  T357] usb 4-1: config 6 interface 162 altsetting 249 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  147.612474][  T357] usb 4-1: config 6 interface 162 altsetting 249 has a duplicate endpoint with address 0x7, skipping
[  147.624514][  T357] usb 4-1: config 6 interface 162 altsetting 249 has a duplicate endpoint with address 0xB, skipping
[  147.639078][  T357] usb 4-1: config 6 interface 162 has no altsetting 0
[  147.655268][  T357] usb 4-1: New USB device found, idVendor=1199, idProduct=0026, bcdDevice=51.2c
[  147.664141][  T357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.686747][  T357] usb 4-1: Product: syz
[  147.690769][  T357] usb 4-1: Manufacturer: syz
[  147.695184][  T357] usb 4-1: SerialNumber: syz
[  147.703338][ T6758] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  147.814852][   T39] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  147.815566][ T6847] 9pnet: Unknown protocol version 9p20\++}
[  147.926756][  T357] hub 4-1:6.162: bad descriptor, ignoring hub
[  147.932780][  T357] hub: probe of 4-1:6.162 failed with error -5
[  147.939972][  T357] hub 4-1:6.0: bad descriptor, ignoring hub
[  147.945907][  T357] hub: probe of 4-1:6.0 failed with error -5
[  147.975220][    T6] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  147.986639][  T357] usb 4-1: USB disconnect, device number 65
[  148.017977][   T39] usb 5-1: Using ep0 maxpacket: 16
[  148.024199][   T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.034975][   T39] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  148.044527][   T39] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  148.058708][   T39] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  148.067575][   T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.075377][   T39] usb 5-1: Product: syz
[  148.079337][   T39] usb 5-1: Manufacturer: syz
[  148.083795][   T39] usb 5-1: SerialNumber: syz
[  148.146260][ T1479] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  148.167609][    T6] usb 3-1: Using ep0 maxpacket: 8
[  148.173537][    T6] usb 3-1: config 1 has an invalid interface number: 128 but max is 1
[  148.181600][    T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.191420][    T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  148.200135][    T6] usb 3-1: config 1 has no interface number 0
[  148.205989][    T6] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.216876][    T6] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.228162][    T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  148.237160][    T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.244995][    T6] usb 3-1: Product: syz
[  148.248949][    T6] usb 3-1: Manufacturer: syz
[  148.253396][    T6] usb 3-1: SerialNumber: syz
[  148.259037][    T6] cdc_wdm 3-1:1.128: skipping garbage
[  148.265327][    T6] cdc_wdm 3-1:1.128: cdc-wdm0: USB WDM device
[  148.274536][ T1139] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  148.308426][   T39] usb 5-1: USB disconnect, device number 64
[  148.338682][ T1479] usb 1-1: Using ep0 maxpacket: 32
[  148.344733][ T1479] usb 1-1: config 0 has an invalid interface number: 249 but max is 0
[  148.353079][ T1479] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.363001][ T1479] usb 1-1: config 0 has no interface number 0
[  148.368858][ T1479] usb 1-1: config 0 interface 249 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  148.383120][ T1479] usb 1-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=45.8a
[  148.391960][ T1479] usb 1-1: New USB device strings: Mfr=27, Product=2, SerialNumber=3
[  148.400013][ T1479] usb 1-1: Product: syz
[  148.404030][ T1479] usb 1-1: Manufacturer: syz
[  148.408493][ T1479] usb 1-1: SerialNumber: syz
[  148.413591][ T1479] usb 1-1: config 0 descriptor??
[  148.419161][ T1479] usb-storage 1-1:0.249: USB Mass Storage device detected
[  148.426625][ T1479] usb-storage 1-1:0.249: Quirks match for vid 054c pid 0069: 1
[  148.433992][ T1479] usb-storage 1-1:0.249: This device (054c,0069,458a S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.1.115-syzkaller-00017-g22b7ded8b55b)
[  148.433992][ T1479]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  148.474311][    T6] usb 3-1: USB disconnect, device number 59
[  148.499048][ T1139] usb 2-1: Using ep0 maxpacket: 32
[  148.505145][ T1139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  148.515716][ T1139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  148.527179][ T1139] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  148.537881][ T1139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  148.547391][ T1139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  148.556918][ T1139] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  148.567049][ T1139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  148.577215][ T1139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  148.577689][  T530] udevd[530]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  148.586751][ T1139] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  148.612943][ T1139] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9
[  148.621831][ T1139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.629739][ T1139] usb 2-1: Product: syz
[  148.637619][ T1139] usb 2-1: Manufacturer: syz
[  148.642213][ T1139] usb 2-1: SerialNumber: syz
[  148.646928][   T39] usb 1-1: USB disconnect, device number 68
[  148.653283][ T1139] usb 2-1: config 0 descriptor??
[  148.920562][   T39] usb 2-1: USB disconnect, device number 65
[  149.067775][ T6914] loop2: detected capacity change from 0 to 512
[  149.075021][ T6914] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  149.083498][ T6914] EXT4-fs (loop2): orphan cleanup on readonly fs
[  149.090285][ T6914] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0
[  149.100678][ T6914] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  149.109977][ T6914] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.3067: Failed to acquire dquot type 1
[  149.121334][ T6914] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3067: bg 0: block 40: padding at end of block bitmap is not set
[  149.135664][ T6914] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  149.144221][ T1139] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  149.144495][ T6914] EXT4-fs (loop2): 1 truncate cleaned up
[  149.157067][ T6914] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  149.183416][  T301] EXT4-fs (loop2): unmounting filesystem.
[  149.291954][  T357] usb 4-1: new full-speed USB device number 66 using dummy_hcd
[  149.343616][ T1139] usb 5-1: Using ep0 maxpacket: 32
[  149.349596][ T1139] usb 5-1: config 0 has an invalid interface number: 231 but max is 0
[  149.357823][ T1139] usb 5-1: config 0 has no interface number 0
[  149.363715][ T1139] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  149.373658][ T1139] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  149.384717][ T1139] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  149.393584][ T1139] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.401652][ T1139] usb 5-1: Product: syz
[  149.405616][ T1139] usb 5-1: Manufacturer: syz
[  149.410099][ T1139] usb 5-1: SerialNumber: syz
[  149.414985][ T1139] usb 5-1: config 0 descriptor??
[  149.420028][ T6876] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  149.426967][ T6876] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  149.435670][ T1139] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, c2:07:a6:7f:5c:16
[  149.484812][  T357] usb 4-1: config 8 has an invalid interface number: 9 but max is 0
[  149.498603][  T357] usb 4-1: config 8 has no interface number 0
[  149.526225][  T357] usb 4-1: config 8 interface 9 has no altsetting 0
[  149.538976][  T357] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=71.2b
[  149.547388][ T6962] loop2: detected capacity change from 0 to 256
[  149.550260][  T357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.571762][ T6962] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  149.573022][  T357] usb 4-1: Product: syz
[  149.588665][  T357] usb 4-1: Manufacturer: syz
[  149.591657][ T6962] exFAT-fs (loop2): Invalid exboot-signature(sector = 3): 0xaa550200
[  149.597801][  T357] usb 4-1: SerialNumber: syz
[  149.619025][ T6962] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0xd119abd2)
[  149.642980][ T6962] exFAT-fs (loop2): invalid boot region
[  149.643466][ T6978] loop1: detected capacity change from 0 to 256
[  149.654274][    T6] usb 5-1: USB disconnect, device number 65
[  149.660649][    T6] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  149.680062][ T6962] exFAT-fs (loop2): failed to recognize exfat type
[  149.680867][ T6978] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010099, chksum : 0xcdb4327f, utbl_chksum : 0xe619d30d)
[  149.835807][  T357] usb_ehset_test: probe of 4-1:8.9 failed with error -32
[  149.844108][  T357] usb 4-1: USB disconnect, device number 66
[  150.325378][ T7019] loop4: detected capacity change from 0 to 2048
[  150.415088][ T7019]  loop4: unable to read partition table
[  150.420670][ T7019] loop4: partition table beyond EOD, truncated
[  150.426694][ T7019] loop_reread_partitions: partition scan of loop4 () failed (rc=-5)
[  150.459681][  T103]  loop4: unable to read partition table
[  150.465211][  T103] loop4: partition table beyond EOD, truncated
[  150.485320][ T7025] loop4: detected capacity change from 0 to 128
[  150.509003][    T6] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  150.516445][ T1479] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  150.524294][  T530] blk_print_req_error: 2 callbacks suppressed
[  150.524311][  T530] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  150.541270][  T493] usb 2-1: new full-speed USB device number 66 using dummy_hcd
[  150.581724][ T7036] loop4: detected capacity change from 0 to 2048
[  150.680084][  T357] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  150.744277][    T6] usb 1-1: Using ep0 maxpacket: 8
[  150.750221][ T1479] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  150.759458][ T1479] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.767545][  T493] usb 2-1: unable to get BOS descriptor or descriptor too short
[  150.775144][    T6] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  150.783715][ T1479] usb 3-1: config 0 descriptor??
[  150.788530][    T6] usb 1-1: config 179 has no interface number 0
[  150.794580][    T6] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  150.805565][  T493] usb 2-1: not running at top speed; connect to a high speed hub
[  150.813216][    T6] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  150.824440][    T6] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  150.835889][    T6] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  150.846005][    T6] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  150.859126][  T493] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  150.869880][    T6] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  150.873763][  T357] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  150.878741][  T493] usb 2-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  150.886939][  T357] usb 4-1: config 0 has no interface number 0
[  150.899210][    T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.905395][  T357] usb 4-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023
[  150.913747][  T493] usb 2-1: config 1 interface 0 has no altsetting 0
[  150.923186][  T357] usb 4-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7
[  150.929108][ T7006] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  150.938275][  T357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.946420][    T6] xpad: probe of 1-1:179.65 failed with error -5
[  150.956316][  T357] usb 4-1: config 0 descriptor??
