last executing test programs: 11.096694722s ago: executing program 4 (id=620): syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200883) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd25479024a676b21b3adc5e463c9effbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953584db11b7f89ec68098eafa48cebd6882a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56f335e2373b2cde5600db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8b03fe4798e5750d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000f05304"], 0x14}}, 0x0) 11.096275262s ago: executing program 4 (id=621): mprotect(&(0x7f0000000000/0x800000)=nil, 0x8011a3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x0, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$ENABLE_STATS(0x20, &(0x7f0000000280), 0x32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001439) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={0x0, 0x1d8}}, 0x0) 10.214987504s ago: executing program 4 (id=624): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x3, "d7e526"}, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$incfs(r3, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) fstat(r4, &(0x7f0000000700)) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYBLOB="d952addcbb43e78bd4982945b26f269242aba8507ef94a499e8f84eae913d9ee3534865586bf71a2ae925eeb1a3c1f136ba120a81aacc418077be4993c4190b3cd52b3b24d2f76d45f7c960c1e2646b90626e5", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x9, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x9, 0x2}, {0x1, 0x1}, {0xd, 0x5}, {0xb, 0x1}, {0x7, 0x2}]}, @typedef={0x7}, @struct={0x1, 0x1, 0x0, 0x4, 0x1, 0xfffffffb, [{0xd, 0x5, 0xffffffff}]}]}, {0x0, [0x30, 0x30, 0x30, 0x0, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000000080), 0x79, 0x0, 0x1, 0x1}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$cdc_ecm(0x1, 0x50, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x1, 0x0, 0x10, 0xfb, [{{0x9, 0x4, 0x0, 0x82, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x8, 0x24, 0x6, 0x0, 0x0, "b7f59d"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x3, 0x7f, 0x40}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x8f, 0xc, 0xc0}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x2, 0x10}}}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xec, 0x3, 0x9, 0x8, 0x6}, 0x51, &(0x7f0000000400)={0x5, 0xf, 0x51, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x8, 0xf000, 0x1, [0x1013f00, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x1, 0x2, 0x0, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x5, 0x7, 0xa, 0xd}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0xe, 0x2, 0x0, 0xf00, 0x48d, [0xffff3f, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x60, 0x1, 0x5, 0x3, 0x5}]}, 0x8, [{0x34, &(0x7f0000000580)=@string={0x34, 0x3, "841df8191225434f1bd52b60dd56a484497937e064cf1a94bc188fcbc4e3956f91c5992c6b505d3db29bdf07c6e1e9bf8afe"}}, {0x94, &(0x7f00000006c0)=@string={0x94, 0x3, "f3ca6e00914922923961356eeed9b3e2bc72fc0a4e183704a09ef6059e27703967c364c012cead3ac4e26b8d09b9e233028f2682bd3e39ae5447ac2712eda5a4b29d6d37b81fecdfe30e1a94ec2da08d4cd6419de6d2dc1091602f4e8c4eb2051ba5ec92cd982ac407a2b6d595c80cd451e8a27447cf0df6fbdd5cef5d62f62c2819659de7791242b2ca67b76b7b6ff37684"}}, {0xd2, &(0x7f0000000780)=@string={0xd2, 0x3, "ccfba4083bb4a03b3bdba5ee18913d0ae110f56a2d461e2c23ed78ce132afa393811d7ce31d340a9da3b89b2bf0ae5c274866cb1a285f13dcc549f1de607abbd59f598ff1bb6cb0fa898d9b501f0a046013641685a6db99a72a09ebf6b6cfc6123b70994b540e1630853daf80018a33694098674cc1e18b7ac19324845839ede2378d5a7539cee3ba778f1729a07de801bf87844cc42bd28c0178f40af0b83e8bd76def3ac55b6fb81268130d03e42585a350b895f11d04bbf3c7627f67f9856eee0c6a6c2cbb0552c23f61ed4df6bb3"}}, {0x38, &(0x7f00000005c0)=@string={0x38, 0x3, "f4f255bd9993b119920db66b3c19c9901fd322922252c277a61c76aa9bdbcb3e86ec577e19649a3d81ba5be92d0f63b5a8a7605b94f2"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x42b}}, {0x68, &(0x7f0000000880)=@string={0x68, 0x3, "bfa612b2158b8b4bb8ff59be94dd577ed68889f1c995596db1cf8451558cdfaa061e79a248ec41e839be9fa60951d78bb8f61f6b870b67a797884ef68f2bf73c45e29c8f358659d09020889f11d4d43961303ee13732ad867dc77feac2f8725ce6104e7e4edc"}}, {0x82, &(0x7f0000000900)=@string={0x82, 0x3, "0e95f8ca21223e245276a1ae42754fa6a796cdc066c1318bc34d1cd3775e83046571af253011d7bc7d2f1e0c73ef19584e3c772018a6143834c26138971f2c18e5335cdda645803e8aab76b83fa22a8f501534949c7e92119e1f016dec176f546ec007aee8642bbd80fd54c3e740477b4ea7a6d3490207252249d57fb6e0cbcb"}}, {0x26, &(0x7f00000009c0)=@string={0x26, 0x3, "2b91091c879b525c6e9a3ef747a450e24834ac31d58fdf09b759cfa83a6311ceb5c5c2b8"}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) 8.468285907s ago: executing program 0 (id=630): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") (async) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x16, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) 6.852554969s ago: executing program 4 (id=642): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000005c0)={0x1, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) socket$inet6(0xa, 0x80001, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001840)='net/unix\x00') read$FUSE(r1, &(0x7f0000001880)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000000)={[{@gid={'gid', 0x3d, r2}, 0x41}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000079002800000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r3) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r5, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000200)=""/2, 0x2}], 0x1}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES16], 0x0, 0x20}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 6.628048498s ago: executing program 0 (id=643): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d105012008d8286203010902120001000000000904"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x5}, 0x48) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x1805a, &(0x7f0000000000)=ANY=[], 0x1, 0x105ca, &(0x7f0000004240)="$eJzs3M1uG1UYBuDPDW3aUkqF+sOOkRBSImErTtKKCgkKtAKkpor4WbABHHtiubU9IXackDVILLiN7hAbFlwBG+4DCSE2ILEDgTwzqZqqi5aauCXPI03eM8czn8+xIsXHE08Ah9aZ5I/fK3E6TkTETEScisjblXLLXSni+Yh4ISKO3LVVyv47Hcci4mREnB4XL2pWyoe+/ez7v0a717+6/eovH1++/VtlerMGDtrr9+y/FBG9jaK93Ssyaxd5s+xvjDp59pZHZRYP9G6V+1mR2+laXmG7sXdcI8+ldnF8trE1GOd6t9EcZ7uznvdv9IsnHIzae3XyE242NvP9VrqWZ2eQ5dneLca1U+buYFjUaZX1Ps/Lx3C4l0V/upMW89m4lWezPyz7i7pZK90Z56jM8umimXVb+TjWHuqlfqJc7/S3dpJRujnoZP3kYq3+Sq1+qVrfzFrpMF2uNnqtS8vJXLs7Pqw6O/571M6ydjetNbPefDLXbjar9XoydzVd6zT6Sb1eW6otVC/Ol62Xk7dvfJh0W8ncON/s9LeGne4gWc82k+KM+WSxtnR5Pnmxnry/spqsvnft2srqB59c/ejGGyvvvlUetDes2fx3YpguJ3OLC4uL1fpCdbE+f4DzH6aN3hTnf2dYE5w/PBLvJAEemvU/MA3W//vX/7PW/4dy/XvY5w+PxDtJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBD66ej372TN84U+0+X/c+UXc9FxIWIOB8R5yLi7/uYiWP7ap6NiErZvt/xR+8Zww+VyCuMz5ktt5MRcaXc/nz2v34VAAAA4P/rmx+/+DJiZtzMf7w27QFxkMoPbY5Pql7+kc9Tk6p2Ni+2M6Fq5/ZKTsT5iDh65tcJVbsQEUdOfTqhag9kZl8cvysqRRw5yNEAAAAHY/9KYGKrNwAAAB47X097AExHfr22/F/88lrwbBHlBcET+/YAAACAJ1Bl2gMAAAAAHti//a5uvv6f9P3/fnb/PwAAAHisFPf/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9i5exy1gSgO4A8ch3wqKOLjKlRRSgoOkSOkzAGS26TjCFEkxDlIlyNEEDGeLbyiWK3HeBf9fpJ5Mxb8eUA1HmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgT3/q7frn/vuPrjnHX6dOynwaAAAA4JJDvV2nwbSZv83n3+dTHyNiGRGLiJhHxKW1exUvW5mziBjl8aXn1/d6+B2REs6vmeTjTUR8zse/D31/CwAAAHC79rvVJqI6D9PDp6Eb4pryRZtXpfLSJZ8XpdJmKexbobT5XWQRi4iop38LpS0jYvzuS6G0B6lyaf32aTJqyvia3QAAANdRtUqx1RsAAABPztehG2AYab82/xc/7wVPmpK3BV+3ZgAAAMAzNBq6AQAAAKB3af3v/n8AAABw25r7/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCnQ71d73erTdec46mbR73puGvXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Gd/Xk4gBMIgDPau75wG8w9LGjQGD1aB8PE3HgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL7ld3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4y3XwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/dycQAkEQBvvO/5wW8w9LGjQGEapg4WOGeVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIsdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirsz71twkAYx+HXl0SJ22SE9FYCM9BQIRiBDwnJkmdgABaioaK1WARWAAnONZ0peJ7m/yuuuBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXtPl4Yu3iCgidZkijTc/p/eI+Ii0bdvR5y2L3fnYfN1ztj9Mcn7H9LeMiDKKPs4BAOhd1W2O1bpe/uX9zzvIO8xbzZt68cxPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwZd/+WZuKogCAnzR/2trJxUEXQaFdNKb+S6GroAji4uBY2liKqZa2gi0i1G8g+AXcderqZ3B3cHATpIOKCDpU0ry0txqwVs0L7e8H971zL3nv3ZshcN65AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP7KxFiOduBARx0s7ccubj4+mu50/fH59rNNuvyotpPds3aIcEXfmmo1zPVxLv3n8U39pZfXuVLPZWPyPweA+nlXsxcQE/ziI6ItpCJIgivu7PIcfJwAADrRy1lp5/bvy+tXWWGEyYvP57vx/NIljj/n/1xdPrqXPSvP/Ws9W2P+qy/ML1aWV1TNz81OzjdnGvdrExIWL9cuXxmvVrXcl1cP+xgQAAIC/Vclamv8PTP5a/z+SxLHH/P/B9ZsnWmND2TVF+X9XO0W/vGcCAABwuB09+eVToct4oVKJh1PLy4u19nG7P94+5jDV37u1uzuYtTT/L07mNDcAAACgpzbWCiMRsd7pz2TnrvX/sZ3r0vr/22elG+k9ixExnNX/z07fb870ZCX9rxd/Qs57jQAAAORrOGtp/b+8tf+/tP2ZgYgYO9WOO6N72f8/evrl+/RZ6f7/8z1bYX8aqLe/j61zPaJUz3tGAAAAHGRDWSt832z79vRKxf5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfrBj9ygRA1EAgJOdjVbigmBj4wlEO6sFC8F7iILgEbyCd/AO3iOlaGktW4iFrbxJRpdtFiwSf74PJu8lDJmXqfIGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhrcfKVp7jMunzSP3t8vTmP+LQSw8tbuxsj8rqq6yHr/m3q47ErAAAA4D9Ipb+vquq5uT+LOJnn/r8pc6Lnv9vq8tLMr/b9JZbeP8Zeenj/XGjWrRMvvby6vjgc7At/vu21M6Z55/PZSyqHMDuLJu9nfdu2pxs53RygWADgWw5K7JPyPxTxaMzCAPjL9pdvpv2olvr/NB+lLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBBfQQAAP//EvBwDQ==") sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x90, 0xe6, &(0x7f0000000280)="ca9e0f42799f1f5d3ba1a7397860b1a53278d1a2150a4b4c6d5ee40050ecc9bea9eb204ba88036dc532fa639940b69c74d40a728025b6e7fa4c2df153f3c3a4366126ed99fdd3d5456512ba377c85a38fd4cbb8335743776fec14142d3fade1b3ffcd4921d615807ce2d7c210dbaf4d72444543ce5fe7e12b6ab3e13bdc0134716a5a50c68d48be30e6a12cf5c35814a", &(0x7f00000005c0)=""/230, 0x7fff, 0x0, 0xd, 0x30, &(0x7f0000000180)="cfacd3e8a6c1504d401caacbd0", &(0x7f00000001c0)="3a1774e6643bfdb60e0ea96ff5960609000000d7ffa02e7addc203b46e6d418d1498601d6bd603000800000000000340", 0x0, 0x0, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='consume_skb\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.056665066s ago: executing program 3 (id=652): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x401) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmsg(r0, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x300) 4.552498807s ago: executing program 1 (id=654): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000400)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0xa}, 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000040)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 4.168537439s ago: executing program 3 (id=656): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 4.168022239s ago: executing program 3 (id=657): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100003680c000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003007866726d3000000000000000000000001c001280090001007866726d000000000c00028008000200f3"], 0x50}}, 0x0) 4.167908009s ago: executing program 3 (id=658): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x38000) 3.878610173s ago: executing program 4 (id=659): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x0, 0xd14, 0x5, 0x8e, 0x1, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0xffffffffffffffa7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0xfffffffe, 0xfffffffffffffffd) keyctl$setperm(0x5, r6, 0x280000) r7 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "c6292b1452167bc378c7b3b90de001f6da29eb74498244ba616e31c1c700d4286804d7a5da86cab64254c800c413b7051a641d91c12ff065301a27349baf7e1d"}, 0x48, 0xffffffffffffffff) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, r7) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, 0x0, &(0x7f0000000000)) 3.809583188s ago: executing program 0 (id=660): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000002600", @ANYRES32, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000600)=[{&(0x7f0000000180)="8c", 0x1}], 0x1, 0x0) write$binfmt_elf64(r9, 0x0, 0x78) close(r9) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000200)='*', 0x1}], 0x1, 0x0) vmsplice(r8, &(0x7f0000000440)=[{&(0x7f00000003c0)="fc", 0x1}], 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x0, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f00000003c0)=""/237, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000004c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x20000) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r5) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\f\x00\x00', @ANYRES16=r10, @ANYBLOB="00012dbd7000ffdbdf2501000000080002000200000014000100fe8000000000000000000000000000aa14000100fc02000000000000000000000000000005000500050000000800030004000000"], 0x54}}, 0x4) ioctl$VHOST_GET_VRING_BASE(r6, 0x4008af04, &(0x7f0000000200)) 3.653340861s ago: executing program 1 (id=661): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x34, 0x12, 0x581, 0xfff0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 3.600665625s ago: executing program 1 (id=662): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") 3.429031129s ago: executing program 1 (id=663): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write(r2, 0x81, 0xee, &(0x7f00000006c0)="b9425b446512d23236973599b76c4705397f00466eb0ef01e208e7f49ad068c4ffce4c6b81fdb183acf730ddbf395346f7fd23f2e107b224e7ea1deb33c65c884689393c15d155a710eb972acd778cd33d3a8a9cf9000000003da8dd3898c315943f48ff06761880b65af57bfd7dea10c0dce889c610bdafcc160d7c453163670206007fcd28d20e282d7cc68ebcd3a55ba06daabdb5b6168158aea2d2282a4352edeeb08063fe2761a374c7000000000000ab1bfef70376eac0f39353b39851eaa5fb23ff14841cf4d1c270630347cd3d84471d69c55b82a1ccb4ce31ebb7f8b44400000000000000000000db78") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r3 = open(&(0x7f0000000180)='.\x00', 0x3397be, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xffffff36}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af10, &(0x7f00000002c0)={0x0, r7}) (async) readahead(r3, 0x0, 0x0) 3.348637276s ago: executing program 3 (id=665): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000001c0)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x1}}, {@data_writeback}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x74b}}]}, 0x1, 0x479, &(0x7f00000004c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000240), 0x0}, 0x20) creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200c41, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x100008b}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f0000004800)={0x0, 0x0, &(0x7f0000003340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000ec034e3929bceb845af3000000000b5b20f6000a14000000000000000000ea000a631bd309bb599f91f88c70adc5a5addae20f2c2b578df6c6efd26035657e10519e5ddd3b2f8abfb1b4617ff1ccc3d01ce082ef0e91f3076d43b6b63593944ce4fc6f4048f17b4600000000000000"], 0x28}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0], 0x0, 0x38, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080), 0x4) 3.008600484s ago: executing program 2 (id=669): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='rpcgss_bad_seqno\x00', r3}, 0x10) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = syz_open_dev$usbmon(&(0x7f0000000380), 0x7, 0x48c0) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000b00)={&(0x7f0000000080)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000e00)={0x50, 0x0, r4}, 0x50) ioctl$int_in(r3, 0x5452, &(0x7f00000002c0)=0x8000000000000001) unlink(&(0x7f0000000100)='./file0/file0\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xa, "013528e2"}, @main=@item_4={0x3, 0x0, 0xc, "00499a00"}, @global=@item_4={0x3, 0x1, 0x0, "86a53a1f"}]}}, 0x0}, 0x0) 2.472790687s ago: executing program 3 (id=670): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000005c0)={0x1, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) socket$inet6(0xa, 0x80001, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001840)='net/unix\x00') read$FUSE(r1, &(0x7f0000001880)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000000)={[{@gid={'gid', 0x3d, r2}, 0x41}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000079002800000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r3) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r5, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000200)=""/2, 0x2}], 0x1}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES16], 0x0, 0x20}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 926.174934ms ago: executing program 2 (id=671): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000400)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0xa}, 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000040)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 808.684234ms ago: executing program 4 (id=672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$inet6(0xa, 0x3, 0x800009) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x302, 0xe008, 0x14, r0, 0x1f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x6}, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x4) syz_usb_connect$hid(0xffffff7f00000000, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000406c256d00000000000001090224000100000000090400000103000000092100000001220500090581"], 0x0) 696.622762ms ago: executing program 0 (id=673): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1181}) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x40, 0x2460c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) r6 = getpgid(0x0) r7 = syz_pidfd_open(r6, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = pidfd_getfd(r7, r2, 0x0) readlinkat(r8, &(0x7f0000000700)='./file0\x00', &(0x7f0000000140)=""/189, 0xbd) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000006c0)) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000300)=0x7f, 0x4) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001a000140af0000000100000a000a000000", @ANYRES32=0x0, @ANYBLOB="000000001400100000000000000000000000ffffac1414bb"], 0x30}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000000140)=0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) vmsplice(r4, &(0x7f0000000600)=[{&(0x7f00000007c0)="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", 0xffe}, {&(0x7f0000000280)="0101cb96e73a64b8fb6046fa6c88c517583fef5085809ead0b56b5c6e980f2bea2161fb84a5a56802e1d6558ee250ace4f70990320a05bd67c54873d8f2e25c9b0cafd0ba4458306503121faf474c911a276c1223c507650367c098ac269", 0x5e}, {&(0x7f0000000440)="4b4a8d57294cf3ff0830fde72c51b64e4de4ed2198a4056528ef02912e9cfb25077f8cf0c7cce5d1a260a1404015a6aefd174f7bdcb8634668e6b828a368a517801ddab9dd755e475325cd25a98cc20689ab2103bd8aa7873e143f7a49c16bc8523f3b4bf2a772b1069d9d38fbc49fc96f3ca9f06b4b7e8160281680e2fa6b4ec58dfacdc1386cd2add5fca0eb4116d3043f11ee7a92193a6095b30b35d765d4ec", 0xa1}, {&(0x7f0000000500)="35f3855ff9bc1dca4335fc7673b97eef92e431c40acafbfe7c5ca6d64bdd9f6724c26f2d00a4f44599d9a1767973a214486a7ab148938756db3a3e0df7c4daa529854532d85bea26cc775fce085c0a5793d4a7b850a321500690e9491a1cc3d07fcb749d4a5aff0dec877f51b976", 0x6e}, {&(0x7f0000000580)="1e1ed2818cda03425b387d0d6f116724200dad1d958dfcdaab14a101834c45e0565e253bb0f7aa67d2c595d3ce5177272f35cebd7401e80a347145b1", 0x3c}], 0x5, 0xd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r10}, @fd={0x73622a85, 0x0, r3}, @flat=@weak_handle}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000017c0)={{0x2, 0x4e22, @broadcast}, {0x306, @broadcast}, 0x10, {0x2, 0x4e21, @local}, 'pim6reg0\x00'}) 331.736643ms ago: executing program 1 (id=674): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") 290.735656ms ago: executing program 0 (id=673): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1181}) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x40, 0x2460c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) r6 = getpgid(0x0) r7 = syz_pidfd_open(r6, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = pidfd_getfd(r7, r2, 0x0) readlinkat(r8, &(0x7f0000000700)='./file0\x00', &(0x7f0000000140)=""/189, 0xbd) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000006c0)) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000300)=0x7f, 0x4) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001a000140af0000000100000a000a000000", @ANYRES32=0x0, @ANYBLOB="000000001400100000000000000000000000ffffac1414bb"], 0x30}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000000140)=0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) vmsplice(r4, &(0x7f0000000600)=[{&(0x7f00000007c0)="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", 0xffe}, {&(0x7f0000000280)="0101cb96e73a64b8fb6046fa6c88c517583fef5085809ead0b56b5c6e980f2bea2161fb84a5a56802e1d6558ee250ace4f70990320a05bd67c54873d8f2e25c9b0cafd0ba4458306503121faf474c911a276c1223c507650367c098ac269", 0x5e}, {&(0x7f0000000440)="4b4a8d57294cf3ff0830fde72c51b64e4de4ed2198a4056528ef02912e9cfb25077f8cf0c7cce5d1a260a1404015a6aefd174f7bdcb8634668e6b828a368a517801ddab9dd755e475325cd25a98cc20689ab2103bd8aa7873e143f7a49c16bc8523f3b4bf2a772b1069d9d38fbc49fc96f3ca9f06b4b7e8160281680e2fa6b4ec58dfacdc1386cd2add5fca0eb4116d3043f11ee7a92193a6095b30b35d765d4ec", 0xa1}, {&(0x7f0000000500)="35f3855ff9bc1dca4335fc7673b97eef92e431c40acafbfe7c5ca6d64bdd9f6724c26f2d00a4f44599d9a1767973a214486a7ab148938756db3a3e0df7c4daa529854532d85bea26cc775fce085c0a5793d4a7b850a321500690e9491a1cc3d07fcb749d4a5aff0dec877f51b976", 0x6e}, {&(0x7f0000000580)="1e1ed2818cda03425b387d0d6f116724200dad1d958dfcdaab14a101834c45e0565e253bb0f7aa67d2c595d3ce5177272f35cebd7401e80a347145b1", 0x3c}], 0x5, 0xd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r10}, @fd={0x73622a85, 0x0, r3}, @flat=@weak_handle}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000017c0)={{0x2, 0x4e22, @broadcast}, {0x306, @broadcast}, 0x10, {0x2, 0x4e21, @local}, 'pim6reg0\x00'}) 244.6363ms ago: executing program 0 (id=675): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x38000) 105.979791ms ago: executing program 1 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x10, 0x111, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x6, 0x5, "0481aedfaadc00"}]}]}, 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f00000002c0), 0x1, 0x78e, &(0x7f0000001480)="$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") r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x48) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="660a000000000000686d7bb4708dcd2d92cc1c8f0b03f8756111850000000000180000000000000000000000009500000000000000000000b2455357762fc182de9b0a1332cd6b331be35fbdd8203430da5dae24bf54693052"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x10, &(0x7f0000000b40), 0x0, 0x0, 0x4e, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0x58, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x0, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000001fcffff0000000020000000181000005669e6f1cd219f9f3fea9454f611ee937388d55d48fb6ae9abec5fb23fe0f51785e17ad1ce25a75c96a211e1a32e6ed840532f", @ANYRES32, @ANYBLOB], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xdb, &(0x7f0000000f80)=""/219, 0x0, 0x6d, '\x00', r4, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000011c0)={0x2, 0x8, 0x0, 0xfb4c2ba}, 0x10, 0x0, r3, 0xc, &(0x7f0000001200)=[0xffffffffffffffff], &(0x7f0000000680)=[{0x0, 0x4, 0x8, 0x2}, {0x0, 0x80000000, 0xb, 0x2}, {0x3, 0x0, 0x10}, {0x2, 0x3, 0x8, 0x1}, {0x0, 0x2, 0x6, 0xb}, {0x2, 0x1, 0x2, 0xa}, {0x5, 0x5, 0x10}, {0x0, 0x2, 0x9}, {0x5, 0x5, 0xd}, {0x4, 0x5, 0xe, 0x4}, {0x0, 0x5, 0xa, 0xc}, {0x0, 0x0, 0x0, 0x4}]}, 0x90) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x4, 0xfffffff8, 0xf, 0x8, 0x1020, r2, 0x101, '\x00', r4, r5, 0x1, 0x2}, 0x48) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x80805c, 0x0) mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x0, r8}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r7, 0x4008af22, &(0x7f0000000180)={0x0, r8}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x20000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000001040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x13, r9, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x0, 0x10000}) dup2(r6, 0xffffffffffffffff) 53.902946ms ago: executing program 2 (id=677): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x260000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) socket$packet(0x11, 0x0, 0x300) 419.75µs ago: executing program 2 (id=678): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x800) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000140)={0x8, 0xe3}) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x4b) readlinkat(r4, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/147, 0x93) r5 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x3, &(0x7f0000000340)) epoll_create(0xfffffffa) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'tunl0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x1, 0x20, 0x9, 0x6, {{0x48, 0x4, 0x2, 0x8, 0x120, 0x64, 0x0, 0x0, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0x26, 0x0, [{0x2, 0x7, 'HA\f\x00l'}, {0x0, 0xb, "5c4dcded7118838970"}, {0x7, 0xe, "329e915411a16f7eb2aa0c06"}]}, @lsrr={0x83, 0x13, 0x7e, [@loopback, @loopback, @empty, @multicast1]}, @timestamp_prespec={0x44, 0x54, 0x75, 0x3, 0x1, [{@rand_addr=0x64010102, 0x401}, {@multicast1, 0x10001}, {@broadcast, 0x1}, {@remote, 0x401}, {@local, 0xd}, {@private=0xa010101, 0x3}, {@private=0xa010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@loopback, 0xe6e}]}, @timestamp_addr={0x44, 0x24, 0x1a, 0x1, 0x1, [{@loopback, 0x80}, {@loopback, 0x3ff}, {@remote, 0x6}, {@private=0xa010102, 0x223}]}, @rr={0x7, 0xf, 0xb1, [@remote, @dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0xe}]}, @timestamp_addr={0x44, 0x4c, 0xa2, 0x1, 0x6, [{@loopback, 0x2}, {@local, 0x8}, {@empty, 0x6}, {@private=0xa010101, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffb}, {@broadcast, 0x4}, {@remote, 0x1d11}, {@remote, 0x651e}, {@rand_addr=0x64010100, 0x1c}]}]}}}}}) getsockname$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xbc, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2000c815}, 0x804) r8 = openat$incfs(r4, &(0x7f0000000700)='.log\x00', 0x60401, 0x28) connect$pppl2tp(r8, &(0x7f0000000740)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x1, 0x0, 0x4, {0xa, 0x4e20, 0x7be, @private2, 0x9}}}, 0x3a) connect$unix(r8, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sched_setaffinity(r5, 0x8, &(0x7f0000000800)=0x8) socket$unix(0x1, 0x5, 0x0) sendmsg$sock(r8, &(0x7f0000001f80)={&(0x7f0000000840)=@xdp={0x2c, 0x4, r6, 0x38}, 0x80, &(0x7f0000001e40)=[{&(0x7f00000008c0)="f93eb00ff91db92ea5056f812eb79363c280effd79addf22a1a945356bb22f1e9befedff983b7ad469cfa0858d70ee80c64768fca4efb4124e902c4b9071d5ebd3d58a85572e86d9ecde0d28f6068ec014cca05d3e0359b19b251878999b79f529a97d1fbfb313e7ca520d3743cbe97599d3c549c03b85aa365a7206d4be26b60f78fe649e0016fa8f035ab79e56f7b250a0fd5e", 0x94}, {&(0x7f0000000980)="003eed6d5b166317bb653ff8242101b8ce24818b3f6ece6a7626b4d3c8fc571e64b74898a8a4d30a25d174f5bdb3a3bc4a9905f42866758e35cc4a8eb4f60d9f9d2a7e6a0a38676b0a5656ef26a999079b81b3c04909185ff9b0200e4dcb44703906c92873b42218332713848072ddf483ea0b39c29269dd57022bfa32cdaf19970f380fae016cf7e9ed5f5df714ffa6", 0x90}, {&(0x7f0000000a40)="b430becea1338a02264d3789314532a73a5767acb3ec214c8b413c890e42a9a2d2938a5d9008ef20618af3bef8f70e94d3712a366a1404bebdb26af0a92065f9379e6c8811a1c31ab186bb3b09debbbf408be7dd74307fa8359444da62480774e058662ed5e4e11725d20274c1398a8313ac7cecc05175338055f7186cf2ed", 0x7f}, {&(0x7f0000000ac0)="d61d484534a381a5e5691a0621ca2e9e5b9b9d4d938074d8220665bf295a546af8072fa897d949351ccd8af53ce28d0f21a4b03a4caae5ba546318bf417c252d81801b9cf44a83e83293958dbeb1fd5ee44d8d02e80c17ee0fea15727c2aa533cc7f44f12430575ea58140bd57463b0f91bdefe112daaf889fc7c3d28775359806394a3af93cb3a17499cfa31387a0f91758f51d7e06938fa868e799a24dca324410f0e32ab72cd44debd417a6", 0xad}, {&(0x7f0000000b80)="2e5cf18a469f2f5aa8aded9dfc7d160229bd9a2c95f4bc365f49124ac9ab2ea3509ca6ac90b11a49c235", 0x2a}, {&(0x7f0000000bc0)="5c45cdfcd55d3a78e8a5d984f9edb1d834c071ca3c19a8b96b9d7c00884ead1897ab09b30badd41e1590be5850ca071805b629494f1371eeb1c34059f851e4592f02726a4510372059ca3413a7b19c199c6029291ebd3e21963de73533c71af896992b65185701da4909fcc2e46457adaed73c91983b81dbed6ea5e9ea61b90f49f16c2c4fc3b4b6bbd513452e4eccba15d24907d6a415651aee0a0262ccdac24c6fa2841ff2bb2ba08fa5953e", 0xad}, {&(0x7f0000000c80)="f2806d007243a090e8625c3a7b355057d3d0aa117751a53d8d535ed418a1ed62cac07e555c4317f7af389fb1416ebf23e00214930cb4f4b540d2fd0ac245fdd50c2c176e21a6878cf2ecd03506aeebca7e", 0x51}, {&(0x7f0000000d00)="f2d031aeb7ff52d2f37a421ae7b3ac79afc27f870329e162933b9753abc74ace5a4408c81bf6903bf87f5c41eb09d5401d20b192dbc7fbae017130014fa323b15af0d78c9f387e7b62d70ca499bae94fde7590df56ed0f0f76efb910f9f4c757fe029e5646683f5cf66c519d0b43161725", 0x71}, {&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000001d80)="421d582ed989a2805f46eeec8c30ca1dd15166ea77343fa6bac125725a7593664ca1639af21242b89117150c5d6bb5cd621a80a7bfe7cf7cc7cae2dddc2b731da324912a9d2b7336e658ac3c12dbfac952ed3dde6aee6f540e36866ed37bb350f10cf11ea77160df841d6ec460ec6bb151776430441b2050be780f85bfb82bb7a554aec85017fceac59ce98cdba29683", 0x90}], 0xa, &(0x7f0000001f00)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x800}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}], 0x60}, 0x24008000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002000), r8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000020c0)={'syztnl0\x00', &(0x7f0000002040)={'syztnl1\x00', r7, 0x29, 0x10, 0x9, 0x8001, 0x69, @private0, @local, 0x1, 0x1, 0x1, 0xe}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000002200)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002100)={0xbc, r10, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40048c0}, 0x40) sendmsg$nl_route_sched(r8, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)=@newqdisc={0x4c, 0x24, 0x10, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xffe0, 0x10}, {0x1f, 0x1}, {0xffe0, 0xb}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x4, 0x5, 0x1, 0x2, 0x7, 0x8, 0x2}}, {0x8, 0x2, [0x7, 0x4]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$KDSIGACCEPT(r8, 0x4b4e, 0xa) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002400)={r8, 0x58, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f00000024c0)={'ip_vti0\x00', &(0x7f0000002440)={'erspan0\x00', r12, 0x8000, 0x80, 0x17, 0x8, {{0x15, 0x4, 0x3, 0x4, 0x54, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast1, @empty, {[@rr={0x7, 0x23, 0xee, [@multicast2, @empty, @local, @loopback, @loopback, @multicast1, @loopback, @broadcast]}, @timestamp_prespec={0x44, 0x1c, 0x93, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x10}, 0x3}, {@empty, 0x9}, {@remote, 0x8}]}, @end]}}}}}) 181.78µs ago: executing program 2 (id=679): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x8c, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC]) 0s ago: executing program 2 (id=680): mprotect(&(0x7f0000000000/0x800000)=nil, 0x8011a3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x0, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$ENABLE_STATS(0x20, &(0x7f0000000280), 0x32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001439) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r6], 0x1d8}}, 0x0) kernel console output (not intermixed with test programs): ing [ 61.270336][ T441] usb 2-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 61.281252][ T441] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 61.292373][ T441] usb 2-1: config 32 interface 77 altsetting 64 has 7 endpoint descriptors, different from the interface descriptor's value: 11 [ 61.305357][ T441] usb 2-1: config 32 interface 77 has no altsetting 0 [ 61.438771][ T1236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.230'. [ 61.533842][ T441] usb 2-1: Dual-Role OTG device on HNP port [ 61.661262][ T441] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 61.885137][ T441] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.893005][ T441] usb 2-1: Product: syz [ 61.896975][ T441] usb 2-1: Manufacturer: syz [ 61.901410][ T441] usb 2-1: SerialNumber: syz [ 62.091860][ T1247] F2FS-fs (loop3): Found nat_bits in checkpoint [ 62.114756][ T1247] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 62.217992][ T441] usb 2-1: USB disconnect, device number 8 [ 62.496001][ T328] usbhid 1-1:0.0: can't add hid device: -71 [ 62.501877][ T328] usbhid: probe of 1-1:0.0 failed with error -71 [ 62.511440][ T328] usb 1-1: USB disconnect, device number 8 [ 62.823598][ T1105] attempt to access beyond end of device [ 62.823598][ T1105] loop3: rw=2049, want=45112, limit=40427 [ 63.648192][ T1286] fuse: Bad value for 'user_id' [ 63.654030][ T1286] overlayfs: missing 'lowerdir' [ 63.731034][ T1288] input: syz0 as /devices/virtual/input/input6 [ 63.913728][ T1289] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 63.922526][ T1289] ext4 filesystem being mounted at /3/bus supports timestamps until 2038 (0x7fffffff) [ 64.615953][ T303] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 64.871217][ T1322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.252'. [ 64.881591][ T1322] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 64.976032][ T303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.995437][ T303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.015337][ T303] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 65.034510][ T303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.051649][ T303] usb 5-1: config 0 descriptor?? [ 65.334383][ T1332] input: syz0 as /devices/virtual/input/input7 [ 65.383921][ T24] kauditd_printk_skb: 71 callbacks suppressed [ 65.383931][ T24] audit: type=1400 audit(1720292553.740:432): avc: denied { create } for pid=1304 comm="syz.4.