[  150.962506][  T493] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  150.964614][ T7021] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  150.973642][  T493] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.987320][  T493] usb 2-1: Product: syz
[  150.991561][  T493] usb 2-1: Manufacturer: syz
[  150.992228][ T1657] udevd[1657]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  150.996004][  T493] usb 2-1: SerialNumber: syz
[  151.016846][ T7015] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  151.052361][ T1479] usb 3-1: Cannot read MAC address
[  151.057374][ T1479] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71
[  151.066215][ T1479] usb 3-1: USB disconnect, device number 60
[  151.097059][  T653] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  151.195573][  T357] usb 1-1: USB disconnect, device number 69
[  151.241474][  T493] usb 2-1: bad CDC descriptors
[  151.249280][  T493] usb 2-1: USB disconnect, device number 66
[  151.266262][ T1139] usb 4-1: USB disconnect, device number 67
[  151.289630][  T653] usb 5-1: Using ep0 maxpacket: 16
[  151.295979][  T653] usb 5-1: unable to get BOS descriptor or descriptor too short
[  151.306436][  T653] usb 5-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40
[  151.315406][  T653] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.323460][  T653] usb 5-1: Product: syz
[  151.327424][  T653] usb 5-1: Manufacturer: syz
[  151.331856][  T653] usb 5-1: SerialNumber: syz
[  151.555865][  T653] usbhid 5-1:1.0: can't add hid device: -71
[  151.561665][  T653] usbhid: probe of 5-1:1.0 failed with error -71
[  151.568393][  T653] usb 5-1: USB disconnect, device number 66
[  151.900975][ T7095] loop1: detected capacity change from 0 to 1024
[  151.907703][ T7095] EXT4-fs: Invalid want_extra_isize 130
[  151.920357][  T493] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  151.941345][ T7101] loop1: detected capacity change from 0 to 1024
[  151.952598][ T7101] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  152.134300][  T493] usb 3-1: Using ep0 maxpacket: 16
[  152.140376][  T493] usb 3-1: config 0 has an invalid interface number: 104 but max is 1
[  152.148529][  T493] usb 3-1: config 0 has an invalid interface number: 104 but max is 1
[  152.156547][  T493] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  152.165222][  T493] usb 3-1: config 0 has no interface number 0
[  152.171142][  T493] usb 3-1: config 0 interface 104 altsetting 2 endpoint 0xC has invalid wMaxPacketSize 0
[  152.176957][ T1139] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  152.180768][  T493] usb 3-1: config 0 interface 104 has no altsetting 1
[  152.195994][  T493] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 7.36
[  152.204864][  T493] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.212649][  T493] usb 3-1: Product: syz
[  152.216624][  T493] usb 3-1: Manufacturer: syz
[  152.221070][  T493] usb 3-1: SerialNumber: syz
[  152.226203][  T493] usb 3-1: config 0 descriptor??
[  152.283876][  T357] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  152.369419][  T653] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  152.381307][ T1139] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  152.393491][ T1139] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.403431][ T1139] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  152.418585][ T1139] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  152.427489][ T1139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.435285][ T1139] usb 4-1: Product: syz
[  152.439243][ T1139] usb 4-1: Manufacturer: syz
[  152.443763][ T1139] usb 4-1: SerialNumber: syz
[  152.449424][ T1139] usb 4-1: config 0 descriptor??
[  152.454338][  T493] asix 3-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  152.456145][ T1139] usb-storage 4-1:0.0: USB Mass Storage device detected
[  152.464709][  T493] asix: probe of 3-1:0.104 failed with error -71
[  152.472188][ T1139] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  152.478875][  T493] usb 3-1: USB disconnect, device number 61
[  152.485483][  T357] usb 1-1: Using ep0 maxpacket: 16
[  152.497575][  T357] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  152.505580][  T357] usb 1-1: config 0 has no interface number 0
[  152.511692][  T357] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  152.521391][  T357] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  152.531311][  T357] usb 1-1: config 0 interface 41 has no altsetting 0
[  152.541059][  T357] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  152.549918][  T357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.557895][  T357] usb 1-1: Product: syz
[  152.562012][  T357] usb 1-1: Manufacturer: syz
[  152.566420][  T357] usb 1-1: SerialNumber: syz
[  152.571523][  T357] usb 1-1: config 0 descriptor??
[  152.576763][ T7119] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  152.583265][  T653] usb 2-1: Using ep0 maxpacket: 8
[  152.583955][ T7119] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  152.589843][  T653] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.605647][  T653] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  152.615752][  T653] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  152.624670][  T653] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.632467][  T653] usb 2-1: Product: syz
[  152.636445][  T653] usb 2-1: Manufacturer: syz
[  152.641113][  T653] usb 2-1: SerialNumber: syz
[  152.701737][ T1139] usb 4-1: USB disconnect, device number 68
[  152.818909][  T357] dm9601: probe of 1-1:0.41 failed with error -71
[  152.828077][  T357] sr9700: probe of 1-1:0.41 failed with error -71
[  152.835635][  T357] usb 1-1: USB disconnect, device number 70
[  152.863400][  T653] usb 2-1: 0:2 : does not exist
[  152.868101][  T653] usb 2-1: unit 6 not found!
[  152.876009][  T653] usb 2-1: USB disconnect, device number 67
[  153.325545][ T7154] loop4: detected capacity change from 0 to 1024
[  153.335392][ T7154] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  153.348955][ T7154] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869)
[  153.361760][ T7154] EXT4-fs error (device loop4): ext4_get_journal_inode:5721: comm syz.4.3170: inode #1: comm syz.4.3170: iget: illegal inode #
[  153.375025][ T7154] EXT4-fs (loop4): no journal found
[  153.380097][ T7154] EXT4-fs (loop4): can't get journal size
[  153.386071][ T7154] EXT4-fs (loop4): failed to initialize system zone (-22)
[  153.393011][ T7154] EXT4-fs (loop4): mount failed
[  153.438076][ T7171] tmpfs: Bad value for 'nr_inodes'
[  153.490896][ T7181] loop4: detected capacity change from 0 to 1024
[  153.501614][ T7181] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  153.504005][   T28] audit: type=1326 audit(1868261659.746:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7183 comm="syz.1.3184" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbfb585d19 code=0x0
[  153.510371][ T7181] EXT4-fs (loop4): orphan cleanup on readonly fs
[  153.538343][ T7181] EXT4-fs error (device loop4): ext4_free_blocks:6210: comm syz.4.3183: Freeing blocks not in datazone - block = 0, count = 4096
[  153.551707][ T7181] EXT4-fs (loop4): Remounting filesystem read-only
[  153.558203][ T7181] EXT4-fs (loop4): 1 orphan inode deleted
[  153.564001][ T7181] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  153.577564][  T653] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  153.618359][  T305] EXT4-fs (loop4): unmounting filesystem.
[  153.652418][  T357] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  153.659873][ T1139] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  153.770018][  T653] usb 3-1: Using ep0 maxpacket: 16
[  153.776100][  T653] usb 3-1: config 0 has an invalid interface number: 160 but max is 0
[  153.784220][  T653] usb 3-1: config 0 has no interface number 0
[  153.790068][  T653] usb 3-1: config 0 interface 160 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  153.799937][  T653] usb 3-1: config 0 interface 160 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  153.811175][  T653] usb 3-1: New USB device found, idVendor=07aa, idProduct=0017, bcdDevice=6c.f5
[  153.820045][  T653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.827872][  T653] usb 3-1: Product: syz
[  153.831808][  T653] usb 3-1: Manufacturer: syz
[  153.836270][  T653] usb 3-1: SerialNumber: syz
[  153.841557][  T653] usb 3-1: config 0 descriptor??
[  153.846740][ T7145] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  153.853688][ T7145] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  153.867286][  T357] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.877341][  T357] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  153.886218][  T357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.895200][ T1139] usb 1-1: config 255 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  153.907887][  T357] usb 4-1: config 0 descriptor??
[  153.912742][ T1139] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  153.922821][ T1139] usb 1-1: config 255 has no interfaces?
[  153.928570][  T357] usb 4-1: bad CDC descriptors
[  153.933827][ T1139] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  153.942703][ T1139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.983815][  T309] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  154.005193][ T1479] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  154.076516][  T653] asix 3-1:0.160 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  154.086638][  T653] asix: probe of 3-1:0.160 failed with error -71
[  154.093818][  T653] usb 3-1: USB disconnect, device number 62
[  154.145371][   T39] usb 4-1: USB disconnect, device number 69
[  154.167608][ T1139] usb 1-1: string descriptor 0 read error: -71
[  154.174067][ T1139] usb 1-1: USB disconnect, device number 71
[  154.187958][  T309] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  154.198024][ T1479] usb 5-1: too many configurations: 65, using maximum allowed: 8
[  154.198838][  T309] usb 2-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[  154.207158][ T1479] usb 5-1: config 0 has no interfaces?
[  154.216802][  T309] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  154.223448][ T1479] usb 5-1: config 0 has no interfaces?
[  154.230983][  T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.237196][ T1479] usb 5-1: config 0 has no interfaces?
[  154.246576][  T309] usb 2-1: invalid MIDI out EP 0
[  154.250105][ T1479] usb 5-1: config 0 has no interfaces?
[  154.257185][  T309] snd-usb-audio: probe of 2-1:27.0 failed with error -22
[  154.260199][ T1479] usb 5-1: config 0 has no interfaces?
[  154.272741][ T1479] usb 5-1: config 0 has no interfaces?
[  154.273609][ T1657] udevd[1657]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  154.280392][ T1479] usb 5-1: config 0 has no interfaces?
[  154.299932][ T1479] usb 5-1: config 0 has no interfaces?
[  154.305461][ T1479] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  154.314387][ T1479] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.322799][ T1479] usb 5-1: config 0 descriptor??
[  154.486157][ T1479] usb 2-1: USB disconnect, device number 68
[  154.549256][ T1139] usb 5-1: USB disconnect, device number 67
[  154.865849][ T7235] loop3: detected capacity change from 0 to 40427
[  154.872803][ T7235] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  154.887604][ T7235] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  154.896871][ T7235] F2FS-fs (loop3): invalid crc value
[  154.903703][ T7235] F2FS-fs (loop3): Found nat_bits in checkpoint
[  154.924613][   T39] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  154.932726][ T7235] F2FS-fs (loop3): Start checkpoint disabled!
[  154.939704][ T7235] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  154.946601][ T7235] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  155.128841][   T39] usb 3-1: config 0 has an invalid interface number: 149 but max is 0
[  155.138109][   T39] usb 3-1: config 0 has no interface number 0
[  155.146831][   T39] usb 3-1: config 0 interface 149 has no altsetting 0
[  155.159916][   T39] usb 3-1: New USB device found, idVendor=357d, idProduct=7788, bcdDevice=36.2f
[  155.168788][   T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.181150][ T1139] usb 1-1: new low-speed USB device number 72 using dummy_hcd
[  155.189296][   T39] usb 3-1: config 0 descriptor??
[  155.249226][   T28] audit: type=1400 audit(1868261661.385:215): avc:  denied  { create } for  pid=7312 comm="syz.3.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  155.385341][ T1139] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[  155.393521][ T1139] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  155.401538][ T1139] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  155.410355][  T357] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  155.417808][ T1139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  155.427770][   T39] usb 3-1: string descriptor 0 read error: -71
[  155.434221][   T39] usb-storage 3-1:0.149: USB Mass Storage device detected
[  155.442013][   T39] usb-storage 3-1:0.149: Quirks match for vid 357d pid 7788: 4800000
[  155.450638][ T1139] usb 1-1: string descriptor 0 read error: -22
[  155.456638][ T1139] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  155.465661][ T1139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.473893][ T1139] usb 1-1: config 0 descriptor??
[  155.478972][ T7252] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  155.486336][ T1139] hub 1-1:0.0: bad descriptor, ignoring hub
[  155.492296][ T1139] hub: probe of 1-1:0.0 failed with error -5
[  155.498786][   T39] usb 3-1: USB disconnect, device number 63
[  155.505532][ T1139] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13
[  155.523283][  T493] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  155.533937][  T309] usb 4-1: new full-speed USB device number 70 using dummy_hcd
[  155.619505][  T357] usb 2-1: Using ep0 maxpacket: 16
[  155.626135][  T357] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  155.637151][  T357] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  155.646898][  T357] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  155.657728][  T357] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  155.667683][  T357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.675583][  T357] usb 2-1: Product: syz
[  155.679460][  T357] usb 2-1: Manufacturer: syz
[  155.683919][  T357] usb 2-1: SerialNumber: syz
[  155.704869][  T653] usb 1-1: USB disconnect, device number 72
[  155.726374][  T493] usb 5-1: Using ep0 maxpacket: 32
[  155.727136][  T309] usb 4-1: not running at top speed; connect to a high speed hub
[  155.732441][  T493] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  155.740005][  T309] usb 4-1: config 9 has an invalid interface number: 25 but max is 0
[  155.754352][  T493] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  155.757992][  T309] usb 4-1: config 9 has no interface number 0
[  155.766477][  T493] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.773785][  T309] usb 4-1: config 9 interface 25 altsetting 41 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  155.780129][  T493] usb 5-1: Product: syz
[  155.780151][  T493] usb 5-1: Manufacturer: syz
[  155.791389][  T309] usb 4-1: config 9 interface 25 has no altsetting 0
[  155.794858][  T493] usb 5-1: SerialNumber: syz
[  155.812803][  T309] usb 4-1: New USB device found, idVendor=11ff, idProduct=c604, bcdDevice=47.2f
[  155.821671][  T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.829656][  T309] usb 4-1: Product: syz
[  155.833708][  T309] usb 4-1: Manufacturer: syz
[  155.838068][  T309] usb 4-1: SerialNumber: syz
[  155.906515][  T357] cdc_ncm 2-1:1.0: bind() failure
[  155.912171][  T357] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  155.918966][  T357] cdc_ncm 2-1:1.1: bind() failure
[  155.928780][  T357] usb 2-1: USB disconnect, device number 69
[  155.985553][ T7322] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0xb
[  156.016288][  T493] usb 5-1: 2:1 : sample bitwidth 253 in over sample bytes 3
[  156.016871][ T7324] loop2: detected capacity change from 0 to 2048
[  156.023412][  T493] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  156.036122][ T7324] EXT4-fs: Ignoring removed mblk_io_submit option
[  156.042499][ T7324] EXT4-fs: Ignoring removed i_version option
[  156.048725][  T493] usb 5-1: USB disconnect, device number 68
[  156.051255][ T7324] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  156.063596][ T7324] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  156.072071][  T309] usb 4-1: USB disconnect, device number 70
[  156.088771][  T301] EXT4-fs (loop2): unmounting filesystem.
[  156.140013][ T7335] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd
[  156.538887][  T357] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  156.568169][ T7349] loop4: detected capacity change from 0 to 512
[  156.574883][ T7349] EXT4-fs (loop4): external journal device major/minor numbers have changed
[  156.583443][ T7349] EXT4-fs (loop4): failed to open journal device unknown-block(8,0) -16
[  156.666291][ T7356] loop3: detected capacity change from 0 to 2048
[  156.734187][  T357] usb 1-1: unable to get BOS descriptor or descriptor too short
[  156.753592][  T558] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  156.762289][  T357] usb 1-1: config 5 has an invalid interface number: 4 but max is 1
[  156.770290][  T357] usb 1-1: config 5 has an invalid interface number: 4 but max is 1
[  156.778050][  T357] usb 1-1: config 5 has an invalid interface number: 181 but max is 1
[  156.786050][  T357] usb 1-1: config 5 has no interface number 0
[  156.791892][  T357] usb 1-1: config 5 has no interface number 1
[  156.797894][  T357] usb 1-1: config 5 interface 4 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  156.809783][ T7361] loop4: detected capacity change from 0 to 40427
[  156.810420][  T357] usb 1-1: too many endpoints for config 5 interface 181 altsetting 39: 154, using maximum allowed: 30
[  156.827938][ T7361] F2FS-fs (loop4): Image doesn't support compression
[  156.834456][ T7361] F2FS-fs (loop4): fault_injection options not supported
[  156.841468][  T357] usb 1-1: config 5 interface 181 altsetting 39 has 1 endpoint descriptor, different from the interface descriptor's value: 154
[  156.841642][ T7361] F2FS-fs (loop4): fault_injection options not supported
[  156.854570][  T357] usb 1-1: config 5 interface 4 has no altsetting 0
[  156.862270][ T7361] F2FS-fs (loop4): invalid crc value
[  156.868137][  T357] usb 1-1: config 5 interface 4 has no altsetting 1
[  156.874501][ T7361] F2FS-fs (loop4): Found nat_bits in checkpoint
[  156.879552][  T357] usb 1-1: config 5 interface 181 has no altsetting 0
[  156.893700][  T357] usb 1-1: New USB device found, idVendor=05c6, idProduct=9070, bcdDevice=c4.b3
[  156.902638][  T357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.910443][  T357] usb 1-1: Product: syz
[  156.914485][  T357] usb 1-1: Manufacturer: syz
[  156.917715][ T7361] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  156.918884][  T357] usb 1-1: SerialNumber: syz
[  156.955279][  T558] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.966044][  T558] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.975751][  T558] usb 2-1: New USB device found, idVendor=10cf, idProduct=ea90, bcdDevice= 0.00
[  156.985413][  T558] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.009541][  T558] usb 2-1: config 0 descriptor??
[  157.052218][  T309] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  157.156283][  T357] usb 1-1: USB disconnect, device number 73
[  157.232543][  T558] usbhid 2-1:0.0: can't add hid device: -71
[  157.238747][  T558] usbhid: probe of 2-1:0.0 failed with error -71
[  157.267595][  T309] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.278031][  T558] usb 2-1: USB disconnect, device number 70
[  157.308596][  T309] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  157.318053][  T309] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  157.338952][  T309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  157.348194][  T309] usb 4-1: SerialNumber: syz
[  157.372916][ T7421] sit: non-ECT from 0.0.0.0 with TOS=0x3
[  157.395916][ T7397] loop2: detected capacity change from 0 to 40427
[  157.411698][ T7425] loop4: detected capacity change from 0 to 256
[  157.438082][  T371] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  157.442645][ T1657] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  157.580549][  T309] usb 4-1: invalid UAC_HEADER (v1)
[  157.586887][  T309] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  157.594213][  T309] usb 4-1: USB disconnect, device number 71
[  157.795321][ T7437] loop1: detected capacity change from 0 to 256
[  157.801519][  T493] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  157.807600][ T7437] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  157.821404][  T530] udevd[530]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  157.837172][  T558] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  158.003891][  T493] usb 5-1: too many configurations: 164, using maximum allowed: 8
[  158.017085][  T493] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  158.025983][  T493] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.034138][  T493] usb 5-1: config 0 descriptor??
[  158.047376][  T558] usb 3-1: config 9 has an invalid interface number: 32 but max is 0
[  158.055326][  T558] usb 3-1: config 9 has no interface number 0
[  158.061349][  T558] usb 3-1: config 9 interface 32 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  158.072125][  T558] usb 3-1: config 9 interface 32 altsetting 9 bulk endpoint 0x2 has invalid maxpacket 1024
[  158.081962][  T558] usb 3-1: config 9 interface 32 has no altsetting 0
[  158.090737][  T558] usb 3-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=44.b3
[  158.099582][  T558] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.107507][  T558] usb 3-1: Product: syz
[  158.111407][  T558] usb 3-1: Manufacturer: syz
[  158.115811][  T558] usb 3-1: SerialNumber: syz
[  158.122265][ T7433] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  158.163842][  T653] usb 2-1: new low-speed USB device number 71 using dummy_hcd
[  158.234382][ T7484] loop3: detected capacity change from 0 to 40427
[  158.241276][ T7484] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  158.248094][ T7484] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  158.259864][ T1139] usb 5-1: USB disconnect, device number 69
[  158.270753][  T309] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  158.356025][  T558] usb 3-1: USB disconnect, device number 64
[  158.368142][  T653] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2
[  158.378476][  T653] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 30768, setting to 8
[  158.389307][  T653] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  158.398100][  T653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.407287][ T7446] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  158.464599][  T309] usb 1-1: unable to get BOS descriptor or descriptor too short
[  158.472851][  T309] usb 1-1: config 6 has an invalid interface number: 162 but max is 3
[  158.481203][  T309] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping
[  158.489740][  T309] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping
[  158.498262][  T309] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  158.508166][  T309] usb 1-1: config 6 has 2 interfaces, different from the descriptor's value: 4
[  158.516885][  T309] usb 1-1: config 6 has no interface number 1
[  158.522764][  T309] usb 1-1: config 6 interface 162 altsetting 249 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  158.533723][  T309] usb 1-1: config 6 interface 162 altsetting 249 has a duplicate endpoint with address 0x7, skipping
[  158.544402][  T309] usb 1-1: config 6 interface 162 altsetting 249 has a duplicate endpoint with address 0xB, skipping
[  158.555092][  T309] usb 1-1: config 6 interface 162 has no altsetting 0
[  158.563071][  T309] usb 1-1: New USB device found, idVendor=1199, idProduct=0026, bcdDevice=51.2c
[  158.571975][  T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.579814][  T309] usb 1-1: Product: syz
[  158.584011][  T309] usb 1-1: Manufacturer: syz
[  158.588429][  T309] usb 1-1: SerialNumber: syz
[  158.594030][ T7479] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  158.630302][  T653] usb 2-1: string descriptor 0 read error: -71
[  158.638683][  T653] usb 2-1: USB disconnect, device number 71
[  158.719766][ T1139] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  158.819162][  T309] hub 1-1:6.162: bad descriptor, ignoring hub
[  158.825064][  T309] hub: probe of 1-1:6.162 failed with error -5
[  158.836359][  T309] hub 1-1:6.0: bad descriptor, ignoring hub
[  158.846749][  T309] hub: probe of 1-1:6.0 failed with error -5
[  158.867617][ T7502] loop4: detected capacity change from 0 to 8192
[  158.874506][  T530] udevd[530]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  158.880780][  T309] usb 1-1: USB disconnect, device number 74
[  158.906220][ T7502]  loop4: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 
[  158.907329][ T7502] loop4: p4 start 3388997632 is beyond EOD, 
[  158.999229][ T1139] usb 4-1: Using ep0 maxpacket: 8
[  159.011701][ T7502] truncated
[  159.016550][ T1139] usb 4-1: too many endpoints for config 1 interface 0 altsetting 1: 255, using maximum allowed: 30
[  159.036637][ T1139] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.049497][ T1139] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[  159.063572][ T1139] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  159.074674][ T1139] usb 4-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  159.092442][ T1139] usb 4-1: config 1 interface 0 has no altsetting 0
[  159.109209][ T1139] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  159.125968][ T1139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  159.144608][ T1139] usb 4-1: SerialNumber: syz
[  159.155847][ T7492] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  159.166168][ T7492] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  159.188177][ T1139] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  159.411529][ T1139] cdc_acm 4-1:1.0: ttyACM0: USB ACM device
[  159.426130][ T1139] usb 4-1: USB disconnect, device number 72
[  159.564371][  T309] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  159.601372][  T530] udevd[530]: inotify_add_watch(7, /dev/loop4p16, 10) failed: No such file or directory
[  159.601376][ T1657] udevd[1657]: inotify_add_watch(7, /dev/loop4p17, 10) failed: No such file or directory
[  159.604164][  T371] udevd[371]: inotify_add_watch(7, /dev/loop4p18, 10) failed: No such file or directory
[  159.632866][  T372] udevd[372]: inotify_add_watch(7, /dev/loop4p21, 10) failed: No such file or directory
[  159.632886][  T415] udevd[415]: inotify_add_watch(7, /dev/loop4p19, 10) failed: No such file or directory
[  159.645340][ T1654] udevd[1654]: inotify_add_watch(7, /dev/loop4p22, 10) failed: No such file or directory
[  159.653085][ T1658] udevd[1658]: inotify_add_watch(7, /dev/loop4p20, 10) failed: No such file or directory
[  159.663291][ T1655] udevd[1655]: inotify_add_watch(7, /dev/loop4p23, 10) failed: No such file or directory
[  159.682106][  T373] udevd[373]: inotify_add_watch(7, /dev/loop4p24, 10) failed: No such file or directory
[  159.682391][ T1656] udevd[1656]: inotify_add_watch(7, /dev/loop4p25, 10) failed: No such file or directory
[  159.702885][  T326] udevd[326]: inotify_add_watch(7, /dev/loop4p27, 10) failed: No such file or directory
[  159.702915][ T1659] udevd[1659]: inotify_add_watch(7, /dev/loop4p26, 10) failed: No such file or directory
[  159.719938][ T1657] udevd[1657]: inotify_add_watch(7, /dev/loop4p29, 10) failed: No such file or directory
[  159.781887][  T309] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  159.812630][  T309] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  159.848191][  T309] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 66
[  159.881946][  T309] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  159.936448][  T309] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  159.965260][  T309] usb 2-1: Product: syz
[  159.986088][  T309] usb 2-1: Manufacturer: syz
[  160.035766][ T7565] loop3: detected capacity change from 0 to 1024
[  160.067491][ T7565] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  160.121044][ T7565] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  160.125433][ T7526] loop2: detected capacity change from 0 to 131072
[  160.154360][  T302] EXT4-fs (loop3): unmounting filesystem.