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.615953][ T951] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 65.682144][ T1337] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 65.689198][ T1337] EXT4-fs (loop1): #blocks per group too big: 24576 [ 65.797790][ T1345] netlink: 104 bytes leftover after parsing attributes in process `syz.1.258'. [ 65.976170][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.987658][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.999344][ T951] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 66.009728][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.026426][ T951] usb 3-1: config 0 descriptor?? [ 66.075945][ T441] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 66.345952][ T441] usb 1-1: Using ep0 maxpacket: 8 [ 66.366034][ T951] usbhid 3-1:0.0: can't add hid device: -71 [ 66.371832][ T951] usbhid: probe of 3-1:0.0 failed with error -71 [ 66.379240][ T951] usb 3-1: USB disconnect, device number 11 [ 66.486027][ T441] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 66.494940][ T441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.503683][ T441] usb 1-1: config 0 descriptor?? [ 66.639634][ T1356] loop1: p1 < > p4 [ 66.644127][ T1356] loop1: p4 size 8388608 extends beyond EOD, truncated [ 66.735991][ T951] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 66.870954][ T24] audit: type=1400 audit(1720292555.230:433): avc: denied { accept } for pid=1369 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 66.892137][ T24] audit: type=1400 audit(1720292555.230:434): avc: denied { mount } for pid=1369 comm="syz.1.267" name="/" dev="ramfs" ino=19150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 66.914728][ T24] audit: type=1400 audit(1720292555.250:435): avc: denied { unmount } for pid=1188 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 66.936077][ T1094] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 67.066027][ T441] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 67.075987][ T441] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 67.115974][ T951] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.126033][ T951] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 67.135974][ T441] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 67.206014][ T951] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 67.215785][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 67.223804][ T951] usb 3-1: SerialNumber: syz [ 67.235961][ T1094] usb 4-1: device descriptor read/64, error -71 [ 67.466005][ T303] usbhid 5-1:0.0: can't add hid device: -71 [ 67.471881][ T303] usbhid: probe of 5-1:0.0 failed with error -71 [ 67.485522][ T303] usb 5-1: USB disconnect, device number 8 [ 67.528811][ T951] usb 3-1: 0:2 : does not exist [ 67.533791][ T951] usb 3-1: unit 5 not found! [ 67.572903][ T951] usb 3-1: USB disconnect, device number 12 [ 67.588945][ T1039] udevd[1039]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.655982][ T1094] usb 4-1: device descriptor read/64, error -71 [ 67.925969][ T1094] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 68.010628][ T1385] F2FS-fs (loop1): Found nat_bits in checkpoint [ 68.040085][ T1385] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 68.047666][ T24] audit: type=1400 audit(1720292556.410:436): avc: denied { mount } for pid=1384 comm="syz.1.271" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.083447][ T1393] xt_NFQUEUE: number of total queues is 0 [ 68.086151][ T1385] attempt to access beyond end of device [ 68.086151][ T1385] loop1: rw=2049, want=53384, limit=40427 [ 68.106663][ T1385] attempt to access beyond end of device [ 68.106663][ T1385] loop1: rw=2049, want=53512, limit=40427 [ 68.123815][ T24] audit: type=1400 audit(1720292556.480:437): avc: denied { unmount } for pid=1188 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.143535][ T1188] attempt to access beyond end of device [ 68.143535][ T1188] loop1: rw=2049, want=45104, limit=40427 [ 68.268459][ T24] audit: type=1400 audit(1720292556.620:438): avc: denied { setopt } for pid=1392 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.408912][ T1094] usb 4-1: device descriptor read/64, error -71 [ 68.451019][ T1397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 68.461266][ T1397] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 68.746909][ T441] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 68.756185][ T1405] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1405 comm=syz.0.276 [ 68.777051][ T54] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 68.784405][ T441] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 68.817461][ T441] asix: probe of 1-1:0.0 failed with error -71 [ 68.824195][ T441] usb 1-1: USB disconnect, device number 9 [ 68.845973][ T1094] usb 4-1: device descriptor read/64, error -71 [ 68.936699][ T1405] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(3584) blocks(3072) [ 68.945060][ T1405] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 68.960200][ T1405] F2FS-fs (loop0): Found nat_bits in checkpoint [ 68.966469][ T1094] usb usb4-port1: attempt power cycle [ 68.987889][ T1413] syz.2.278[1413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.987942][ T1413] syz.2.278[1413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.000098][ T1405] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 69.018316][ T1405] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 69.056053][ T54] usb 2-1: too many configurations: 156, using maximum allowed: 8 [ 69.429623][ T24] audit: type=1400 audit(1720292557.790:439): avc: denied { create } for pid=1426 comm="syz.4.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.449171][ T1427] bridge: RTM_NEWNEIGH with invalid ether address [ 69.486106][ T1094] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 69.655988][ T1094] usb 4-1: device descriptor read/8, error -71 [ 69.761631][ T24] audit: type=1400 audit(1720292558.120:440): avc: denied { write } for pid=1435 comm="syz.3.284" name="ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.866008][ T1094] usb 4-1: device descriptor read/8, error -71 [ 69.981493][ T1439] 9pnet: Insufficient options for proto=fd [ 69.999910][ T1445] xt_NFQUEUE: number of total queues is 0 [ 70.005661][ T1447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'. [ 70.066053][ T54] usb 2-1: New USB device found, idVendor=7de0, idProduct=5373, bcdDevice=21.62 [ 70.075625][ T54] usb 2-1: New USB device strings: Mfr=196, Product=150, SerialNumber=13 [ 70.084291][ T54] usb 2-1: Product: syz [ 70.097677][ T54] usb 2-1: Manufacturer: syz [ 70.102217][ T54] usb 2-1: SerialNumber: syz [ 70.107918][ T1455] EXT4-fs (loop0): 1 truncate cleaned up [ 70.132536][ T54] usb 2-1: config 0 descriptor?? [ 70.137843][ T1455] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 70.201068][ T24] audit: type=1400 audit(1720292558.560:441): avc: denied { write } for pid=1461 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 70.395251][ T951] usb 2-1: USB disconnect, device number 9 [ 70.557993][ T24] audit: type=1400 audit(1720292558.920:442): avc: denied { map } for pid=1467 comm="syz.0.295" path="socket:[19252]" dev="sockfs" ino=19252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.581036][ T24] audit: type=1400 audit(1720292558.920:443): avc: denied { read } for pid=1467 comm="syz.0.295" path="socket:[19252]" dev="sockfs" ino=19252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.858293][ T1473] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 70.890386][ T1473] incfs: ino conflict with backing FS 1 [ 70.956171][ T1476] exfat: Unknown parameter 'GPL' [ 71.107910][ T1476] capability: warning: `syz.4.298' uses deprecated v2 capabilities in a way that may be insecure [ 71.129370][ T1490] EXT4-fs (loop3): Test dummy encryption mode enabled [ 71.136794][ T1490] EXT4-fs (loop3): Ignoring removed orlov option [ 71.143130][ T1490] EXT4-fs (loop3): bad geometry: block count 1048576 exceeds size of device (512 blocks) [ 71.176106][ T951] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 71.186982][ T1493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 71.208211][ T24] audit: type=1400 audit(1720292559.570:444): avc: denied { unmount } for pid=1087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.317439][ T1499] 9pnet: Insufficient options for proto=fd [ 71.435945][ T951] usb 1-1: Using ep0 maxpacket: 16 [ 71.525400][ T1510] xt_NFQUEUE: number of total queues is 0 [ 71.534282][ T1507] exfat: Deprecated parameter 'utf8' [ 71.556137][ T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 71.560131][ T1507] exfat: Deprecated parameter 'namecase' [ 71.572633][ T1507] exfat: Deprecated parameter 'namecase' [ 71.578310][ T1507] exfat: Deprecated parameter 'utf8' [ 71.585561][ T1507] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 71.597575][ T1094] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 71.623301][ T24] audit: type=1400 audit(1720292559.970:445): avc: denied { write } for pid=1502 comm="syz.1.307" path=2F32322FE91F7189591E9233614B2F627573 dev="loop1" ino=1048601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.669119][ T951] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 71.678240][ T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.688195][ T24] audit: type=1400 audit(1720292559.970:446): avc: denied { mounton } for pid=1502 comm="syz.1.307" path=2F32322FE91F7189591E9233614B2F627573 dev="loop1" ino=1048601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.691034][ T951] usb 1-1: config 0 descriptor?? [ 71.948464][ T1514] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 72.196053][ T1094] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.206925][ T1094] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.223727][ T1094] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 72.232939][ T1094] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.244677][ T1094] usb 5-1: config 0 descriptor?? [ 72.529483][ T24] audit: type=1400 audit(1720292560.890:447): avc: denied { read } for pid=1523 comm="syz-executor" dev="nsfs" ino=4026531999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.551023][ T24] audit: type=1400 audit(1720292560.890:448): avc: denied { open } for pid=1523 comm="syz-executor" path="net:[4026531999]" dev="nsfs" ino=4026531999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.577905][ T1523] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.584765][ T1523] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.592142][ T1523] device bridge_slave_0 entered promiscuous mode [ 72.600591][ T1523] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.607700][ T1523] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.614871][ T1523] device bridge_slave_1 entered promiscuous mode [ 72.645412][ T1523] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.652263][ T1523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.659360][ T1523] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.666144][ T1523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.683770][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.691196][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.699260][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.709989][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.717910][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.724733][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.731945][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.739985][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.746835][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.759691][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.768164][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.776038][ T301] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 72.783548][ T1094] hid (null): bogus close delimiter [ 72.797128][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.809367][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.818044][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.825281][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.835354][ T1523] device veth0_vlan entered promiscuous mode [ 72.851957][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.861892][ T1523] device veth1_macvtap entered promiscuous mode [ 72.873908][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.883067][ T322] device bridge_slave_1 left promiscuous mode [ 72.884343][ T1528] EXT4-fs (loop3): 1 orphan inode deleted [ 72.889304][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.894804][ T1528] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,errors=continue, [ 72.920879][ T322] device bridge_slave_0 left promiscuous mode [ 72.921655][ T1528] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038 (0x7fffffff) [ 72.927643][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.944529][ T322] device veth1_macvtap left promiscuous mode [ 72.944537][ T24] audit: type=1400 audit(1720292561.300:449): avc: denied { mounton } for pid=1527 comm="syz.3.315" path="/25/file1/bus" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.950374][ T322] device veth0_vlan left promiscuous mode [ 72.978358][ T1094] usb 5-1: language id specifier not provided by device, defaulting to English [ 72.978522][ T1528] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #16: comm syz.3.315: corrupted xattr block 37 [ 72.999218][ T1528] EXT4-fs error (device loop3): ext4_map_blocks:600: inode #3: block 9: comm syz.3.315: lblock 0 mapped to illegal pblock 9 (length 1) [ 73.013305][ T1528] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 73.021895][ T1528] EXT4-fs error (device loop3): ext4_write_dquot:6199: comm syz.3.315: Failed to commit dquot type 0 [ 73.032730][ T1528] EXT4-fs error (device loop3): __ext4_get_inode_loc:4409: comm syz.3.315: Invalid inode table block 0 in block_group 0 [ 73.045293][ T1528] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5869: Corrupt filesystem [ 73.054764][ T1528] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #16: comm syz.3.315: mark_inode_dirty error [ 73.055922][ T301] usb 3-1: Using ep0 maxpacket: 16 [ 73.066382][ T1528] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.315: Invalid block bitmap block 0 in block_group 0 [ 73.084178][ T1528] EXT4-fs error (device loop3): ext4_map_blocks:600: inode #3: block 9: comm syz.3.315: lblock 0 mapped to illegal pblock 9 (length 1) [ 73.098189][ T1528] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 73.106189][ T1528] EXT4-fs error (device loop3): ext4_write_dquot:6199: comm syz.3.315: Failed to commit dquot type 0 [ 73.117099][ T1528] EXT4-fs error (device loop3): __ext4_get_inode_loc:4409: comm syz.3.315: Invalid inode table block 0 in block_group 0 [ 73.130832][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.171789][ T1534] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.314: inline data xattr refers to an external xattr inode [ 73.186648][ T1534] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.314: couldn't read orphan inode 12 (err -117) [ 73.198651][ T1534] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,jqfmt=vfsold,grpjquota=,resuid=0x0000000000000000,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue [ 73.224405][ T301] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 73.233578][ T301] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 73.243159][ T301] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 73.252640][ T301] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 73.262217][ T301] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 73.271757][ T301] usb 3-1: config 1 interface 0 has no altsetting 0 [ 73.278203][ T301] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 73.287123][ T301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.336487][ T301] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 73.431414][ T1540] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.438313][ T1540] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.445382][ T1540] device bridge_slave_0 entered promiscuous mode [ 73.454893][ T1540] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.462109][ T1540] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.467894][ T1546] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 73.469750][ T1540] device bridge_slave_1 entered promiscuous mode [ 73.548436][ T1540] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.555373][ T1540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.562488][ T1540] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.569356][ T1540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.576157][ T301] scsi host1: usb-storage 3-1:1.0 [ 73.959745][ T1094] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71 [ 73.976893][ T301] usb 3-1: USB disconnect, device number 13 [ 73.984007][ T1094] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 73.984919][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.999020][ T1094] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71 [ 73.999041][ T1094] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 73.999100][ T1094] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 74.007894][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.017891][ T1094] usb 5-1: USB disconnect, device number 9 [ 74.027022][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.045994][ T951] usbhid 1-1:0.0: can't add hid device: -71 [ 74.052498][ T951] usbhid: probe of 1-1:0.0 failed with error -71 [ 74.059848][ T951] usb 1-1: USB disconnect, device number 10 [ 74.068779][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.076685][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.095092][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.108115][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.115834][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.124070][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.133245][ T1540] device veth0_vlan entered promiscuous mode [ 74.148101][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.157775][ T1540] device veth1_macvtap entered promiscuous mode [ 74.168020][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.185521][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.228810][ T1555] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.235852][ T1555] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.243213][ T1555] device bridge_slave_0 entered promiscuous mode [ 74.250393][ T1555] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.257490][ T1555] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.306850][ T1555] device bridge_slave_1 entered promiscuous mode [ 74.324542][ T322] bridge0: port 3(gretap0) entered disabled state [ 74.333126][ T322] device gretap0 left promiscuous mode [ 74.692839][ T322] bridge0: port 3(gretap0) entered disabled state [ 74.705583][ T1569] EXT4-fs (loop3): Test dummy encryption mode enabled [ 74.712287][ T1569] EXT4-fs (loop3): Ignoring removed orlov option [ 74.718458][ T1569] EXT4-fs (loop3): bad geometry: block count 1048576 exceeds size of device (512 blocks) [ 74.764032][ T1555] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.770897][ T1555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.778012][ T1555] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.784765][ T1555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.843488][ T1094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.851522][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.859620][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.868395][ T322] device bridge_slave_1 left promiscuous mode [ 74.874452][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.973212][ T1578] netlink: 104 bytes leftover after parsing attributes in process `syz.2.327'. [ 74.995091][ T322] device bridge_slave_0 left promiscuous mode [ 75.019805][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.197515][ T322] device veth1_macvtap left promiscuous mode [ 75.203345][ T322] device veth0_vlan left promiscuous mode [ 75.223720][ T1584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1584 comm=syz.1.329 [ 75.289139][ T1589] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 75.297047][ T1589] System zones: 0-2, 18-18, 34-35 [ 75.302680][ T1589] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 75.313442][ T1589] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 75.398634][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.406857][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.415134][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.422018][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.429271][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.437867][ T1596] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 75.445207][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.453281][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.460207][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.472056][ T1595] tap0: tun_chr_ioctl cmd 1074025676 [ 75.477304][ T1595] tap0: owner set to 0 [ 75.485031][ T1595] tap0: tun_chr_ioctl cmd 35108 [ 75.490117][ T1094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.498413][ T1094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.506335][ T1094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.514137][ T1094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.527972][ T1555] device veth0_vlan entered promiscuous mode [ 75.534238][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.542563][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.550760][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.558780][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.570895][ T1555] device veth1_macvtap entered promiscuous mode [ 75.577653][ T1094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.584855][ T1094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.592126][ T1094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.600426][ T1094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.608810][ T1094] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.621550][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.629688][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.637881][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.646174][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.809708][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 75.809751][ T24] audit: type=1400 audit(1720292564.160:455): avc: denied { create } for pid=1600 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.841113][ T24] audit: type=1400 audit(1720292564.160:456): avc: denied { bind } for pid=1600 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.877154][ T24] audit: type=1400 audit(1720292564.160:457): avc: denied { write } for pid=1600 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.908780][ T1606] netlink: 252 bytes leftover after parsing attributes in process `syz.2.334'. [ 75.917674][ T1606] netlink: 252 bytes leftover after parsing attributes in process `syz.2.334'. [ 75.931649][ T1606] xt_policy: neither incoming nor outgoing policy selected [ 75.941924][ T1606] device batadv_slave_0 entered promiscuous mode [ 75.948281][ T1606] device batadv_slave_0 left promiscuous mode [ 76.111640][ T1613] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.336: inline data xattr refers to an external xattr inode [ 76.126814][ T1613] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.336: couldn't read orphan inode 12 (err -117) [ 76.140654][ T1613] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,jqfmt=vfsold,grpjquota=,resuid=0x0000000000000000,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue [ 76.316790][ T322] device bridge_slave_1 left promiscuous mode [ 76.322898][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.330513][ T322] device bridge_slave_0 left promiscuous mode [ 76.336598][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.345000][ T322] device veth1_macvtap left promiscuous mode [ 76.351204][ T322] device veth0_vlan left promiscuous mode [ 76.361815][ T24] audit: type=1326 audit(1720292564.720:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1624 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a63411bd9 code=0x7ffc0000 [ 76.607069][ T1627] EXT4-fs (loop4): Test dummy encryption mode enabled [ 76.613707][ T1627] EXT4-fs (loop4): Ignoring removed orlov option [ 76.619951][ T1627] EXT4-fs (loop4): bad geometry: block count 1048576 exceeds size of device (512 blocks) [ 76.651257][ T24] audit: type=1326 audit(1720292564.720:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1624 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a63411bd9 code=0x7ffc0000 [ 76.674806][ T24] audit: type=1326 audit(1720292564.720:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1624 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a63411bd9 code=0x7ffc0000 [ 76.699024][ T24] audit: type=1326 audit(1720292564.720:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1624 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a63411bd9 code=0x7ffc0000 [ 76.724957][ T24] audit: type=1326 audit(1720292564.720:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1624 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a63411bd9 code=0x7ffc0000 [ 76.752637][ T24] audit: type=1326 audit(1720292564.750:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1623 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324cccfbd9 code=0x7ffc0000 [ 76.776655][ T24] audit: type=1326 audit(1720292564.750:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1623 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324cccfbd9 code=0x7ffc0000 [ 77.546071][ T328] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 77.659514][ T1649] F2FS-fs (loop4): Found nat_bits in checkpoint [ 77.704381][ T1649] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 77.726404][ T15] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 77.738334][ T1649] attempt to access beyond end of device [ 77.738334][ T1649] loop4: rw=2049, want=53384, limit=40427 [ 77.751640][ T1649] attempt to access beyond end of device [ 77.751640][ T1649] loop4: rw=2049, want=53512, limit=40427 [ 77.763548][ T1663] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 77.771221][ T1087] attempt to access beyond end of device [ 77.771221][ T1087] loop4: rw=2049, want=45104, limit=40427 [ 77.783462][ T1667] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.351: inline data xattr refers to an external xattr inode [ 77.798688][ T1667] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.351: couldn't read orphan inode 12 (err -117) [ 77.810469][ T1667] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,jqfmt=vfsold,grpjquota=,resuid=0x0000000000000000,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue [ 77.981119][ T328] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.136023][ T15] usb 2-1: config index 0 descriptor too short (expected 8251, got 59) [ 78.143436][ T328] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.149342][ T15] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 78.169190][ T328] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.178975][ T328] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.218001][ T328] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 78.226951][ T328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.235309][ T328] usb 1-1: config 0 descriptor?? [ 78.256093][ T15] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.265039][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 78.272798][ T15] usb 2-1: SerialNumber: syz [ 78.486663][ T15] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 78.806144][ T1683] netlink: 'syz.0.342': attribute type 3 has an invalid length. [ 78.813713][ T1683] netlink: 'syz.0.342': attribute type 3 has an invalid length. [ 79.330945][ T1693] EXT4-fs (loop2): Test dummy encryption mode enabled [ 79.337909][ T1693] EXT4-fs (loop2): Ignoring removed orlov option [ 79.344299][ T1693] EXT4-fs (loop2): bad geometry: block count 1048576 exceeds size of device (512 blocks) [ 79.468897][ T20] usb 2-1: USB disconnect, device number 10 [ 79.482930][ T1696] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.490295][ T1696] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.497722][ T1696] device bridge_slave_0 entered promiscuous mode [ 79.504774][ T1696] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.511986][ T1696] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.519313][ T1696] device bridge_slave_1 entered promiscuous mode [ 79.564901][ T1696] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.571803][ T1696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.578879][ T1696] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.585631][ T1696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.041708][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.050346][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.057701][ T328] usbhid 1-1:0.0: can't add hid device: -71 [ 80.071775][ T328] usbhid: probe of 1-1:0.0 failed with error -71 [ 80.079080][ T328] usb 1-1: USB disconnect, device number 11 [ 80.087419][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.153557][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.161845][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.168740][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.211788][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.221658][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.228516][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.493666][ T1730] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 80.543448][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.551694][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.559563][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.567177][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.578814][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.586940][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.598773][ T1696] device veth0_vlan entered promiscuous mode [ 80.609952][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.619712][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.631196][ T1696] device veth1_macvtap entered promiscuous mode [ 80.644470][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.652208][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.661010][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.680538][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.688695][ T1094] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 80.697659][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.922041][ T1736] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 80.931422][ T1736] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 80.970197][ T1094] usb 3-1: device descriptor read/64, error -71 [ 80.991399][ T1736] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 81.012863][ T1736] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #2: comm syz.3.368: mark_inode_dirty error [ 81.026780][ T48] device bridge_slave_1 left promiscuous mode [ 81.032208][ T1736] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 81.035616][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.046098][ T1736] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.368: mark_inode_dirty error [ 81.059995][ T48] device bridge_slave_0 left promiscuous mode [ 81.066211][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.073950][ T48] device veth1_macvtap left promiscuous mode [ 81.079891][ T48] device veth0_vlan left promiscuous mode [ 81.089549][ T1746] netlink: 252 bytes leftover after parsing attributes in process `syz.4.369'. [ 81.147893][ T1748] xt_policy: neither incoming nor outgoing policy selected [ 81.476887][ T1748] device batadv_slave_0 entered promiscuous mode [ 81.483681][ T1746] netlink: 252 bytes leftover after parsing attributes in process `syz.4.369'. [ 81.494924][ T1746] device batadv_slave_0 left promiscuous mode [ 81.505965][ T54] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 81.517321][ T1756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.374'. [ 81.575971][ T328] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 81.635956][ T1094] usb 3-1: device descriptor read/64, error -71 [ 81.906037][ T54] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.916202][ T1094] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 81.924014][ T54] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.936512][ T54] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.983473][ T54] usb 2-1: config 0 interface 0 has no altsetting 0 [ 81.991371][ T54] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 82.001914][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.027673][ T54] usb 2-1: config 0 descriptor?? [ 82.236134][ T1094] usb 3-1: device descriptor read/64, error -71 [ 82.396051][ T328] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.406670][ T328] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.417558][ T328] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.427361][ T328] usb 4-1: config 0 interface 0 has no altsetting 0 [ 82.433866][ T328] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 82.442687][ T328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.451366][ T328] usb 4-1: config 0 descriptor?? [ 82.464710][ T1773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.379'. [ 82.626392][ T1779] netlink: 'syz.1.371': attribute type 3 has an invalid length. [ 82.633987][ T1779] netlink: 'syz.1.371': attribute type 3 has an invalid length. [ 82.652376][ T1094] usb 3-1: device descriptor read/64, error -71 [ 82.786285][ T1094] usb usb3-port1: attempt power cycle [ 82.972160][ T1786] FAULT_INJECTION: forcing a failure. [ 82.972160][ T1786] name failslab, interval 1, probability 0, space 0, times 0 [ 82.984833][ T1786] CPU: 1 PID: 1786 Comm: syz.0.382 Not tainted 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 82.994488][ T1786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 83.004339][ T1786] Call Trace: [ 83.007474][ T1786] dump_stack_lvl+0x1e2/0x24b [ 83.011980][ T1786] ? panic+0x812/0x812 [ 83.015882][ T1786] ? bfq_pos_tree_add_move+0x43b/0x43b [ 83.021176][ T1786] dump_stack+0x15/0x17 [ 83.025163][ T1786] should_fail+0x3c6/0x510 [ 83.029428][ T1786] ? xfrm_add_sa+0x1a84/0x3460 [ 83.034024][ T1786] __should_failslab+0xa4/0xe0 [ 83.038626][ T1786] should_failslab+0x9/0x20 [ 83.042957][ T1786] __kmalloc_track_caller+0x5f/0x320 [ 83.048081][ T1786] kmemdup+0x24/0x50 [ 83.051912][ T1786] xfrm_add_sa+0x1a84/0x3460 [ 83.056325][ T1786] ? __nla_validate+0x50/0x50 [ 83.060851][ T1786] ? xfrm_user_rcv_msg+0x7c0/0x7c0 [ 83.065788][ T1786] xfrm_user_rcv_msg+0x4e7/0x7c0 [ 83.070993][ T1786] ? xfrm_netlink_rcv+0x90/0x90 [ 83.075741][ T1786] ? stack_trace_save+0x113/0x1c0 [ 83.080547][ T1786] ? avc_has_perm_noaudit+0x240/0x240 [ 83.085745][ T1786] ? iov_iter_advance+0x258/0xb20 [ 83.088534][ T1788] netlink: 'syz.3.372': attribute type 3 has an invalid length. [ 83.090678][ T1786] netlink_rcv_skb+0x1cf/0x410 [ 83.098145][ T1788] netlink: 'syz.3.372': attribute type 3 has an invalid length. [ 83.102696][ T1786] ? xfrm_netlink_rcv+0x90/0x90 [ 83.114845][ T1786] ? netlink_ack+0xb30/0xb30 [ 83.119265][ T1786] ? mutex_trylock+0xa0/0xa0 [ 83.123686][ T1786] ? __netlink_lookup+0x37b/0x3a0 [ 83.128543][ T1786] xfrm_netlink_rcv+0x72/0x90 [ 83.133053][ T1786] netlink_unicast+0x8df/0xac0 [ 83.137645][ T1786] ? netlink_detachskb+0x90/0x90 [ 83.142418][ T1786] ? security_netlink_send+0x7b/0xa0 [ 83.147538][ T1786] netlink_sendmsg+0xa46/0xd00 [ 83.152139][ T1786] ? netlink_getsockopt+0x5c0/0x5c0 [ 83.157215][ T1786] ? kasan_set_track+0x5d/0x70 [ 83.162292][ T1786] ? security_socket_sendmsg+0x82/0xb0 [ 83.167597][ T1786] ? netlink_getsockopt+0x5c0/0x5c0 [ 83.172624][ T1786] ____sys_sendmsg+0x59e/0x8f0 [ 83.177224][ T1786] ? __sys_sendmsg_sock+0x40/0x40 [ 83.182083][ T1786] ? import_iovec+0xe5/0x120 [ 83.186512][ T1786] ___sys_sendmsg+0x252/0x2e0 [ 83.191022][ T1786] ? __sys_sendmsg+0x280/0x280 [ 83.195710][ T1786] ? rw_verify_area+0x1c3/0x360 [ 83.200575][ T1786] ? __fdget+0x1bc/0x240 [ 83.204653][ T1786] __se_sys_sendmsg+0x1b1/0x280 [ 83.209417][ T1786] ? __x64_sys_sendmsg+0x90/0x90 [ 83.214194][ T1786] ? ksys_write+0x260/0x2c0 [ 83.218538][ T1786] ? debug_smp_processor_id+0x17/0x20 [ 83.223749][ T1786] __x64_sys_sendmsg+0x7b/0x90 [ 83.228346][ T1786] do_syscall_64+0x34/0x70 [ 83.232596][ T1786] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 83.238322][ T1786] RIP: 0033:0x7f3c93aaabd9 [ 83.242578][ T1786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.262055][ T1786] RSP: 002b:00007f3c92cea048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.271043][ T1786] RAX: ffffffffffffffda RBX: 00007f3c93c39110 RCX: 00007f3c93aaabd9 [ 83.278855][ T1786] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 000000000000000c [ 83.286671][ T1786] RBP: 00007f3c92cea0a0 R08: 0000000000000000 R09: 0000000000000000 [ 83.294476][ T1786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.302609][ T1786] R13: 000000000000006e R14: 00007f3c93c39110 R15: 00007ffcb29a80a8 [ 83.422177][ T1793] netlink: 252 bytes leftover after parsing attributes in process `syz.4.384'. [ 83.431075][ T1793] netlink: 252 bytes leftover after parsing attributes in process `syz.4.384'. [ 83.441893][ T1793] xt_policy: neither incoming nor outgoing policy selected [ 83.453459][ T1793] device batadv_slave_0 entered promiscuous mode [ 83.459848][ T1793] device batadv_slave_0 left promiscuous mode [ 83.646642][ T24] kauditd_printk_skb: 39 callbacks suppressed [ 83.646652][ T24] audit: type=1400 audit(1720292572.010:504): avc: denied { bind } for pid=1797 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.086017][ T54] usbhid 2-1:0.0: can't add hid device: -71 [ 84.091937][ T54] usbhid: probe of 2-1:0.0 failed with error -71 [ 84.104612][ T54] usb 2-1: USB disconnect, device number 11 [ 84.416006][ T328] usbhid 4-1:0.0: can't add hid device: -71 [ 84.422232][ T328] usbhid: probe of 4-1:0.0 failed with error -71 [ 84.436344][ T328] usb 4-1: USB disconnect, device number 14 [ 84.874712][ T1827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.395'. [ 84.967233][ T1817] F2FS-fs (loop3): invalid crc_offset: 16 [ 84.992933][ T1817] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.029715][ T1817] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 85.076651][ T1696] attempt to access beyond end of device [ 85.076651][ T1696] loop3: rw=2049, want=45120, limit=40427 [ 85.191784][ T24] audit: type=1400 audit(1720292573.520:505): avc: denied { accept } for pid=1839 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 85.359224][ T1853] syz.0.406[1853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.359277][ T1853] syz.0.406[1853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.422537][ T1853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.406'. [ 85.655984][ T1094] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 85.665966][ T951] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 86.025999][ T951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.036838][ T951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.046346][ T951] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 86.055183][ T951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.055968][ T1094] usb 4-1: config index 0 descriptor too short (expected 13860, got 41) [ 86.063938][ T951] usb 5-1: config 0 descriptor?? [ 86.074107][ T1094] usb 4-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 86.085943][ T1094] usb 4-1: config 53 has 0 interfaces, different from the descriptor's value: 23 [ 86.094825][ T1094] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 86.103727][ T1094] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.146005][ T328] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 86.386052][ T328] usb 2-1: Using ep0 maxpacket: 8 [ 86.616188][ T328] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 86.648119][ T328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.659992][ T1859] udc-core: couldn't find an available UDC or it's busy [ 86.676307][ T1859] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 86.707973][ T328] usb 2-1: config 0 descriptor?? [ 86.736238][ T303] usb 4-1: USB disconnect, device number 15 [ 86.776049][ T951] usbhid 5-1:0.0: can't add hid device: -71 [ 86.782581][ T951] usbhid: probe of 5-1:0.0 failed with error -71 [ 86.792183][ T951] usb 5-1: USB disconnect, device number 10 [ 87.006023][ T328] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 87.015806][ T328] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 87.056001][ T328] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 87.295981][ T303] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 87.413766][ T1899] netlink: 104 bytes leftover after parsing attributes in process `syz.0.417'. [ 87.696059][ T303] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 87.707216][ T303] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 87.718522][ T303] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 87.727462][ T303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.846471][ T1893] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 88.083502][ T1870] EXT4-fs (loop1): Mount option "commit=0x0000000000000007" incompatible with ext2 [ 88.185966][ T328] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 88.206724][ T328] asix: probe of 2-1:0.0 failed with error -71 [ 88.213306][ T328] usb 2-1: USB disconnect, device number 12 [ 88.866052][ T303] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 88.873416][ T303] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input8 [ 88.882925][ T24] audit: type=1400 audit(1720292577.250:506): avc: denied { read } for pid=79 comm="acpid" name="event3" dev="devtmpfs" ino=592 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.905021][ T24] audit: type=1400 audit(1720292577.250:507): avc: denied { open } for pid=79 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=592 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.923513][ T303] usb 4-1: USB disconnect, device number 16 [ 88.935916][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 88.939717][ T24] audit: type=1400 audit(1720292577.250:508): avc: denied { ioctl } for pid=79 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=592 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.948786][ T1923] FAT-fs (loop1): Directory bread(block 64) failed [ 88.974870][ T1923] FAT-fs (loop1): Directory bread(block 65) failed [ 88.981254][ T1923] FAT-fs (loop1): Directory bread(block 66) failed [ 88.987581][ T1923] FAT-fs (loop1): Directory bread(block 67) failed [ 88.994083][ T1923] FAT-fs (loop1): Directory bread(block 68) failed [ 89.000810][ T1923] FAT-fs (loop1): Directory bread(block 69) failed [ 89.008843][ T1923] FAT-fs (loop1): Directory bread(block 70) failed [ 89.017861][ T1923] FAT-fs (loop1): Directory bread(block 71) failed [ 89.024289][ T1923] FAT-fs (loop1): Directory bread(block 72) failed [ 89.030598][ T1923] FAT-fs (loop1): Directory bread(block 73) failed [ 89.040866][ T1926] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 89.055483][ T1926] ext4 filesystem being mounted at /8/bus supports timestamps until 2038 (0x7fffffff) [ 89.131019][ T24] audit: type=1400 audit(1720292577.490:509): avc: denied { ioctl } for pid=1932 comm="syz.1.426" path="socket:[21557]" dev="sockfs" ino=21557 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.845150][ T1941] EXT4-fs (loop1): Test dummy encryption mode enabled [ 89.851851][ T1941] EXT4-fs (loop1): Ignoring removed orlov option [ 89.858064][ T1941] EXT4-fs (loop1): bad geometry: block count 1048576 exceeds size of device (512 blocks) [ 90.242103][ T1953] netlink: 104 bytes leftover after parsing attributes in process `syz.4.430'. [ 90.766201][ T1969] exfat: Unknown parameter 'GPL' [ 90.909905][ T1977] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,dioread_lock,,errors=continue [ 90.920995][ T1977] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038 (0x7fffffff) [ 91.002704][ T1987] syz.4.440[1987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.002741][ T1987] syz.4.440[1987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.014714][ T24] audit: type=1400 audit(1720292579.370:510): avc: denied { listen } for pid=1981 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.046257][ T24] audit: type=1400 audit(1720292579.370:511): avc: denied { getopt } for pid=1981 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.106631][ T1986] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 91.117407][ T1986] EXT4-fs (loop4): orphan cleanup on readonly fs [ 91.124391][ T1986] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.440: bg 0: block 248: padding at end of block bitmap is not set [ 91.138683][ T1986] Quota error (device loop4): write_blk: dquota write failed [ 91.146195][ T1986] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 91.156016][ T1986] EXT4-fs error (device loop4): ext4_acquire_dquot:6219: comm syz.4.440: Failed to acquire dquot type 1 [ 91.167962][ T1986] EXT4-fs (loop4): 1 truncate cleaned up [ 91.173701][ T1986] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,grpquota,quota,noblock_validity,nodiscard,nomblk_io_submit,,errors=continue [ 91.311263][ T1996] netlink: 104 bytes leftover after parsing attributes in process `syz.1.441'. [ 91.379594][ T1986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.440'. [ 91.510253][ T1998] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.442: inline data xattr refers to an external xattr inode [ 91.524989][ T1998] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.442: couldn't read orphan inode 12 (err -117) [ 91.536865][ T1998] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,jqfmt=vfsold,grpjquota=,resuid=0x0000000000000000,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue [ 91.758399][ T24] audit: type=1326 audit(1720292580.120:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2004 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c93aaabd9 code=0x7ffc0000 [ 91.782788][ T24] audit: type=1326 audit(1720292580.120:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2004 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f3c93aaabd9 code=0x7ffc0000 [ 91.893160][ T2010] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 92.103973][ T2019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.449'. [ 92.494684][ T2028] FAULT_INJECTION: forcing a failure. [ 92.494684][ T2028] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.507591][ T2028] CPU: 1 PID: 2028 Comm: syz.4.452 Not tainted 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 92.517343][ T2028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 92.527323][ T2028] Call Trace: [ 92.530454][ T2028] dump_stack_lvl+0x1e2/0x24b [ 92.534965][ T2028] ? bfq_pos_tree_add_move+0x43b/0x43b [ 92.540257][ T2028] ? shmem_getpage_gfp+0x2230/0x2480 [ 92.545372][ T2028] dump_stack+0x15/0x17 [ 92.549374][ T2028] should_fail+0x3c6/0x510 [ 92.553620][ T2028] should_fail_usercopy+0x1a/0x20 [ 92.558485][ T2028] iov_iter_copy_from_user_atomic+0x391/0xd80 [ 92.564380][ T2028] ? shmem_getpage+0xa0/0xa0 [ 92.568807][ T2028] ? iov_iter_fault_in_readable+0x31f/0x4f0 [ 92.574532][ T2028] ? memzero_page+0x100/0x100 [ 92.579048][ T2028] generic_perform_write+0x34c/0x570 [ 92.584169][ T2028] ? grab_cache_page_write_begin+0xa0/0xa0 [ 92.589809][ T2028] ? file_remove_privs+0x570/0x570 [ 92.594758][ T2028] ? vmf_allows_speculation+0x6f0/0x6f0 [ 92.600137][ T2028] ? __kasan_check_write+0x14/0x20 [ 92.605083][ T2028] __generic_file_write_iter+0x23c/0x560 [ 92.610550][ T2028] ? generic_write_checks+0x3b9/0x470 [ 92.615758][ T2028] generic_file_write_iter+0xaf/0x1c0 [ 92.620985][ T2028] vfs_write+0xb55/0xe70 [ 92.625070][ T2028] ? kernel_write+0x3d0/0x3d0 [ 92.629565][ T2028] ? __fdget_pos+0x209/0x3a0 [ 92.634019][ T2028] ? ksys_write+0x77/0x2c0 [ 92.638331][ T2028] ksys_write+0x199/0x2c0 [ 92.642494][ T2028] ? __kasan_check_write+0x14/0x20 [ 92.647438][ T2028] ? __ia32_sys_read+0x90/0x90 [ 92.652037][ T2028] ? debug_smp_processor_id+0x17/0x20 [ 92.657256][ T2028] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 92.663236][ T2028] ? irqentry_exit_to_user_mode+0x41/0x80 [ 92.668875][ T2028] __x64_sys_write+0x7b/0x90 [ 92.673301][ T2028] do_syscall_64+0x34/0x70 [ 92.677558][ T2028] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 92.683314][ T2028] RIP: 0033:0x7ff3566e075f [ 92.687536][ T2028] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 92.707061][ T2028] RSP: 002b:00007ff355962e00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 92.715307][ T2028] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007ff3566e075f [ 92.723118][ T2028] RDX: 0000000000080000 RSI: 00007ff34d543000 RDI: 0000000000000005 [ 92.730928][ T2028] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000005f7 [ 92.738747][ T2028] R10: 0000000020003d82 R11: 0000000000000293 R12: 0000000000000005 [ 92.746554][ T2028] R13: 00007ff355962f00 R14: 00007ff355962ec0 R15: 00007ff34d543000 [ 92.845763][ T2028] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 92.853998][ T2028] EXT4-fs (loop4): orphan cleanup on readonly fs [ 92.860590][ T2028] EXT4-fs warning (device loop4): ext4_enable_quotas:6467: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 92.875352][ T2028] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 92.882497][ T2028] EXT4-fs (loop4): 1 truncate cleaned up [ 92.888049][ T2028] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 93.100531][ T2045] netlink: 104 bytes leftover after parsing attributes in process `syz.1.457'. [ 93.333218][ T2047] netlink: 'syz.4.454': attribute type 4 has an invalid length. [ 93.342803][ T2047] netlink: 'syz.4.454': attribute type 4 has an invalid length. [ 93.601687][ T2049] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.609073][ T2049] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.617382][ T2049] device bridge_slave_0 entered promiscuous mode [ 93.625125][ T2049] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.633097][ T2049] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.641525][ T2049] device bridge_slave_1 entered promiscuous mode [ 93.662288][ T2056] netlink: 104 bytes leftover after parsing attributes in process `syz.0.459'. [ 93.707890][ T2049] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.714766][ T2049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.721863][ T2049] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.728723][ T2049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.760076][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.769669][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.790602][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.806763][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.814872][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.821921][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.830325][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.852004][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.852014][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.856712][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.861684][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.874561][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.878064][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.919284][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 93.919294][ T24] audit: type=1400 audit(1720292582.280:517): avc: denied { listen } for pid=2063 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.944894][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.952278][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.963505][ T24] audit: type=1400 audit(1720292582.320:518): avc: denied { relabelfrom } for pid=2060 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 93.976071][ T2049] device veth0_vlan entered promiscuous mode [ 93.983450][ T24] audit: type=1400 audit(1720292582.320:519): avc: denied { relabelto } for pid=2060 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 93.995056][ T2049] device veth1_macvtap entered promiscuous mode [ 94.015783][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.028023][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.038599][ T1094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.056250][ T303] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 94.067698][ T2067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.458'. [ 94.077148][ T2069] input: syz1 as /devices/virtual/input/input9 [ 94.090688][ T24] audit: type=1400 audit(1720292582.450:520): avc: denied { create } for pid=2066 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 94.176552][ T48] device bridge_slave_1 left promiscuous mode [ 94.182601][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.189582][ T328] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 94.197216][ T48] device bridge_slave_0 left promiscuous mode [ 94.203244][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.210842][ T48] device veth1_macvtap left promiscuous mode [ 94.216791][ T48] device veth0_vlan left promiscuous mode [ 94.223307][ T2073] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 94.316825][ T303] usb 4-1: Using ep0 maxpacket: 8 [ 94.436520][ T303] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 94.445560][ T303] usb 4-1: config 1 has no interface number 1 [ 94.452203][ T303] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.556061][ T328] usb 5-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice=ac.5f [ 94.564987][ T328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.577479][ T328] usb 5-1: config 0 descriptor?? [ 94.615996][ T303] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.644950][ T303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.653197][ T303] usb 4-1: Product: syz [ 94.657912][ T303] usb 4-1: Manufacturer: syz [ 94.662365][ T303] usb 4-1: SerialNumber: syz [ 94.886871][ T2106] netlink: 104 bytes leftover after parsing attributes in process `syz.0.470'. [ 95.246460][ T2064] device vlan2 entered promiscuous mode [ 95.251831][ T2064] device ip6gretap0 entered promiscuous mode [ 95.282309][ T328] usb 5-1: USB disconnect, device number 11 [ 95.302137][ T2058] sit: Src spoofed 6.