[  160.162791][ T7526] F2FS-fs (loop2): fault_type options not supported
[  160.181384][ T7526] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name
[  160.190266][ T7526] F2FS-fs (loop2): heap/no_heap options were deprecated
[  160.201773][ T7526] F2FS-fs (loop2): inline xattr size is out of range: 6 ~ 903
[  160.224259][  T309] usb 2-1: USB disconnect, device number 72
[  160.334019][  T653] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  160.425066][ T7575] loop2: detected capacity change from 0 to 512
[  160.431494][ T7575] EXT4-fs: Ignoring removed mblk_io_submit option
[  160.443212][ T7575] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  160.451564][ T7575] EXT4-fs (loop2): 1 truncate cleaned up
[  160.457745][ T7575] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  160.473098][    T6] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  160.482239][  T301] EXT4-fs (loop2): unmounting filesystem.
[  160.500844][ T7579] loop2: detected capacity change from 0 to 512
[  160.510942][ T7579] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  160.523723][ T7579] block device autoloading is deprecated and will be removed.
[  160.532994][ T7579] EXT4-fs (loop2): external journal has bad superblock
[  160.547852][  T653] usb 1-1: Using ep0 maxpacket: 16
[  160.553941][  T653] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  160.562748][  T653] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  160.572917][  T653] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  160.579761][ T7563] loop4: detected capacity change from 0 to 131072
[  160.594891][ T7563] F2FS-fs (loop4): Test dummy encryption mode enabled
[  160.601873][ T7563] F2FS-fs (loop4): Test dummy encryption mode enabled
[  160.602867][  T653] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  160.613669][ T7563] F2FS-fs (loop4): invalid crc value
[  160.620503][  T653] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.630753][  T653] usb 1-1: Manufacturer: 蚞앢媘鑰晳᷒宒撯졾ȿ飲鑐璜ꃢ憘夻蔨䐰厷坘񇸨
[  160.643646][  T653] usb 1-1: SerialNumber: syz
[  160.652046][ T7563] F2FS-fs (loop4): Found nat_bits in checkpoint
[  160.670988][ T7590] loop2: detected capacity change from 0 to 512
[  160.677945][ T7590] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6
[  160.687244][    T6] usb 4-1: Using ep0 maxpacket: 8
[  160.696192][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  160.699495][ T7563] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  160.707020][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  160.730792][    T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  160.759360][    T6] usb 4-1: New USB device found, idVendor=1b3d, idProduct=9305, bcdDevice=55.68
[  160.775498][    T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.796445][    T6] usb 4-1: Product: syz
[  160.804553][    T6] usb 4-1: Manufacturer: syz
[  160.809177][    T6] usb 4-1: SerialNumber: syz
[  160.826026][    T6] usb 4-1: config 0 descriptor??
[  160.832159][    T6] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  160.858228][    T6] ftdi_sio ttyUSB0: unknown device type: 0x5568
[  160.894311][  T653] usb 1-1: 0:2 : does not exist
[  160.913521][  T653] usb 1-1: USB disconnect, device number 75
[  160.933241][ T7595] loop2: detected capacity change from 0 to 40427
[  160.956187][ T7595] F2FS-fs (loop2): Image doesn't support compression
[  160.963710][ T7595] F2FS-fs (loop2): invalid crc value
[  160.970309][ T7595] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  161.010177][ T7595] F2FS-fs (loop2): Start checkpoint disabled!
[  161.023854][ T7595] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  161.077056][    T6] usb 4-1: USB disconnect, device number 73
[  161.088432][    T6] ftdi_sio 4-1:0.0: device disconnected
[  161.094157][ T1479] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  161.107552][   T28] audit: type=1326 audit(1868261666.863:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7605 comm="syz.4.3382" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60ee385d19 code=0x0
[  161.209521][ T7614] loop4: detected capacity change from 0 to 2048
[  161.222064][ T7614]  loop4: p2 < > p4
[  161.226205][ T7614] loop4: p4 size 8192 extends beyond EOD, truncated
[  161.306918][ T1479] usb 2-1: Using ep0 maxpacket: 32
[  161.313046][ T1479] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.323212][ T1479] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  161.333542][ T1479] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  161.342657][ T1479] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.350486][ T1479] usb 2-1: Product: syz
[  161.354466][ T1479] usb 2-1: Manufacturer: syz
[  161.358871][ T1479] usb 2-1: SerialNumber: syz
[  161.499332][  T309] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  161.584395][ T1479] usb 2-1: USB disconnect, device number 73
[  161.606247][  T653] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  161.691830][  T309] usb 3-1: Using ep0 maxpacket: 16
[  161.698358][  T309] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.708802][  T309] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  161.719583][  T309] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  161.728809][  T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.736969][  T309] usb 3-1: Product: syz
[  161.740954][  T309] usb 3-1: Manufacturer: syz
[  161.745605][  T309] usb 3-1: SerialNumber: syz
[  161.755896][  T558] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  161.810484][  T653] usb 5-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf
[  161.819433][  T653] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.828839][  T653] ums-cypress 5-1:1.0: USB Mass Storage device detected
[  161.948365][  T558] usb 1-1: Using ep0 maxpacket: 8
[  161.954658][  T558] usb 1-1: unable to get BOS descriptor or descriptor too short
[  161.962850][  T558] usb 1-1: config 6 has an invalid interface number: 17 but max is 0
[  161.970870][  T558] usb 1-1: config 6 has no interface number 0
[  161.976860][  T558] usb 1-1: config 6 interface 17 altsetting 6 endpoint 0x4 has an invalid bInterval 238, changing to 11
[  161.987897][  T558] usb 1-1: config 6 interface 17 has no altsetting 0
[  161.994476][  T309] usb 3-1: 0:2 : does not exist
[  162.000495][  T558] usb 1-1: New USB device found, idVendor=05d1, idProduct=2023, bcdDevice=ca.16
[  162.009444][  T558] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.017326][  T558] usb 1-1: Product: syz
[  162.021451][  T309] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  162.028439][  T558] usb 1-1: Manufacturer: syz
[  162.032836][  T558] usb 1-1: SerialNumber: syz
[  162.041519][  T309] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5)
[  162.050489][  T309] usb 3-1: USB disconnect, device number 65
[  162.057900][  T653] usb 5-1: USB disconnect, device number 70
[  162.098010][  T493] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  162.165282][ T7657] loop1: detected capacity change from 0 to 256
[  162.171813][ T7657] FAT-fs (loop1): Unrecognized mount option "time_offset=0x&ffffffffffffe28" or missing value
[  162.256579][  T558] ftdi_sio 1-1:6.17: FTDI USB Serial Device converter detected
[  162.266113][  T558] ftdi_sio ttyUSB0: unknown device type: 0xca16
[  162.289759][  T558] usb 1-1: USB disconnect, device number 76
[  162.298062][  T558] ftdi_sio 1-1:6.17: device disconnected
[  162.301146][  T493] usb 4-1: Using ep0 maxpacket: 8
[  162.313181][  T493] usb 4-1: config 150 has an invalid interface number: 221 but max is 0
[  162.321394][  T493] usb 4-1: config 150 has an invalid interface descriptor of length 2, skipping
[  162.330808][  T493] usb 4-1: config 150 has no interface number 0
[  162.337149][  T493] usb 4-1: config 150 interface 221 altsetting 7 has an invalid endpoint with address 0x80, skipping
[  162.347854][  T493] usb 4-1: config 150 interface 221 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  162.361009][  T493] usb 4-1: config 150 interface 221 has no altsetting 0
[  162.369483][  T493] usb 4-1: New USB device found, idVendor=2100, idProduct=9e5f, bcdDevice=86.cb
[  162.378407][  T493] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.387033][  T493] usb 4-1: Product: syz
[  162.390994][  T493] usb 4-1: Manufacturer: syz
[  162.395427][  T493] usb 4-1: SerialNumber: syz
[  162.600517][ T1139] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  162.617251][  T493] ftdi_sio 4-1:150.221: FTDI USB Serial Device converter detected
[  162.626347][  T493] ftdi_sio ttyUSB0: unknown device type: 0x86cb
[  162.643659][  T493] usb 4-1: USB disconnect, device number 74
[  162.651087][  T493] ftdi_sio 4-1:150.221: device disconnected
[  162.713913][ T7690] loop2: detected capacity change from 0 to 40427
[  162.720686][ T7690] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  162.728936][ T7690] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  162.803564][ T1139] usb 2-1: Using ep0 maxpacket: 32
[  162.809664][ T1139] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  162.818457][ T1139] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  162.829130][ T1139] usb 2-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  162.840011][ T1139] usb 2-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping
[  162.863098][ T1139] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  162.882786][ T1139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.896534][ T7698] loop2: detected capacity change from 0 to 8192
[  162.902763][ T1139] usb 2-1: Product: syz
[  162.906668][ T1139] usb 2-1: Manufacturer: syz
[  162.911159][ T1139] usb 2-1: SerialNumber: syz
[  162.943895][ T7698]  loop2: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 
[  162.944774][ T7698] loop2: p4 start 3388997632 is beyond EOD, truncated
[  163.136967][ T1139] usb 2-1: USB disconnect, device number 74
[  163.188546][  T653] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  163.196072][  T493] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  163.380976][ T7708] loop3: detected capacity change from 0 to 512
[  163.402233][  T493] usb 1-1: Using ep0 maxpacket: 8
[  163.412616][  T653] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.419675][ T7708] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002]
[  163.437394][  T493] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  163.444458][ T7708] System zones: 1-12
[  163.452489][  T653] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  163.466311][  T493] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.476958][  T493] usb 1-1: config 0 has no interface number 0
[  163.483081][  T653] usb 5-1: New USB device found, idVendor=c98b, idProduct=0ac7, bcdDevice=ec.f6
[  163.483100][ T7708] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.3430: invalid indirect mapped block 8 (level 2)
[  163.492276][  T653] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.514697][ T7708] EXT4-fs (loop3): Remounting filesystem read-only
[  163.515750][  T493] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  163.531058][  T653] usb 5-1: config 0 descriptor??