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 95.376070][ T303] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 95.415971][ T303] usb 4-1: 2:1: cannot set freq 5590914 to ep 0x82 [ 95.442644][ T303] usb 4-1: USB disconnect, device number 17 [ 95.535943][ T54] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 95.723703][ T2115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61534 sclass=netlink_route_socket pid=2115 comm=syz.0.476 [ 95.776025][ T54] usb 3-1: Using ep0 maxpacket: 16 [ 95.783468][ T2117] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.478: inline data xattr refers to an external xattr inode [ 95.799289][ T2117] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.478: couldn't read orphan inode 12 (err -117) [ 95.811178][ T2117] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,jqfmt=vfsold,grpjquota=,resuid=0x0000000000000000,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue [ 95.875094][ T24] audit: type=1326 audit(1720292584.230:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2126 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe310bfbd9 code=0x7ffc0000 [ 95.932673][ T2128] netlink: 104 bytes leftover after parsing attributes in process `syz.4.479'. [ 96.045066][ T2127] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.071381][ T2127] EXT4-fs (loop3): 1 truncate cleaned up [ 96.077508][ T2127] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004, [ 96.090455][ T24] audit: type=1326 audit(1720292584.260:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2126 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbe310bfbd9 code=0x7ffc0000 [ 96.116082][ T54] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 96.125154][ T24] audit: type=1326 audit(1720292584.260:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2126 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbe310bfc13 code=0x7ffc0000 [ 96.132985][ T54] usb 3-1: config 0 has no interface number 0 [ 96.155815][ T24] audit: type=1326 audit(1720292584.330:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2126 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbe310be75f code=0x7ffc0000 [ 96.161795][ T54] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.184780][ T24] audit: type=1326 audit(1720292584.340:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2126 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbe310bfc67 code=0x7ffc0000 [ 96.195374][ T54] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 96.225015][ T24] audit: type=1326 audit(1720292584.350:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2126 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe310be610 code=0x7ffc0000 [ 96.260173][ T2132] netlink: 'syz.1.482': attribute type 1 has an invalid length. [ 96.267827][ T2132] netlink: 212 bytes leftover after parsing attributes in process `syz.1.482'. [ 96.277175][ T2132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.482'. [ 96.366023][ T54] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 96.375190][ T54] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 96.383129][ T54] usb 3-1: Product: syz [ 96.387229][ T54] usb 3-1: SerialNumber: syz [ 96.395382][ T54] usb 3-1: config 0 descriptor?? [ 96.475335][ T2141] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.677303][ T54] usb 3-1: USB disconnect, device number 17 [ 96.808546][ T2156] EXT4-fs (loop4): Test dummy encryption mode enabled [ 96.815246][ T2156] EXT4-fs (loop4): Ignoring removed orlov option [ 96.822965][ T2156] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000062,data_err=abort,,errors=continue [ 96.855976][ T328] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 97.225974][ T328] usb 1-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice=ac.5f [ 97.234829][ T328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.243449][ T328] usb 1-1: config 0 descriptor?? [ 97.316807][ T2161] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.492: inline data xattr refers to an external xattr inode [ 97.331587][ T2161] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.492: couldn't read orphan inode 12 (err -117) [ 97.343404][ T2161] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,jqfmt=vfsold,grpjquota=,resuid=0x0000000000000000,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue [ 97.504983][ T2150] device vlan2 entered promiscuous mode [ 97.511211][ T2150] device ip6gretap0 entered promiscuous mode [ 97.545964][ T20] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 97.557396][ T328] usb 1-1: USB disconnect, device number 12 [ 97.625281][ T1038] udevd[1038]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.633264][ T2171] EXT4-fs (loop2): orphan cleanup on readonly fs [ 97.648038][ T2171] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 97.659334][ T2171] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #3: comm syz.2.495: mark_inode_dirty error [ 97.671044][ T2171] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 97.681548][ T2171] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #3: comm syz.2.495: mark_inode_dirty error [ 97.693031][ T2171] EXT4-fs error (device loop2): ext4_acquire_dquot:6219: comm syz.2.495: Failed to acquire dquot type 0 [ 97.705199][ T2171] EXT4-fs (loop2): 1 orphan inode deleted [ 97.711330][ T2171] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 97.815932][ T20] usb 4-1: Using ep0 maxpacket: 32 [ 97.955975][ T20] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.970095][ T20] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 98.035939][ T1094] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 98.156012][ T20] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 98.165023][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.177159][ T20] usb 4-1: Product: syz [ 98.182481][ T20] usb 4-1: Manufacturer: syz [ 98.187283][ T20] usb 4-1: SerialNumber: syz [ 98.195162][ T20] usb 4-1: config 0 descriptor?? [ 98.305989][ T1094] usb 3-1: device descriptor read/64, error -71 [ 98.410274][ T2200] fuse: Bad value for 'fd' [ 98.426507][ T2200] netlink: 'syz.1.503': attribute type 3 has an invalid length. [ 98.506687][ T2164] FAULT_INJECTION: forcing a failure. [ 98.506687][ T2164] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 98.535930][ T2164] CPU: 0 PID: 2164 Comm: syz.3.493 Not tainted 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 98.545552][ T2164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 98.555441][ T2164] Call Trace: [ 98.558574][ T2164] dump_stack_lvl+0x1e2/0x24b [ 98.563083][ T2164] ? bfq_pos_tree_add_move+0x43b/0x43b [ 98.568374][ T2164] ? debug_smp_processor_id+0x17/0x20 [ 98.573825][ T2164] dump_stack+0x15/0x17 [ 98.577814][ T2164] should_fail+0x3c6/0x510 [ 98.582068][ T2164] should_fail_alloc_page+0x52/0x60 [ 98.587097][ T2164] __alloc_pages_nodemask+0x1b3/0xaf0 [ 98.592308][ T2164] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 98.597686][ T2164] ? __kasan_check_read+0x11/0x20 [ 98.602544][ T2164] ? avc_has_perm_noaudit+0x117/0x240 [ 98.607759][ T2164] shmem_alloc_page+0x257/0x420 [ 98.612435][ T2164] ? put_page+0xd0/0xd0 [ 98.616434][ T2164] ? percpu_counter_add_batch+0x13d/0x160 [ 98.621986][ T2164] ? __vm_enough_memory+0x119/0x2f0 [ 98.627019][ T2164] ? security_vm_enough_memory_mm+0x94/0xa0 [ 98.632748][ T2164] shmem_mfill_atomic_pte+0x50e/0xee0 [ 98.637956][ T2164] mfill_zeropage+0x888/0x1250 [ 98.642562][ T2164] ? mcopy_atomic+0x1220/0x1220 [ 98.647245][ T2164] userfaultfd_ioctl+0x2337/0x4580 [ 98.652190][ T2164] ? bpf_trace_run2+0x280/0x280 [ 98.656876][ T2164] ? native_set_ldt+0x360/0x360 [ 98.661570][ T2164] ? userfaultfd_poll+0x1c0/0x1c0 [ 98.666426][ T2164] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 98.672934][ T2164] ? _raw_spin_unlock_irq+0x4e/0x70 [ 98.677967][ T2164] ? finish_task_switch+0x130/0x5a0 [ 98.682999][ T2164] ? switch_mm_irqs_off+0x71b/0x9a0 [ 98.688031][ T2164] ? __switch_to_asm+0x34/0x60 [ 98.692645][ T2164] ? __schedule+0xbee/0x1330 [ 98.697216][ T2164] ? release_firmware_map_entry+0x192/0x192 [ 98.702887][ T2164] ? __this_cpu_preempt_check+0x13/0x20 [ 98.708271][ T2164] ? __kasan_check_read+0x11/0x20 [ 98.713208][ T2164] ? preempt_schedule_irq+0xe7/0x140 [ 98.718337][ T2164] ? preempt_schedule_notrace+0x140/0x140 [ 98.723886][ T2164] ? selinux_file_ioctl+0x3cc/0x540 [ 98.728909][ T2164] ? switch_mm_irqs_off+0x71b/0x9a0 [ 98.733947][ T2164] ? irqentry_exit+0x4f/0x60 [ 98.738378][ T2164] ? sysvec_reschedule_ipi+0x83/0x160 [ 98.743578][ T2164] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 98.749139][ T2164] ? do_vfs_ioctl+0xf6/0x1a30 [ 98.753642][ T2164] ? do_vfs_ioctl+0x33e/0x1a30 [ 98.758249][ T2164] ? __sanitizer_cov_trace_const_cmp4+0x1/0x90 [ 98.764325][ T2164] ? userfaultfd_poll+0x1c0/0x1c0 [ 98.769179][ T2164] __se_sys_ioctl+0x114/0x190 [ 98.773694][ T2164] __x64_sys_ioctl+0x7b/0x90 [ 98.778124][ T2164] do_syscall_64+0x34/0x70 [ 98.782465][ T2164] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 98.788192][ T2164] RIP: 0033:0x7fbe310bfbd9 [ 98.792531][ T2164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.812585][ T2164] RSP: 002b:00007fbe30341048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.821104][ T2164] RAX: ffffffffffffffda RBX: 00007fbe3124df60 RCX: 00007fbe310bfbd9 [ 98.828856][ T2164] RDX: 0000000020000000 RSI: 00000000c020aa04 RDI: 0000000000000005 [ 98.836646][ T2164] RBP: 00007fbe303410a0 R08: 0000000000000000 R09: 0000000000000000 [ 98.844452][ T2164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.852268][ T2164] R13: 000000000000000b R14: 00007fbe3124df60 R15: 00007ffda3f84018 [ 98.950073][ T2206] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 99.005944][ T1094] usb 3-1: device descriptor read/64, error -71 [ 99.260200][ T2216] netlink: 'syz.1.508': attribute type 4 has an invalid length. [ 99.276498][ T2216] netlink: 'syz.1.508': attribute type 4 has an invalid length. [ 99.285215][ T1094] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 99.345987][ T951] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 99.619519][ T1094] usb 3-1: device descriptor read/64, error -71 [ 99.776065][ T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.787286][ T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.797472][ T951] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 99.806514][ T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.827013][ T951] usb 1-1: config 0 descriptor?? [ 99.887397][ T951] usbhid 1-1:0.0: can't add hid device: -22 [ 99.897550][ T951] usbhid: probe of 1-1:0.0 failed with error -22 [ 100.016006][ T1094] usb 3-1: device descriptor read/64, error -71 [ 100.135981][ T1094] usb usb3-port1: attempt power cycle [ 100.215924][ T54] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 100.267721][ T951] usb 4-1: USB disconnect, device number 18 [ 100.686031][ T1094] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 100.785989][ T54] usb 5-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice=ac.5f [ 100.786360][ T2235] FAULT_INJECTION: forcing a failure. [ 100.786360][ T2235] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 100.795136][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.808374][ T2235] CPU: 1 PID: 2235 Comm: syz.2.514 Not tainted 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 100.817098][ T54] usb 5-1: config 0 descriptor?? [ 100.825612][ T2235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 100.825617][ T2235] Call Trace: [ 100.825636][ T2235] dump_stack_lvl+0x1e2/0x24b [ 100.825647][ T2235] ? bfq_pos_tree_add_move+0x43b/0x43b [ 100.825667][ T2235] ? do_filp_open+0x21c/0x460 [ 100.835994][ T1094] usb 3-1: device descriptor read/8, error -71 [ 100.840290][ T2235] dump_stack+0x15/0x17 [ 100.840301][ T2235] should_fail+0x3c6/0x510 [ 100.840313][ T2235] should_fail_alloc_page+0x52/0x60 [ 100.840331][ T2235] __alloc_pages_nodemask+0x1b3/0xaf0 [ 100.882679][ T2235] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 100.888056][ T2235] ? __kasan_kmalloc+0x9/0x10 [ 100.892559][ T2235] ? kmem_cache_alloc_trace+0x18a/0x2e0 [ 100.897941][ T2235] ? mon_bin_open+0x194/0x5a0 [ 100.902463][ T2235] get_zeroed_page+0x19/0x40 [ 100.906908][ T2235] mon_bin_open+0x23d/0x5a0 [ 100.911339][ T2235] chrdev_open+0x4f7/0x620 [ 100.915585][ T2235] ? cd_forget+0x170/0x170 [ 100.919848][ T2235] ? fsnotify_perm+0x3d3/0x4e0 [ 100.924438][ T2235] ? cd_forget+0x170/0x170 [ 100.928697][ T2235] do_dentry_open+0x7c1/0x10d0 [ 100.933294][ T2235] vfs_open+0x73/0x80 [ 100.937111][ T2235] path_openat+0x2660/0x3000 [ 100.941536][ T2235] ? kmem_cache_alloc+0x168/0x2e0 [ 100.946398][ T2235] ? do_syscall_64+0x34/0x70 [ 100.950823][ T2235] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 100.956727][ T2235] ? do_filp_open+0x460/0x460 [ 100.961237][ T2235] do_filp_open+0x21c/0x460 [ 100.965575][ T2235] ? vfs_tmpfile+0x2b0/0x2b0 [ 100.970007][ T2235] ? get_unused_fd_flags+0x94/0xa0 [ 100.974949][ T2235] do_sys_openat2+0x13f/0x6f0 [ 100.979465][ T2235] ? __kasan_check_write+0x14/0x20 [ 100.984418][ T2235] ? mutex_lock+0xa5/0x110 [ 100.988665][ T2235] ? mutex_trylock+0xa0/0xa0 [ 100.993094][ T2235] ? do_sys_open+0x220/0x220 [ 100.997519][ T2235] ? __kasan_check_write+0x14/0x20 [ 101.002463][ T2235] ? ksys_write+0x260/0x2c0 [ 101.006804][ T2235] __x64_sys_openat+0x243/0x290 [ 101.011490][ T2235] ? __ia32_sys_open+0x270/0x270 [ 101.016265][ T2235] ? debug_smp_processor_id+0x17/0x20 [ 101.021477][ T2235] do_syscall_64+0x34/0x70 [ 101.025727][ T2235] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 101.031459][ T2235] RIP: 0033:0x7f6a46ef8610 [ 101.035705][ T2235] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 79 8d 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 cc 8d 02 00 8b 44 [ 101.055269][ T2235] RSP: 002b:00007f6a4617ab80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 101.055954][ T1094] usb 3-1: device descriptor read/8, error -71 [ 101.063503][ T2235] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6a46ef8610 [ 101.063510][ T2235] RDX: 0000000000000000 RSI: 00007f6a4617ac20 RDI: 00000000ffffff9c [ 101.063516][ T2235] RBP: 00007f6a4617ac20 R08: 0000000000000000 R09: 00236e6f6d627375 [ 101.063522][ T2235] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 101.063537][ T2235] R13: 000000000000000b R14: 00007f6a47087f60 R15: 00007ffe97201bf8 [ 101.145467][ T54] usb 5-1: USB disconnect, device number 12 [ 101.152688][ T1039] udevd[1039]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 101.196899][ T2240] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.516: inline data xattr refers to an external xattr inode [ 101.215546][ T24] kauditd_printk_skb: 14 callbacks suppressed [ 101.215560][ T24] audit: type=1400 audit(1720292589.570:539): avc: denied { write } for pid=2243 comm="syz.1.