[  163.535980][  T493] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.536055][ T7708] EXT4-fs (loop3): 1 truncate cleaned up
[  163.544269][  T493] usb 1-1: Product: syz
[  163.553708][  T653] usb 5-1: bad CDC descriptors
[  163.559420][ T7708] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  163.559482][  T493] usb 1-1: Manufacturer: syz
[  163.574220][  T493] usb 1-1: SerialNumber: syz
[  163.584128][  T493] usb 1-1: config 0 descriptor??
[  163.595128][  T493] usb 1-1: Found UVC 0.04 device syz (046d:08c3)
[  163.601431][  T493] usb 1-1: No streaming interface found for terminal 6.
[  163.605643][  T302] EXT4-fs (loop3): unmounting filesystem.
[  163.837759][  T493] usb 5-1: USB disconnect, device number 71
[  163.959570][  T558] usb 1-1: USB disconnect, device number 77
[  164.063652][ T7720] loop1: detected capacity change from 0 to 40427
[  164.081140][ T7720] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  164.110162][ T7720] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  164.269266][ T7739] loop2: detected capacity change from 0 to 40427
[  164.287847][ T7739] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(15) root(3)
[  164.305936][ T7739] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  164.324898][ T7739] F2FS-fs (loop2): heap/no_heap options were deprecated
[  164.332564][ T7739] F2FS-fs (loop2): fault_injection options not supported
[  164.353804][ T7739] F2FS-fs (loop2): Image doesn't support compression
[  164.371925][ T7739] F2FS-fs (loop2): Image doesn't support compression
[  164.385851][ T7739] F2FS-fs (loop2): fault_type options not supported
[  164.403364][ T7739] F2FS-fs (loop2): invalid crc value
[  164.410492][ T7739] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241045588246331391)
[  164.440676][ T7739] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  164.447814][ T7739] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  164.529125][ T7778] loop2: detected capacity change from 0 to 512
[  164.547359][ T7778] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6
[  164.695815][ T1479] usb 2-1: new full-speed USB device number 75 using dummy_hcd
[  164.706490][  T558] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  164.759930][  T493] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  164.889631][ T1479] usb 2-1: unable to get BOS descriptor or descriptor too short
[  164.898929][  T558] usb 4-1: Using ep0 maxpacket: 32
[  164.899045][ T1479] usb 2-1: not running at top speed; connect to a high speed hub
[  164.909106][  T558] usb 4-1: config 42 has an invalid interface number: 199 but max is 0
[  164.925176][ T1479] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.925870][  T558] usb 4-1: config 42 has an invalid interface number: 1 but max is 0
[  164.946082][ T1479] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  164.954897][  T558] usb 4-1: config 42 has 2 interfaces, different from the descriptor's value: 1
[  164.956590][  T493] usb 5-1: Using ep0 maxpacket: 16
[  164.968180][  T558] usb 4-1: config 42 has no interface number 0
[  164.975337][  T558] usb 4-1: config 42 interface 199 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  164.982247][ T1479] usb 2-1: config 1 has no interface number 1
[  164.995066][  T558] usb 4-1: config 42 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  164.998402][  T493] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8
[  165.012529][  T558] usb 4-1: config 42 interface 199 has no altsetting 0
[  165.023934][  T558] usb 4-1: config 42 interface 1 has no altsetting 0
[  165.035889][ T1479] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  165.046560][  T558] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=19.cb
[  165.050375][ T1479] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  165.068790][  T558] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.073127][  T493] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 5.00
[  165.085558][  T558] usb 4-1: Product: syz
[  165.099797][  T493] usb 5-1: New USB device strings: Mfr=251, Product=1, SerialNumber=3
[  165.102058][  T558] usb 4-1: Manufacturer: syz
[  165.109603][ T1479] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  165.123037][  T558] usb 4-1: SerialNumber: syz
[  165.123397][  T493] usb 5-1: Product: syz
[  165.133993][  T493] usb 5-1: Manufacturer: syz
[  165.145146][ T1479] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.153074][ T1479] usb 2-1: Product: syz
[  165.157284][  T493] usb 5-1: SerialNumber: syz
[  165.165904][ T1479] usb 2-1: Manufacturer: syz
[  165.170765][  T493] usb 5-1: config 0 descriptor??
[  165.175622][ T1479] usb 2-1: SerialNumber: syz
[  165.180872][  T493] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  165.189955][  T493] usb 5-1: Detected FT2232C/D
[  165.357480][  T558] snd-usb-audio: probe of 4-1:42.1 failed with error -2
[  165.366918][  T558] usb 4-1: USB disconnect, device number 75
[  165.369238][  T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:42.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  165.399559][  T493] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  165.410261][ T1479] hub 2-1:1.0: bad descriptor, ignoring hub
[  165.418181][ T1479] hub: probe of 2-1:1.0 failed with error -5
[  165.425135][  T493] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  165.432709][  T493] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  165.441438][ T1479] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  165.451527][  T493] usb 5-1: USB disconnect, device number 72
[  165.462253][  T493] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  165.475061][  T493] ftdi_sio 5-1:0.0: device disconnected
[  165.488312][ T1479] usb 2-1: USB disconnect, device number 75
[  165.561741][   T39] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  165.754194][   T39] usb 3-1: Using ep0 maxpacket: 16
[  165.764168][   T39] usb 3-1: config 0 has an invalid interface number: 39 but max is 0
[  165.772299][   T39] usb 3-1: config 0 has no interface number 0
[  165.778328][   T39] usb 3-1: config 0 interface 39 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024
[  165.789479][   T39] usb 3-1: config 0 interface 39 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  165.801265][   T39] usb 3-1: New USB device found, idVendor=0c52, idProduct=2212, bcdDevice= 1.ca
[  165.810201][   T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.818097][   T39] usb 3-1: Product: syz
[  165.822153][   T39] usb 3-1: Manufacturer: syz
[  165.826560][   T39] usb 3-1: SerialNumber: syz
[  165.834671][   T39] usb 3-1: config 0 descriptor??
[  165.841413][ T7827] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  165.850754][   T39] ftdi_sio 3-1:0.39: FTDI USB Serial Device converter detected
[  165.859946][   T39] usb 3-1: Detected SIO
[  165.866350][   T39] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  166.084662][   T39] usb 3-1: USB disconnect, device number 66
[  166.098691][   T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  166.126439][   T39] ftdi_sio 3-1:0.39: device disconnected
[  166.154650][ T7868] loop1: detected capacity change from 0 to 256
[  166.173017][ T7870] loop3: detected capacity change from 0 to 1024
[  166.191357][ T7868] FAT-fs (loop1): Directory bread(block 64) failed
[  166.204266][ T7870] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  166.211987][ T7868] FAT-fs (loop1): Directory bread(block 65) failed
[  166.212472][ T7870] EXT4-fs (loop3): orphan cleanup on readonly fs
[  166.227605][ T7868] FAT-fs (loop1): Directory bread(block 66) failed
[  166.236173][ T7870] EXT4-fs error (device loop3): ext4_map_blocks:744: inode #3: block 3: comm syz.3.3507: lblock 3 mapped to illegal pblock 3 (length 1)
[  166.256916][ T7868] FAT-fs (loop1): Directory bread(block 67) failed
[  166.268017][ T7870] Quota error (device loop3): write_blk: dquota write failed
[  166.277624][ T7868] FAT-fs (loop1): Directory bread(block 68) failed
[  166.288633][ T7870] Quota error (device loop3): find_free_dqentry: Can't write quota data block 3
[  166.302201][ T7868] FAT-fs (loop1): Directory bread(block 69) failed
[  166.304317][ T7873] loop4: detected capacity change from 0 to 512
[  166.308866][ T7868] FAT-fs (loop1): Directory bread(block 70) failed
[  166.321403][ T7870] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  166.331183][ T7870] EXT4-fs error (device loop3): ext4_acquire_dquot:6788: comm syz.3.3507: Failed to acquire dquot type 0
[  166.334067][ T7873] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  166.351960][ T7868] FAT-fs (loop1): Directory bread(block 71) failed
[  166.358802][ T7868] FAT-fs (loop1): Directory bread(block 72) failed
[  166.365232][ T7868] FAT-fs (loop1): Directory bread(block 73) failed
[  166.368363][ T7870] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #3: block 3: comm syz.3.3507: lblock 3 mapped to illegal pblock 3 (length 1)
[  166.430540][ T7870] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  166.453261][ T7870] EXT4-fs error (device loop3): ext4_acquire_dquot:6788: comm syz.3.3507: Failed to acquire dquot type 0
[  166.488687][ T7870] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.3507: Freeing blocks not in datazone - block = 0, count = 4096
[  166.513789][ T7870] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #3: block 3: comm syz.3.3507: lblock 3 mapped to illegal pblock 3 (length 1)
[  166.545481][ T7870] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  166.575717][ T7870] EXT4-fs error (device loop3): ext4_acquire_dquot:6788: comm syz.3.3507: Failed to acquire dquot type 0
[  166.597749][ T7870] EXT4-fs (loop3): 1 orphan inode deleted
[  166.608620][ T7870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  166.662524][ T7895] loop2: detected capacity change from 0 to 512
[  166.680499][ T7895] EXT4-fs warning (device loop2): ext4_multi_mount_protect:298: Invalid MMP block in superblock
[  166.722123][  T302] EXT4-fs (loop3): unmounting filesystem.
[  166.770197][   T39] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  166.903415][ T7932] loop3: detected capacity change from 0 to 16
[  166.924769][ T7932] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300)
[  166.962238][   T39] usb 2-1: Using ep0 maxpacket: 32
[  166.969429][   T39] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  166.988492][   T39] usb 2-1: config 0 interface 0 has no altsetting 1
[  167.005898][   T39] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00
[  167.014858][   T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  167.034847][   T39] usb 2-1: SerialNumber: syz
[  167.044925][   T39] usb 2-1: config 0 descriptor??
[  167.050542][ T7948] loop2: detected capacity change from 0 to 1024
[  167.059530][   T39] usb-storage 2-1:0.0: USB Mass Storage device detected
[  167.067718][ T7948] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  167.080541][ T7948] EXT4-fs (loop2): The Hurd can't support 64-bit file systems
[  167.088624][   T39] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000
[  167.208161][  T558] usb 1-1: new full-speed USB device number 78 using dummy_hcd
[  167.218098][ T7893] loop4: detected capacity change from 0 to 131072
[  167.225765][ T7893] F2FS-fs (loop4): invalid crc value
[  167.232720][ T7893] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  167.260447][ T7893] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b
[  167.269047][ T7893] SELinux: (dev loop4, type f2fs) getxattr errno 2
[  167.280018][   T39] usb 2-1: USB disconnect, device number 76
[  167.312455][ T7971] loop2: detected capacity change from 0 to 256
[  167.322296][ T7971] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 0)
[  167.330468][ T7971] exFAT-fs (loop2): failed to load alloc-bitmap
[  167.336684][ T7971] exFAT-fs (loop2): failed to recognize exfat type
[  167.347114][  T493] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  167.401913][  T558] usb 1-1: unable to get BOS descriptor or descriptor too short
[  167.416067][  T558] usb 1-1: not running at top speed; connect to a high speed hub
[  167.430927][  T558] usb 1-1: config 195 has an invalid interface number: 45 but max is 0
[  167.442127][  T558] usb 1-1: config 195 has no interface number 0
[  167.448700][  T558] usb 1-1: config 195 interface 45 altsetting 9 endpoint 0xE has invalid maxpacket 512, setting to 64
[  167.460096][  T558] usb 1-1: config 195 interface 45 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  167.478866][  T558] usb 1-1: config 195 interface 45 has no altsetting 0
[  167.502244][  T558] usb 1-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=65.c0
[  167.518169][  T558] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.536899][  T558] usb 1-1: Product: syz
[  167.544467][  T558] usb 1-1: Manufacturer: syz
[  167.548958][  T558] usb 1-1: SerialNumber: syz
[  167.561982][  T493] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[  167.576128][  T493] usb 4-1: config 0 has no interfaces?
[  167.583225][  T493] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  167.593410][  T493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.598820][ T7993] cgroup: noprefix used incorrectly
[  167.605465][  T493] usb 4-1: config 0 descriptor??
[  167.638826][   T28] audit: type=1326 audit(1868261672.971:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.2.3566" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0b4785d19 code=0x0
[  167.754217][   T28] audit: type=1326 audit(1868261673.083:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8007 comm="syz.2.3571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0b4785d19 code=0x0
[  167.767580][ T7995] loop4: detected capacity change from 0 to 40427
[  167.784499][ T7995] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288)
[  167.787342][  T558] usb 1-1: USB disconnect, device number 78
[  167.796880][ T7995] F2FS-fs (loop4): invalid crc value
[  167.808442][ T7995] F2FS-fs (loop4): Current segment's next free block offset is inconsistent with bitmap, logtype:2, segno:5, type:0, next_blkoff:0, blkofs:0
[  167.817594][ T8013] loop2: detected capacity change from 0 to 16
[  167.832873][  T493] usb 4-1: USB disconnect, device number 76
[  167.839665][ T7995] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117)
[  167.847918][ T8015] loop1: detected capacity change from 0 to 16
[  167.848110][ T8013] erofs: (device loop2): mounted with root inode @ nid 36.
[  167.862369][   T28] audit: type=1400 audit(1868261673.186:219): avc:  denied  { mount } for  pid=8012 comm="syz.2.3572" name="/" dev="loop2" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  167.887422][ T8015] erofs: (device loop1): mounted with root inode @ nid 36.
[  167.904371][   T28] audit: type=1400 audit(1868261673.214:220): avc:  denied  { unmount } for  pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  167.939432][ T8021] loop2: detected capacity change from 0 to 16
[  167.955317][ T8021] erofs: (device loop2): mounted with root inode @ nid 36.
[  168.022293][  T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:195.45/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  168.049591][ T8029] loop1: detected capacity change from 0 to 512
[  168.067267][ T8031] loop4: detected capacity change from 0 to 512
[  168.068417][ T8029] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  168.082230][ T8029] ext4 filesystem being mounted at /734/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.086698][ T8031] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  168.114112][  T304] EXT4-fs (loop1): unmounting filesystem.
[  168.121438][  T305] EXT4-fs (loop4): unmounting filesystem.
[  168.159713][ T8039] loop4: detected capacity change from 0 to 2048
[  168.175099][ T8039] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  168.175281][ T8045] loop1: detected capacity change from 0 to 1024
[  168.184067][ T8039] ext4 filesystem being mounted at /767/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.207254][ T8045] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  168.215665][ T8045] ext4 filesystem being mounted at /738/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.216093][  T305] EXT4-fs (loop4): unmounting filesystem.
[  168.235911][  T304] EXT4-fs (loop1): unmounting filesystem.
[  168.244495][ T8051] loop4: detected capacity change from 0 to 256
[  168.265832][ T8053] loop1: detected capacity change from 0 to 512
[  168.277222][ T1479] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  168.285875][ T8053] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  168.312291][  T304] EXT4-fs (loop1): unmounting filesystem.
[  168.328135][ T8060] loop1: detected capacity change from 0 to 1024
[  168.353382][ T8060] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  168.361795][ T8060] ext4 filesystem being mounted at /740/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.379960][  T304] EXT4-fs (loop1): unmounting filesystem.
[  168.406590][ T8072] loop3: detected capacity change from 0 to 1024
[  168.424382][ T8072] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  168.426521][ T8076] loop1: detected capacity change from 0 to 512
[  168.444639][  T302] EXT4-fs (loop3): unmounting filesystem.
[  168.447160][ T8076] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  168.481513][ T1479] usb 3-1: config index 0 descriptor too short (expected 3133, got 61)
[  168.484920][ T8081] loop3: detected capacity change from 0 to 512
[  168.493011][ T1479] usb 3-1: config 0 has an invalid interface number: 156 but max is 1
[  168.505630][  T304] EXT4-fs (loop1): unmounting filesystem.
[  168.512043][ T8081] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  168.519598][ T1479] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  168.541314][  T302] EXT4-fs (loop3): unmounting filesystem.
[  168.549386][ T8086] loop1: detected capacity change from 0 to 512
[  168.549828][ T1479] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  168.572185][ T8086] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  168.576274][ T1479] usb 3-1: config 0 has no interface number 0
[  168.581416][ T8086] ext4 filesystem being mounted at /742/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.589069][ T1479] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  168.611278][  T304] EXT4-fs (loop1): unmounting filesystem.
[  168.612701][ T1479] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  168.626505][  T493] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  168.633943][ T1479] usb 3-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  168.646771][ T1479] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  168.655734][ T1479] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.669844][ T1479] usb 3-1: config 0 descriptor??
[  168.678958][ T8094] loop3: detected capacity change from 0 to 2048
[  168.685806][ T1479] usb 3-1: MIDIStreaming interface descriptor not found
[  168.703638][ T8094] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  168.720557][  T302] EXT4-fs (loop3): unmounting filesystem.
[  168.733853][ T8099] loop3: detected capacity change from 0 to 16
[  168.741726][ T8099] erofs: (device loop3): mounted with root inode @ nid 36.
[  168.769985][ T8103] loop3: detected capacity change from 0 to 512
[  168.781312][ T8103] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  168.790029][ T8103] ext4 filesystem being mounted at /588/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.807534][  T302] EXT4-fs (loop3): unmounting filesystem.
[  168.824990][ T8108] loop3: detected capacity change from 0 to 2048
[  168.834659][ T8108] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  168.849487][  T302] EXT4-fs (loop3): unmounting filesystem.
[  168.886699][  T493] usb 5-1: Using ep0 maxpacket: 8
[  168.893334][  T493] usb 5-1: unable to get BOS descriptor or descriptor too short
[  168.901907][  T493] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  168.913337][  T493] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  168.923092][  T493] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  168.932768][  T493] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  168.942688][  T493] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  168.944120][   T39] usb 3-1: USB disconnect, device number 67
[  168.952447][  T493] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  168.967659][    T6] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  168.976434][  T493] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  168.985425][ T1479] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  168.992839][  T493] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.000868][  T493] usb 5-1: Product: syz
[  169.004959][  T493] usb 5-1: Manufacturer: syz
[  169.009353][  T493] usb 5-1: SerialNumber: syz
[  169.014313][  T493] usb 5-1: config 0 descriptor??
[  169.027609][ T1657] udevd[1657]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  169.164675][  T653] usb 4-1: new full-speed USB device number 77 using dummy_hcd
[  169.172087][    T6] usb 1-1: Using ep0 maxpacket: 16
[  169.178440][    T6] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  169.189633][ T1479] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  169.200331][ T1479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.210959][ T1479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  169.221651][    T6] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4
[  169.230442][ T1479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  169.240004][    T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.247804][    T6] usb 1-1: Product: syz
[  169.251829][ T1479] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254
[  169.256174][ T1139] usb 5-1: USB disconnect, device number 73
[  169.264651][    T6] usb 1-1: Manufacturer: syz
[  169.264669][    T6] usb 1-1: SerialNumber: syz
[  169.265606][    T6] usb 1-1: config 0 descriptor??
[  169.284124][ T1479] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  169.293110][ T1479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.302877][ T1479] usb 2-1: config 0 descriptor??
[  169.308634][ T1479] usbhid 2-1:0.0: can't add hid device: -22
[  169.314413][ T1479] usbhid: probe of 2-1:0.0 failed with error -22
[  169.390255][  T653] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  169.401101][  T653] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  169.412013][  T653] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  169.425694][  T653] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  169.434566][  T653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  169.442350][  T653] usb 4-1: SerialNumber: syz
[  169.526582][ T1139] usb 2-1: USB disconnect, device number 77
[  169.529638][ T1479] usb 1-1: USB disconnect, device number 79
[  169.535336][ T8114] loop2: detected capacity change from 0 to 512
[  169.549080][ T8114] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  169.564555][  T301] EXT4-fs (loop2): unmounting filesystem.
[  169.588231][ T8117] loop2: detected capacity change from 0 to 4096
[  169.604235][ T8117] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  169.619741][  T301] EXT4-fs (loop2): unmounting filesystem.
[  169.641088][ T8121] loop2: detected capacity change from 0 to 2048
[  169.649862][ T8121] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  169.663795][  T653] rndis_host 4-1:253.0: RNDIS init failed, -71
[  169.670556][  T301] EXT4-fs (loop2): unmounting filesystem.
[  169.676357][  T653] rndis_host: probe of 4-1:253.0 failed with error -71
[  169.687391][  T653] usb 4-1: USB disconnect, device number 77
[  169.712001][ T8124] loop2: detected capacity change from 0 to 4096
[  169.720443][ T8124] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  169.736014][  T301] EXT4-fs (loop2): unmounting filesystem.
[  169.829923][ T8133] loop4: detected capacity change from 0 to 2048
[  169.849497][ T8135] loop4: detected capacity change from 0 to 128
[  169.873200][ T8137] loop4: detected capacity change from 0 to 128
[  169.972518][ T8140] loop4: detected capacity change from 0 to 40427
[  169.979524][ T8140] F2FS-fs (loop4): Invalid gid value -1
[  169.997384][ T8142] loop4: detected capacity change from 0 to 512
[  170.052104][    T6] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  170.223004][ T8150] loop3: detected capacity change from 0 to 128
[  170.265927][    T6] usb 3-1: Using ep0 maxpacket: 16
[  170.277232][ T8152] loop3: detected capacity change from 0 to 128
[  170.283160][    T6] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  170.298228][    T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  170.329898][    T6] usb 3-1: config 0 has no interface number 0
[  170.352996][    T6] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  170.353913][ T8154] loop3: detected capacity change from 0 to 128
[  170.383549][    T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.392456][    T6] usb 3-1: Product: syz
[  170.402260][    T6] usb 3-1: Manufacturer: syz
[  170.412213][    T6] usb 3-1: SerialNumber: syz
[  170.426939][    T6] usb 3-1: config 0 descriptor??
[  170.450981][ T8156] loop3: detected capacity change from 0 to 128
[  170.531280][ T8158] loop3: detected capacity change from 0 to 128
[  170.576530][ T8160] loop3: detected capacity change from 0 to 256
[  170.632095][ T8162] loop3: detected capacity change from 0 to 512
[  170.650168][ T1139] usb 3-1: USB disconnect, device number 68
[  170.682303][ T8164] loop3: detected capacity change from 0 to 128
[  171.132000][   T39] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  171.218256][ T8179] loop2: detected capacity change from 0 to 128
[  171.272092][ T8181] loop2: detected capacity change from 0 to 2048
[  171.314568][ T8181] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  171.335373][   T39] usb 1-1: Using ep0 maxpacket: 16
[  171.341824][   T39] usb 1-1: unable to get BOS descriptor or descriptor too short
[  171.367596][   T39] usb 1-1: config 1 interface 0 altsetting 36 endpoint 0x81 has an invalid bInterval 85, changing to 10
[  171.388583][   T39] usb 1-1: config 1 interface 0 altsetting 36 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  171.401875][   T39] usb 1-1: config 1 interface 0 has no altsetting 0
[  171.402253][  T301] EXT4-fs (loop2): unmounting filesystem.
[  171.421815][   T39] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40
[  171.441559][   T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.449714][   T39] usb 1-1: Product: syz
[  171.453966][   T39] usb 1-1: Manufacturer: syz
[  171.458374][   T39] usb 1-1: SerialNumber: syz
[  171.507840][ T8185] loop2: detected capacity change from 0 to 2048
[  171.546203][ T8166] loop3: detected capacity change from 0 to 131072
[  171.565356][ T8166] F2FS-fs (loop3): invalid crc value
[  171.571694][ T8185] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  171.591142][ T8185] ext4 filesystem being mounted at /795/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.644722][ T8144] loop4: detected capacity change from 0 to 262144
[  171.661403][  T301] EXT4-fs (loop2): unmounting filesystem.
[  171.666130][ T8146] loop1: detected capacity change from 0 to 262144
[  171.673983][ T8166] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  171.696162][   T39] usbhid 1-1:1.0: can't add hid device: -71
[  171.706645][   T39] usbhid: probe of 1-1:1.0 failed with error -71
[  171.713956][ T8144] F2FS-fs (loop4): Found nat_bits in checkpoint
[  171.720837][   T39] usb 1-1: USB disconnect, device number 80
[  171.734521][ T8146] F2FS-fs (loop1): Found nat_bits in checkpoint
[  171.760703][ T8166] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b
[  171.768319][ T8166] SELinux: (dev loop3, type f2fs) getxattr errno 2
[  171.796292][ T8144] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  171.815364][ T8146] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  171.887820][ T8196] loop2: detected capacity change from 0 to 32768
[  172.513126][   T28] audit: type=1400 audit(1868261677.535:221): avc:  denied  { create } for  pid=8217 comm="syz.0.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  172.564720][   T28] audit: type=1400 audit(1868261677.554:222): avc:  denied  { write } for  pid=8217 comm="syz.0.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  172.628083][   T28] audit: type=1400 audit(1868261677.582:223): avc:  denied  { create } for  pid=8219 comm="syz.0.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  172.684716][ T8216] loop1: detected capacity change from 0 to 32768
[  172.693024][   T28] audit: type=1400 audit(1868261677.582:224): avc:  denied  { write } for  pid=8219 comm="syz.0.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  172.746524][   T28] audit: type=1400 audit(1868261677.582:225): avc:  denied  { nlmsg_read } for  pid=8219 comm="syz.0.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  172.770050][ T8214] loop4: detected capacity change from 0 to 32768
[  172.917586][   T39] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  172.947272][ T8234] loop1: detected capacity change from 0 to 2048
[  172.982719][ T8230] loop4: detected capacity change from 0 to 8192
[  173.035904][ T8230]  loop4: p1 p2[DM] p4
[  173.039905][ T8230] loop4: p1 size 196608 extends beyond EOD, truncated
[  173.057045][ T8230] loop4: p2 start 4292936063 is beyond EOD, truncated
[  173.060722][ T8238] loop1: detected capacity change from 0 to 2048
[  173.067447][ T8230] loop4: p4 size 50331648 extends beyond EOD, truncated
[  173.122490][   T39] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  173.152809][   T39] usb 1-1: config 1 interface 0 has no altsetting 0
[  173.172983][   T39] usb 1-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.40
[  173.200448][ T8247] SELinux:  Context system_u:object_r:dhcpc_var_run_t:s0 is not valid (left unmapped).
[  173.203534][   T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.231760][   T28] audit: type=1400 audit(1868261678.199:226): avc:  denied  { relabelto } for  pid=8246 comm="syz.1.3664" name="vcs" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcpc_var_run_t:s0"
[  173.238667][   T39] usb 1-1: SerialNumber: ည
[  173.332831][   T28] audit: type=1400 audit(1868261678.227:227): avc:  denied  { associate } for  pid=8246 comm="syz.1.3664" name="vcs" dev="devtmpfs" ino=13 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpc_var_run_t:s0"
[  173.470800][ T8269] binfmt_misc: register: failed to install interpreter file ./file0/../file0
[  173.516233][   T39] usbhid 1-1:1.0: can't add hid device: -71
[  173.522080][   T39] usbhid: probe of 1-1:1.0 failed with error -71
[  173.543977][   T39] usb 1-1: USB disconnect, device number 81
[  173.612647][ T8282] loop4: detected capacity change from 0 to 512
[  173.949085][   T28] audit: type=1326 audit(1868261678.872:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8316 comm="syz.1.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbfb585d19 code=0x7ffc0000
[  174.004630][   T28] audit: type=1326 audit(1868261678.872:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8316 comm="syz.1.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbfb585d19 code=0x7ffc0000
[  174.034173][ T8323] loop4: detected capacity change from 0 to 128
[  174.046371][ T8203] loop2: detected capacity change from 0 to 262144
[  174.062851][   T28] audit: type=1326 audit(1868261678.900:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8316 comm="syz.1.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7ffbfb585d19 code=0x7ffc0000
[  174.107989][ T8327] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3705'.
[  174.155850][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3709'.
[  174.233665][ T8346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3712'.
[  174.315402][ T8208] loop3: detected capacity change from 0 to 262144
[  174.325816][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3723'.
[  174.396824][ T8370] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3729'.
[  174.746789][ T8431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3758'.
[  174.869015][ T8451] xt_hashlimit: size too large, truncated to 1048576
[  175.161890][ T8493] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3787'.
[  175.414446][ T8548] xt_socket: unknown flags 0x40
[  175.531720][ T8574] xt_NFQUEUE: number of total queues is 0
[  175.719530][ T8620] sock: sock_timestamping_bind_phc: sock not bind to device
[  175.736271][ T8624] netlink: 'syz.3.3851': attribute type 12 has an invalid length.
[  175.835287][ T8646] xt_socket: unknown flags 0x58
[  176.110509][ T8716] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3895'.
[  176.142460][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3897'.
[  176.225690][ T8732] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  176.294572][ T8744] netlink: 'syz.4.3909': attribute type 1 has an invalid length.
[  176.368837][ T8757] xt_TPROXY: Can be used only with -p tcp or -p udp
[  176.434108][ T8767] loop3: detected capacity change from 0 to 512
[  176.476707][ T8767] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  176.487752][ T8767] ext4 filesystem being mounted at /642/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.562638][  T302] EXT4-fs (loop3): unmounting filesystem.
[  176.573500][ T8781] netlink: 'syz.4.3926': attribute type 29 has an invalid length.
[  176.582486][ T8782] netlink: 'syz.1.3928': attribute type 1 has an invalid length.
[  176.605517][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3926'.
[  176.625162][ T8781] netlink: 'syz.4.3926': attribute type 29 has an invalid length.
[  176.783820][ T8818] xt_CT: You must specify a L4 protocol and not use inversions on it
[  176.978227][ T8842] x_tables: duplicate entry at hook 2
[  177.012682][ T8848] Illegal XDP return value 3059995218 on prog  (id 350) dev N/A, expect packet loss!
[  177.077656][ T8860] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.084683][ T8860] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.167296][ T8871] x_tables: unsorted entry at hook 3
[  177.690324][ T8986] SELinux:  policydb string length 41 does not match expected length 8
[  177.711930][ T8986] SELinux: failed to load policy
[  177.748546][ T8990] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.755588][ T8990] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.917394][   T28] kauditd_printk_skb: 34 callbacks suppressed
[  177.917412][   T28] audit: type=1326 audit(1868261682.585:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9011 comm="syz.0.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7588185d19 code=0x7ffc0000
[  177.937899][ T9018] xt_CT: You must specify a L4 protocol and not use inversions on it
[  177.989542][   T28] audit: type=1326 audit(1868261682.585:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9011 comm="syz.0.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f7588185d19 code=0x7ffc0000
[  178.055773][   T28] audit: type=1326 audit(1868261682.585:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9011 comm="syz.0.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7588185d19 code=0x7ffc0000
[  178.226305][   T28] audit: type=1400 audit(1868261682.875:268): avc:  denied  { write } for  pid=9049 comm="syz.1.4060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  178.322767][ T9067] xt_TCPMSS: Only works on TCP SYN packets
[  178.363767][ T8892] loop2: detected capacity change from 0 to 131072
[  178.390426][ T8892] F2FS-fs (loop2): invalid crc value
[  178.412083][ T8892] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  178.484154][ T8892] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b
[  178.494386][ T8892] SELinux: (dev loop2, type f2fs) getxattr errno 2
[  178.674516][   T28] audit: type=1400 audit(1868261683.296:269): avc:  denied  { bind } for  pid=9133 comm="syz.0.4100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  178.767293][ T9151] netlink: 'syz.0.4108': attribute type 32 has an invalid length.
[  178.767816][ T9152] xt_CT: You must specify a L4 protocol and not use inversions on it
[  178.796328][ T9157] xt_hashlimit: max too large, truncated to 1048576
[  178.807814][ T9157] xt_bpf: check failed: parse error
[  178.860460][   T28] audit: type=1326 audit(1868261683.465:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9166 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da9385d19 code=0x7ffc0000
[  178.925735][   T28] audit: type=1326 audit(1868261683.493:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9166 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f6da9385d19 code=0x7ffc0000
[  178.987191][   T28] audit: type=1326 audit(1868261683.493:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9166 comm="syz.3.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da9385d19 code=0x7ffc0000
[  179.051638][   T28] audit: type=1326 audit(1868261683.642:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.3.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da9385d19 code=0x7ffc0000
[  179.091806][ T9203] loop4: detected capacity change from 0 to 512
[  179.093731][   T28] audit: type=1326 audit(1868261683.670:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.3.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f6da9385d19 code=0x7ffc0000
[  179.146904][ T9203] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.4130: bad orphan inode 15
[  179.166245][ T9203] ext4_test_bit(bit=14, block=18) = 1
[  179.171541][ T9203] is_bad_inode(inode)=0
[  179.177209][ T9203] NEXT_ORPHAN(inode)=1023
[  179.189137][ T9203] max_ino=32
[  179.192165][ T9203] i_nlink=0
[  179.195501][ T9203] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2925: inode #15: comm syz.4.4130: corrupted xattr block 19
[  179.208163][ T9203] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117)
[  179.217435][ T9203] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  179.225876][ T9203] ext4 filesystem being mounted at /888/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  179.267215][  T305] EXT4-fs (loop4): unmounting filesystem.
[  179.567422][ T9300] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  179.589089][ T9300] overlayfs: missing 'lowerdir'
[  179.624582][ T9314] __nla_validate_parse: 11 callbacks suppressed
[  179.624603][ T9314] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4186'.
[  179.682476][ T9326] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4192'.
[  180.143415][ T9438] overlayfs: missing 'lowerdir'
[  180.268508][ T9468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4263'.
[  180.296767][ T9475] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  180.444780][ T9510] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4284'.
[  180.508933][   T39] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  180.712079][   T39] usb 4-1: Using ep0 maxpacket: 16
[  180.720791][   T39] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  180.737413][   T39] usb 4-1: New USB device strings: Mfr=1, Product=121, SerialNumber=1
[  180.751051][   T39] usb 4-1: Product: syz
[  180.755728][   T39] usb 4-1: Manufacturer: syz
[  180.767622][   T39] usb 4-1: SerialNumber: syz
[  180.784506][   T39] r8152-cfgselector 4-1: config 0 descriptor??
[  180.821581][ T9589] 8021q: VLANs not supported on lo
[  180.862624][ T9601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4328'.
[  180.882131][ T9601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4328'.
[  180.893673][ T9603] tc_dump_action: action bad kind
[  180.961574][ T9622] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4337'.
[  180.978182][ T9623] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  181.240059][   T39] r8152-cfgselector 4-1: Unknown version 0x0000
[  181.251930][   T39] r8152-cfgselector 4-1: USB disconnect, device number 78
[  181.403141][ T9704] netlink: 'syz.2.4378': attribute type 1 has an invalid length.
[  181.524058][ T9666] loop1: detected capacity change from 0 to 40427
[  181.550857][ T9666] F2FS-fs (loop1): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  181.568450][ T9666] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  181.598336][ T9666] F2FS-fs (loop1): invalid crc value
[  181.614314][ T9666] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  181.653599][ T9666] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30
[  181.661643][ T9755] xt_TCPMSS: Only works on TCP SYN packets
[  181.664658][ T9666] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  181.733272][ T9770] x_tables: unsorted underflow at hook 4
[  181.808518][ T9784] xt_l2tp: v2 sid > 0xffff: 50331648
[  182.023520][ T9837] xt_TPROXY: Can be used only with -p tcp or -p udp
[  182.453967][ T9978] xt_bpf: check failed: parse error
[  182.820848][T10111] binfmt_misc: register: failed to install interpreter file ./file2
[  183.068959][T10179] xt_TPROXY: Can be used only with -p tcp or -p udp
[  183.102326][T10189] x_tables: unsorted underflow at hook 2
[  183.178246][T10218] xt_TCPMSS: Only works on TCP SYN packets
[  183.274027][   T28] kauditd_printk_skb: 316 callbacks suppressed
[  183.274045][   T28] audit: type=1400 audit(1868261687.589:591): avc:  denied  { read write } for  pid=305 comm="syz-executor" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  183.306458][T10252] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4648'.
[  183.306906][   T28] audit: type=1400 audit(1868261687.589:592): avc:  denied  { read write } for  pid=302 comm="syz-executor" name="loop3" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  183.340571][   T28] audit: type=1400 audit(1868261687.617:593): avc:  denied  { read } for  pid=85 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
[  183.364666][   T28] audit: type=1400 audit(1868261687.617:594): avc:  denied  { read } for  pid=85 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
[  183.392084][   T28] audit: type=1400 audit(1868261687.636:595): avc:  denied  { bpf } for  pid=10249 comm="syz.4.4647" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[  183.420259][   T28] audit: type=1400 audit(1868261687.636:596): avc:  denied  { map_create } for  pid=10249 comm="syz.4.4647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  183.440660][   T28] audit: type=1400 audit(1868261687.645:597): avc:  denied  { read write } for  pid=301 comm="syz-executor" name="loop2" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  183.466768][   T28] audit: type=1400 audit(1868261687.645:598): avc:  denied  { read write } for  pid=302 comm="syz-executor" name="loop3" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  183.498648][   T28] audit: type=1400 audit(1868261687.645:599): avc:  denied  { bpf } for  pid=10249 comm="syz.4.4647" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[  183.520659][   T28] audit: type=1400 audit(1868261687.655:600): avc:  denied  { read } for  pid=85 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
[  183.676870][T10345] netlink: 'syz.4.4694': attribute type 30 has an invalid length.
[  183.721313][T10360] netlink: 'syz.2.4701': attribute type 9 has an invalid length.
[  183.728488][T10364] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  184.038591][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4726'.
[  184.390632][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4747'.
[  184.650291][T10502] xt_TCPMSS: Only works on TCP SYN packets
[  184.742845][ T4767] ------------[ cut here ]------------
[  184.748138][ T4767] kernel BUG at fs/buffer.c:2714!
[  184.753027][ T4767] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  184.758895][ T4767] CPU: 1 PID: 4767 Comm: kmmpd-loop0 Not tainted 6.1.115-syzkaller-00017-g22b7ded8b55b #0
[  184.768739][ T4767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  184.778635][ T4767] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0
[  184.783842][ T4767] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 e4 ce e6 ff e9 b0 fe ff ff e8 da 5c 9f ff 0f 0b e8 d3 5c 9f ff <0f> 0b e8 cc 5c 9f ff 0f 0b e8 c5 5c 9f ff 0f 0b e8 be 5c 9f ff 0f
[  184.803522][ T4767] RSP: 0018:ffffc9001070fc20 EFLAGS: 00010293
[  184.809420][ T4767] RAX: ffffffff81d629dd RBX: 0000000000000000 RCX: ffff88810d493cc0
[  184.817233][ T4767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  184.825042][ T4767] RBP: ffffc9001070fc70 R08: ffffffff81d625b0 R09: ffffed10217e3b27
[  184.832851][ T4767] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
[  184.840665][ T4767] R13: 1ffff110217e3b26 R14: ffff88810bf1d930 R15: 0000000000003801
[  184.848477][ T4767] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  184.857242][ T4767] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  184.863661][ T4767] CR2: 0000001b2ed1eff8 CR3: 00000001138b9000 CR4: 00000000003506a0
[  184.871477][ T4767] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  184.879288][ T4767] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  184.887094][ T4767] Call Trace:
[  184.890223][ T4767]  <TASK>
[  184.892995][ T4767]  ? __die_body+0x62/0xb0
[  184.897160][ T4767]  ? die+0x88/0xb0
[  184.900719][ T4767]  ? do_trap+0x103/0x330
[  184.904886][ T4767]  ? submit_bh_wbc+0x4cd/0x4f0
[  184.909486][ T4767]  ? handle_invalid_op+0x95/0xc0
[  184.914259][ T4767]  ? submit_bh_wbc+0x4cd/0x4f0
[  184.918859][ T4767]  ? exc_invalid_op+0x32/0x50
[  184.923374][ T4767]  ? asm_exc_invalid_op+0x1b/0x20
[  184.928234][ T4767]  ? submit_bh_wbc+0xa0/0x4f0
[  184.932750][ T4767]  ? submit_bh_wbc+0x4cd/0x4f0
[  184.937343][ T4767]  ? submit_bh_wbc+0x4cd/0x4f0
[  184.942068][ T4767]  ? __kasan_check_read+0x11/0x20
[  184.946928][ T4767]  submit_bh+0x1d/0x30
[  184.950850][ T4767]  write_mmp_block_thawed+0x3a0/0x570
[  184.956042][ T4767]  ? read_mmp_block+0x7d0/0x7d0
[  184.960727][ T4767]  ? update_process_times+0x1b0/0x1b0
[  184.965938][ T4767]  write_mmp_block+0x12b/0x2a0
[  184.970534][ T4767]  kmmpd+0x40c/0xa10
[  184.974267][ T4767]  ? write_mmp_block_thawed+0x570/0x570
[  184.979645][ T4767]  ? __kthread_parkme+0x12d/0x180
[  184.984507][ T4767]  kthread+0x26d/0x300
[  184.988412][ T4767]  ? write_mmp_block_thawed+0x570/0x570
[  184.993794][ T4767]  ? kthread_blkcg+0xd0/0xd0
[  184.998220][ T4767]  ret_from_fork+0x1f/0x30
[  185.002474][ T4767]  </TASK>
[  185.005333][ T4767] Modules linked in:
[  185.040806][ T4767] ---[ end trace 0000000000000000 ]---
[  185.046204][ T4767] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0
[  185.051406][ T4767] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 e4 ce e6 ff e9 b0 fe ff ff e8 da 5c 9f ff 0f 0b e8 d3 5c 9f ff <0f> 0b e8 cc 5c 9f ff 0f 0b e8 c5 5c 9f ff 0f 0b e8 be 5c 9f ff 0f
[  185.072825][ T4767] RSP: 0018:ffffc9001070fc20 EFLAGS: 00010293
[  185.078806][ T4767] RAX: ffffffff81d629dd RBX: 0000000000000000 RCX: ffff88810d493cc0
[  185.086646][ T4767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  185.094350][ T4767] RBP: ffffc9001070fc70 R08: ffffffff81d625b0 R09: ffffed10217e3b27
[  185.102287][ T4767] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
[  185.102303][ T4767] R13: 1ffff110217e3b26 R14: ffff88810bf1d930 R15: 0000000000003801
[  185.102313][ T4767] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  185.102328][ T4767] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  185.102339][ T4767] CR2: 00007fb0b4948178 CR3: 000000012f0be000 CR4: 00000000003506a0
[  185.102356][ T4767] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  185.102367][ T4767] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  185.102381][ T4767] Kernel panic - not syncing: Fatal exception
[  185.102649][ T4767] Kernel Offset: disabled
[  185.166914][ T4767] Rebooting in 86400 seconds..