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.249611][ T2240] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.516: couldn't read orphan inode 12 (err -117) [ 101.261521][ T2240] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,jqfmt=vfsold,grpjquota=,resuid=0x0000000000000000,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue [ 101.533165][ T2252] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 101.576151][ T1094] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 101.757471][ T2263] netlink: 'syz.4.525': attribute type 3 has an invalid length. [ 101.764960][ T2263] netlink: 76 bytes leftover after parsing attributes in process `syz.4.525'. [ 101.796009][ T1094] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.806861][ T1094] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 101.815713][ T1094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.824378][ T1094] usb 3-1: config 0 descriptor?? [ 101.875983][ T54] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 102.072502][ T20] usb 1-1: USB disconnect, device number 13 [ 102.241053][ T2272] netlink: 104 bytes leftover after parsing attributes in process `syz.0.528'. [ 102.426412][ T1094] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 102.435595][ T1094] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input10 [ 102.486036][ T54] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 102.498187][ T54] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 102.509357][ T54] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 102.520347][ T1094] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 102.524224][ T2274] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.529: inline data xattr refers to an external xattr inode [ 102.537342][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.547042][ T2274] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.529: couldn't read orphan inode 12 (err -117) [ 102.566638][ T2274] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,jqfmt=vfsold,grpjquota=,resuid=0x0000000000000000,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue [ 102.576103][ T2260] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 102.711130][ T24] audit: type=1400 audit(1720292591.070:540): avc: denied { sys_module } for pid=2279 comm="syz.3.531" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 102.758899][ T2280] erofs: (device loop3): mounted with root inode @ nid 36. [ 102.766649][ T2280] attempt to access beyond end of device [ 102.766649][ T2280] loop3: rw=0, want=48, limit=16 [ 102.777554][ T2280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.531'. [ 102.846010][ T54] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 102.853542][ T54] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input11 [ 102.864523][ T54] usb 2-1: USB disconnect, device number 13 [ 102.877748][ T2238] exfat: Deprecated parameter 'utf8' [ 102.920077][ T2238] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5183de56, utbl_chksum : 0xe619d30d) [ 102.986464][ T15] usb 3-1: USB disconnect, device number 21 [ 103.067614][ T2305] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 103.076767][ T2305] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff) [ 103.103078][ T24] audit: type=1400 audit(1720292591.460:541): avc: denied { read } for pid=2304 comm="syz.3.537" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.128660][ T24] audit: type=1400 audit(1720292591.460:542): avc: denied { open } for pid=2304 comm="syz.3.537" path="/26/file0/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.156838][ T2315] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 103.258888][ T24] audit: type=1400 audit(1720292591.620:543): avc: denied { ioctl } for pid=2304 comm="syz.3.537" path="/26/file0/file0/file0" dev="loop3" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.566909][ T24] audit: type=1326 audit(1720292591.930:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2333 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c93aaabd9 code=0x7ffc0000 [ 103.590049][ T24] audit: type=1326 audit(1720292591.930:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2333 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c93aaabd9 code=0x7ffc0000 [ 103.613488][ T24] audit: type=1326 audit(1720292591.940:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2333 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c93aaabd9 code=0x7ffc0000 [ 103.637503][ T24] audit: type=1326 audit(1720292591.940:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2333 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c93aaabd9 code=0x7ffc0000 [ 103.660898][ T24] audit: type=1326 audit(1720292591.940:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2333 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c93aaabd9 code=0x7ffc0000 [ 103.986042][ T951] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 104.043693][ T2347] netlink: 104 bytes leftover after parsing attributes in process `syz.3.549'. [ 104.185971][ T20] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 104.255910][ T951] usb 1-1: Using ep0 maxpacket: 16 [ 104.396110][ T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.406868][ T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.416344][ T951] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.429102][ T951] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 104.437867][ T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.446618][ T951] usb 1-1: config 0 descriptor?? [ 104.596085][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.606868][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.616533][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.629420][ T20] usb 2-1: New USB device found, idVendor=056a, idProduct=033d, bcdDevice= 0.00 [ 104.638635][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.680782][ T20] usb 2-1: config 0 descriptor?? [ 104.888318][ T2352] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.552: inline data xattr refers to an external xattr inode [ 104.904042][ T2352] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.552: couldn't read orphan inode 12 (err -117) [ 104.916552][ T2352] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,jqfmt=vfsold,grpjquota=,resuid=0x0000000000000000,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue [ 104.958385][ T951] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 104.966239][ T951] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 104.973499][ T951] microsoft 0003:045E:07DA.0005: unknown main item tag 0x4 [ 104.981460][ T951] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 104.988564][ T951] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 104.995646][ T951] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 105.002749][ T951] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 105.007579][ T2363] EXT4-fs (loop3): Test dummy encryption mode enabled [ 105.015015][ T951] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input12 [ 105.023189][ T2363] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.555: inline data xattr refers to an external xattr inode [ 105.033570][ T951] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 105.055771][ T2363] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.555: couldn't read orphan inode 12 (err -117) [ 105.067811][ T2363] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue [ 105.101237][ T2363] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 105.169900][ T54] usb 1-1: USB disconnect, device number 14 [ 105.177645][ T20] wacom 0003:056A:033D.0006: unknown main item tag 0x0 [ 105.184426][ T20] wacom 0003:056A:033D.0006: unknown main item tag 0x0 [ 105.201173][ T20] wacom 0003:056A:033D.0006: unknown main item tag 0x0 [ 105.208080][ T20] wacom 0003:056A:033D.0006: unknown main item tag 0x0 [ 105.214841][ T20] wacom 0003:056A:033D.0006: unknown main item tag 0x0 [ 105.221558][ T20] wacom 0003:056A:033D.0006: unknown main item tag 0x0 [ 105.228609][ T20] wacom 0003:056A:033D.0006: unknown main item tag 0x0 [ 105.235590][ T20] wacom 0003:056A:033D.0006: Unknown device_type for 'HID 056a:033d'. Assuming pen. [ 105.255363][ T20] wacom 0003:056A:033D.0006: hidraw0: USB HID v0.00 Device [HID 056a:033d] on usb-dummy_hcd.1-1/input0 [ 105.337088][ T20] input: Wacom Intuos P M 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:033D.0006/input/input13 [ 105.379053][ T1094] usb 2-1: USB disconnect, device number 14 [ 105.504999][ T2381] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 105.709720][ T2380] EXT4-fs (loop4): Test dummy encryption mode enabled [ 105.716439][ T2380] EXT4-fs (loop4): Ignoring removed orlov option [ 105.722649][ T2380] EXT4-fs (loop4): bad geometry: block count 1048576 exceeds size of device (512 blocks) [ 105.729675][ T2384] incfs: Options parsing error. -22 [ 105.737590][ T2384] incfs: mount failed -22 [ 105.742533][ T2384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 105.791042][ T2384] udc-core: couldn't find an available UDC or it's busy [ 105.797920][ T2384] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 105.997514][ T2393] netlink: 104 bytes leftover after parsing attributes in process `syz.0.563'. [ 106.194649][ T328] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 106.248207][ T2397] EXT4-fs (loop3): orphan cleanup on readonly fs [ 106.255089][ T2397] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 106.263632][ T2397] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #3: comm syz.3.565: mark_inode_dirty error [ 106.275419][ T2397] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 106.283790][ T2397] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #3: comm syz.3.565: mark_inode_dirty error [ 106.304454][ T2397] __quota_error: 38 callbacks suppressed [ 106.304466][ T2397] Quota error (device loop3): write_blk: dquota write failed [ 106.309244][ T2405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.567'. [ 106.317433][ T2397] Quota error (device loop3): qtree_write_dquot: Error -27 occurred while creating quota [ 106.337547][ T2399] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.566: inline data xattr refers to an external xattr inode [ 106.356317][ T2397] EXT4-fs error (device loop3): ext4_acquire_dquot:6219: comm syz.3.565: Failed to acquire dquot type 0 [ 106.359274][ T2399] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.566: couldn't read orphan inode 12 (err -117) [ 106.379732][ T2399] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,jqfmt=vfsold,grpjquota=,resuid=0x0000000000000000,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue [ 106.380419][ T2397] EXT4-fs (loop3): 1 orphan inode deleted [ 106.411379][ T2397] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 106.456622][ T328] usb 3-1: Using ep0 maxpacket: 8 [ 106.467616][ T2421] input: syz0 as /devices/virtual/input/input16 [ 106.576010][ T328] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.600485][ T2425] EXT4-fs error (device loop3): ext4_ext_check_inode:500: inode #15: comm syz.3.572: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 106.621676][ T2425] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.572: couldn't read orphan inode 15 (err -117) [ 106.634175][ T2425] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 106.643419][ T2425] ext4 filesystem being mounted at /35/file2 supports timestamps until 2038 (0x7fffffff) [ 106.707895][ T2436] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 106.737281][ T328] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.746441][ T328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 106.754462][ T328] usb 3-1: SerialNumber: syz [ 106.759578][ T24] audit: type=1400 audit(1720292595.120:587): avc: denied { setopt } for pid=2438 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.780640][ T2440] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 106.826444][ T328] cdc_ether 3-1:1.0: skipping garbage [ 106.831734][ T328] usb 3-1: bad CDC descriptors [ 107.029105][ T328] usb 3-1: USB disconnect, device number 22 [ 107.801186][ T2459] input: syz0 as /devices/virtual/input/input17 [ 107.814681][ T2453] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #16: comm syz.1.579: casefold flag without casefold feature [ 107.818940][ T2454] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 107.841549][ T2453] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 107.843499][ T2454] overlayfs: failed to resolve './file0': -2 [ 107.849754][ T2453] EXT4-fs error (device loop1): ext4_dirty_inode:6079: inode #3: comm syz.1.579: mark_inode_dirty error [ 107.867030][ T2453] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 107.875188][ T2453] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #3: comm syz.1.579: mark_inode_dirty error [ 107.900932][ T2453] Quota error (device loop1): write_blk: dquota write failed [ 107.913049][ T2453] Quota error (device loop1): qtree_write_dquot: Error -27 occurred while creating quota [ 107.923135][ T2453] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.579: Failed to acquire dquot type 0 [ 107.936400][ T2453] EXT4-fs (loop1): 1 orphan inode deleted [ 107.941944][ T2453] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 107.959078][ T2466] syz.4.580[2466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.959134][ T2466] syz.4.580[2466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.981866][ T2463] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.583: inline data xattr refers to an external xattr inode [ 108.008454][ T2453] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038 (0x7fffffff) [ 108.015919][ T20] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 108.039736][ T2463] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.583: couldn't read orphan inode 12 (err -117) [ 108.051693][ T2463] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,jqfmt=vfsold,grpjquota=,resuid=0x0000000000000000,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue [ 108.235945][ T1094] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 108.364154][ T2477] EXT4-fs (loop2): Ignoring removed orlov option [ 108.447463][ T2477] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 108.467453][ T2477] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 108.653640][ T2490] erofs: (device loop1): mounted with root inode @ nid 36. [ 108.712770][ T24] audit: type=1400 audit(1720292597.070:588): avc: denied { read } for pid=2493 comm="syz.1.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.776058][ T1094] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.799345][ T1094] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.906043][ T1094] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.915036][ T1094] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.923006][ T1094] usb 1-1: SerialNumber: syz [ 109.002345][ T2499] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 109.110872][ T2503] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 109.246409][ T1094] usb 1-1: 0:2 : does not exist [ 109.541888][ T2508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.592'. [ 109.665990][ T328] usb 1-1: USB disconnect, device number 15 [ 109.684537][ T2525] input: syz0 as /devices/virtual/input/input18 [ 109.979422][ T2545] EXT4-fs (loop4): 1 orphan inode deleted [ 109.992150][ T2545] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 110.019523][ T24] audit: type=1326 audit(1720292598.380:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2549 comm="syz.0.602" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c93aaabd9 code=0x0 [ 110.048065][ T2545] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038 (0x7fffffff) [ 110.359053][ T2568] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 110.445961][ T20] usb 4-1: unable to get BOS descriptor or descriptor too short [ 110.488852][ T2572] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.609: inline data xattr refers to an external xattr inode [ 110.503622][ T2572] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.609: couldn't read orphan inode 12 (err -117) [ 110.515644][ T2572] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,jqfmt=vfsold,grpjquota=,resuid=0x0000000000000000,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue [ 110.565972][ T20] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 110.573420][ T20] usb 4-1: can't read configurations, error -71 [ 110.585972][ T54] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 111.320113][ T1094] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 111.356032][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 111.365579][ T54] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=35.07 [ 111.374405][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.382787][ T54] usb 5-1: config 0 descriptor?? [ 111.436775][ T54] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 111.515943][ T303] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 111.638334][ T54] usb 5-1: USB disconnect, device number 13 [ 111.730486][ T2597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.617'. [ 111.886190][ T1094] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.897236][ T1094] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.907629][ T1094] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.920739][ T1094] usb 2-1: New USB device found, idVendor=0463, idProduct=b320, bcdDevice= 0.00 [ 111.929752][ T1094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.938495][ T1094] usb 2-1: config 0 descriptor?? [ 111.996133][ T303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.007345][ T303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.018785][ T303] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 112.028886][ T303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.166077][ T303] usb 3-1: config 0 descriptor?? [ 112.866335][ T303] usb 3-1: language id specifier not provided by device, defaulting to English [ 112.880091][ T24] audit: type=1326 audit(1720292601.240:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2617 comm="syz.0.623" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c93aaabd9 code=0x0 [ 113.068092][ T2591] sch_fq: defrate 0 ignored. [ 113.136044][ T303] uclogic 0003:256C:006D.0007: failed retrieving Huion firmware version: -71 [ 113.144715][ T303] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 113.152217][ T303] uclogic: probe of 0003:256C:006D.0007 failed with error -71 [ 113.160935][ T303] usb 3-1: USB disconnect, device number 23 [ 113.417018][ T2626] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 113.455934][ T54] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 114.039638][ T2632] EXT4-fs (loop2): Test dummy encryption mode enabled [ 114.046627][ T2632] EXT4-fs (loop2): Ignoring removed orlov option [ 114.053046][ T2632] EXT4-fs (loop2): bad geometry: block count 1048576 exceeds size of device (512 blocks) [ 114.249106][ T54] usb 5-1: Using ep0 maxpacket: 16 [ 114.356087][ T1094] usbhid 2-1:0.0: can't add hid device: -71 [ 114.366020][ T1094] usbhid: probe of 2-1:0.0 failed with error -71 [ 114.373292][ T1094] usb 2-1: USB disconnect, device number 15 [ 114.406007][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.417038][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.911602][ T54] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 114.920487][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.936961][ T54] usb 5-1: config 0 descriptor?? [ 114.984095][ T2641] netlink: 104 bytes leftover after parsing attributes in process `syz.1.628'. [ 115.030853][ T2638] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.053159][ T2638] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.070713][ T2638] attempt to access beyond end of device [ 115.070713][ T2638] loop3: rw=2049, want=53384, limit=40427 [ 115.089348][ T2638] attempt to access beyond end of device [ 115.089348][ T2638] loop3: rw=2049, want=53512, limit=40427 [ 115.107444][ T1696] attempt to access beyond end of device [ 115.107444][ T1696] loop3: rw=2049, want=45104, limit=40427 [ 115.225941][ T951] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 115.397296][ T54] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 115.498970][ T951] usb 1-1: Using ep0 maxpacket: 32 [ 115.617391][ T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.629351][ T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.640233][ T951] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 115.649406][ T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.658140][ T951] usb 1-1: config 0 descriptor?? [ 115.665978][ T54] cp2112 0003:10C4:EA90.0008: Part Number: 0xE5 Device Version: 0x26 [ 115.696436][ T951] hub 1-1:0.0: USB hub found [ 115.723758][ T2665] EXT4-fs (loop3): Test dummy encryption mode enabled [ 115.730446][ T2665] EXT4-fs (loop3): Ignoring removed orlov option [ 115.736607][ T2665] EXT4-fs (loop3): bad geometry: block count 1048576 exceeds size of device (512 blocks) [ 115.880029][ T2670] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 115.880029][ T2670] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 115.880029][ T2670] [ 115.899005][ T2670] EXT4-fs (loop1): inodes count not valid: 32 vs 63 [ 115.906790][ T54] cp2112 0003:10C4:EA90.0008: error requesting SMBus config [ 115.914376][ T54] cp2112: probe of 0003:10C4:EA90.0008 failed with error -71 [ 115.916002][ T951] hub 1-1:0.0: 1 port detected [ 115.922901][ T54] usb 5-1: USB disconnect, device number 14 [ 115.927517][ T24] audit: type=1400 audit(1720292604.290:591): avc: denied { unlink } for pid=76 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.954528][ T2673] exfat: Unknown parameter 'GPL' [ 116.183061][ T951] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 116.189377][ T951] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 116.190035][ T2682] cgroup2: Unknown parameter 'c€ntext' [ 116.232092][ T2685] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 116.326423][ T951] usbhid 1-1:0.0: can't add hid device: -71 [ 116.333074][ T951] usbhid: probe of 1-1:0.0 failed with error -71 [ 116.474421][ T20] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 116.520351][ T951] usb 1-1: USB disconnect, device number 16 [ 116.795974][ T441] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 116.885981][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.896799][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.906500][ T20] usb 3-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 116.915320][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.923991][ T20] usb 3-1: config 0 descriptor?? [ 117.055915][ T441] usb 5-1: Using ep0 maxpacket: 32 [ 117.093899][ T951] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 117.139724][ T2704] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 117.156997][ T2704] EXT4-fs error (device loop3): __ext4_iget:4958: inode #11: block 1: comm syz.3.646: invalid block [ 117.168603][ T2704] EXT4-fs (loop3): Remounting filesystem read-only [ 117.175058][ T2704] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.646: couldn't read orphan inode 11 (err -117) [ 117.186942][ T441] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.197672][ T2704] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl, [ 117.225937][ T441] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.345946][ T951] usb 1-1: Using ep0 maxpacket: 16 [ 117.365993][ T441] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 117.374969][ T441] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 117.383153][ T441] usb 5-1: Product: syz [ 117.387214][ T441] usb 5-1: Manufacturer: syz [ 117.406857][ T20] smartjoyplus 0003:0925:0005.0009: unknown main item tag 0x0 [ 117.414226][ T20] smartjoyplus 0003:0925:0005.0009: unbalanced collection at end of report description [ 117.423914][ T20] smartjoyplus 0003:0925:0005.0009: parse failed [ 117.430343][ T20] smartjoyplus: probe of 0003:0925:0005.0009 failed with error -22 [ 117.437997][ T441] hub 5-1:4.0: USB hub found [ 117.609469][ T24] audit: type=1326 audit(1720292605.970:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2677 comm="syz.2.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a46ef9bd9 code=0x7ffc0000 [ 117.632807][ T24] audit: type=1326 audit(1720292605.970:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2677 comm="syz.2.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a46ef9bd9 code=0x7ffc0000 [ 117.632831][ T951] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 117.656790][ T24] audit: type=1326 audit(1720292605.970:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2677 comm="syz.2.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a46ef9bd9 code=0x7ffc0000 [ 117.664949][ T951] usb 1-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 117.687998][ T441] hub 5-1:4.0: 2 ports detected [ 117.700463][ T951] usb 1-1: Product: syz [ 117.700685][ T24] audit: type=1326 audit(1720292605.970:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2677 comm="syz.2.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a46ef9bd9 code=0x7ffc0000 [ 117.727750][ T951] usb 1-1: Manufacturer: syz [ 117.727758][ T951] usb 1-1: SerialNumber: syz [ 117.736829][ T24] audit: type=1326 audit(1720292605.970:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2677 comm="syz.2.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a46ef9bd9 code=0x7ffc0000 [ 117.737025][ T951] usb 1-1: config 0 descriptor?? [ 117.760558][ T24] audit: type=1326 audit(1720292605.970:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2677 comm="syz.2.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a46ef97db code=0x7ffc0000 [ 117.806471][ T951] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 117.814214][ T951] usb 1-1: Detected FT-X [ 117.856198][ T2712] exfat: Unknown parameter 'GPL' [ 117.988492][ T2716] udc-core: couldn't find an available UDC or it's busy [ 117.995318][ T2716] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 118.236447][ T2719] EXT4-fs (loop3): Test dummy encryption mode enabled [ 118.243055][ T2719] EXT4-fs (loop3): Ignoring removed orlov option [ 118.249275][ T2719] EXT4-fs (loop3): bad geometry: block count 1048576 exceeds size of device (512 blocks) [ 118.616005][ T951] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 118.808234][ T2729] EXT4-fs (loop1): invalid first ino: 0 [ 118.875981][ T951] ftdi_sio 1-1:0.0: GPIO initialisation failed: -5 [ 118.882947][ T951] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 118.996583][ T2733] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 119.082033][ T951] usb 1-1: USB disconnect, device number 17 [ 119.088550][ T951] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 119.098002][ T951] ftdi_sio 1-1:0.0: device disconnected [ 119.111713][ T1094] usb 3-1: USB disconnect, device number 24 [ 119.535981][ T441] hub 5-1:4.0: set hub depth failed [ 119.580360][ T441] usb 5-1: USB disconnect, device number 15 [ 119.837220][ T2753] EXT4-fs (loop1): Test dummy encryption mode enabled [ 119.843872][ T2753] EXT4-fs (loop1): Ignoring removed orlov option [ 119.850182][ T2753] EXT4-fs (loop1): bad geometry: block count 1048576 exceeds size of device (512 blocks) [ 119.886198][ T951] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 119.935943][ T441] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 120.098189][ T2758] erofs: (device loop2): mounted with root inode @ nid 36. [ 120.147764][ T2761] EXT4-fs (loop3): invalid first ino: 10 [ 120.155424][ T2758] attempt to access beyond end of device [ 120.155424][ T2758] loop2: rw=0, want=14552337264, limit=16 [ 120.228394][ T24] audit: type=1400 audit(1720292608.590:598): avc: denied { nlmsg_write } for pid=2760 comm="syz.3.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 120.248808][ T1094] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 120.276113][ T951] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 120.287059][ T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.297993][ T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.308277][ T951] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 120.331229][ T2770] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 120.336040][ T441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.351648][ T441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.362094][ T441] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 120.371026][ T441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.379409][ T441] usb 5-1: config 0 descriptor?? [ 120.415989][ T951] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 120.424986][ T951] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 120.432876][ T951] usb 1-1: Manufacturer: syz [ 120.437782][ T951] usb 1-1: config 0 descriptor?? [ 120.535936][ T1094] usb 2-1: device descriptor read/64, error -71 [ 120.625929][ T25] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 120.909232][ T24] audit: type=1400 audit(1720292609.250:599): avc: denied { getopt } for pid=2746 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.933243][ T951] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 120.943332][ T951] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 120.952592][ T951] appleir 0003:05AC:8243.000A: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 121.095975][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.105926][ T1094] usb 2-1: device descriptor read/64, error -71 [ 121.106722][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.125469][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.134344][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.142724][ T25] usb 3-1: config 0 descriptor?? [ 121.225941][ T15] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 121.375952][ T1094] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 121.465914][ T15] usb 4-1: Using ep0 maxpacket: 32 [ 121.586048][ T15] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.596826][ T15] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.646025][ T1094] usb 2-1: device descriptor read/64, error -71 [ 121.712645][ T24] audit: type=1400 audit(1720292610.070:600): avc: denied { unlink } for pid=2771 comm="syz.2.669" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 121.734773][ T15] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 121.743720][ T15] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 121.752167][ T15] usb 4-1: Product: syz [ 121.756284][ T15] usb 4-1: Manufacturer: syz [ 121.756898][ T25] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 121.771155][ T25] plantronics 0003:047F:FFFF.000B: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 121.796483][ T15] hub 4-1:4.0: USB hub found [ 121.968018][ T25] usb 3-1: USB disconnect, device number 25 [ 122.035958][ T1094] usb 2-1: device descriptor read/64, error -71 [ 122.042122][ T15] hub 4-1:4.0: 2 ports detected [ 122.165976][ T1094] usb usb2-port1: attempt power cycle [ 122.571014][ T2789] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 122.575948][ T1094] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 122.625952][ T441] usbhid 5-1:0.0: can't add hid device: -71 [ 122.631774][ T441] usbhid: probe of 5-1:0.0 failed with error -71 [ 122.638966][ T441] usb 5-1: USB disconnect, device number 16 [ 122.727853][ T24] audit: type=1400 audit(1720292611.090:601): avc: denied { mounton } for pid=2791 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 122.750248][ T7] device ip6gretap0 left promiscuous mode [ 122.756101][ T1094] usb 2-1: device descriptor read/8, error -71 [ 122.781205][ T2791] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.788144][ T2791] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.795362][ T2791] device bridge_slave_0 entered promiscuous mode [ 122.803647][ T2791] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.810646][ T2791] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.818313][ T2791] device bridge_slave_1 entered promiscuous mode [ 122.851738][ T2791] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.858585][ T2791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.865646][ T2791] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.872484][ T2791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.890870][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.898723][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.905803][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.918415][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.926432][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.933359][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.940652][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.948768][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.955592][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.975731][ T2791] device veth0_vlan entered promiscuous mode [ 122.982750][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.993523][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.996113][ T441] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 123.001547][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.008709][ T1094] usb 2-1: device descriptor read/8, error -71 [ 123.021910][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.030162][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.037985][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.049790][ T2791] device veth1_macvtap entered promiscuous mode [ 123.056323][ T301] usb 1-1: USB disconnect, device number 18 [ 123.057384][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.124759][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.133061][ T24] audit: type=1400 audit(1720292611.490:602): avc: denied { map } for pid=2798 comm="syz.0.673" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 123.161275][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.165825][ T24] audit: type=1400 audit(1720292611.490:603): avc: denied { create } for pid=2798 comm="syz.0.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 123.188522][ T24] audit: type=1400 audit(1720292611.490:604): avc: denied { call } for pid=2798 comm="syz.0.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 123.208716][ T2797] EXT4-fs (loop1): Test dummy encryption mode enabled [ 123.209445][ T24] audit: type=1400 audit(1720292611.490:605): avc: denied { read write } for pid=2798 comm="syz.0.673" path="socket:[24317]" dev="sockfs" ino=24317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 123.215348][ T2797] EXT4-fs (loop1): Ignoring removed orlov option [ 123.241240][ T24] audit: type=1400 audit(1720292611.490:606): avc: denied { transfer } for pid=2798 comm="syz.0.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 123.244878][ T2797] EXT4-fs (loop1): bad geometry: block count 1048576 exceeds size of device (512 blocks) [ 123.362911][ T2807] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 123.378075][ T2816] 9p: Unknown uid 18446744073709551615 [ 123.388048][ T2817] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 123.403486][ T2807] ------------[ cut here ]------------ [ 123.410303][ T7] device bridge_slave_1 left promiscuous mode [ 123.416417][ T2807] kernel BUG at fs/ext4/inode.c:2749! [ 123.416525][ T441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.421751][ T2807] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 123.432625][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.437220][ T2807] CPU: 1 PID: 2807 Comm: syz.1.676 Not tainted 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 123.437226][ T2807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 123.437254][ T2807] RIP: 0010:ext4_writepages+0x3bdf/0x3c00 [ 123.437271][ T2807] Code: 51 8c ff 31 ff 89 de e8 df 51 8c ff 45 84 f6 75 27 e8 45 4f 8c ff 49 be 00 00 00 00 00 fc ff df e9 0e f7 ff ff e8 31 4f 8c ff <0f> 0b e8 2a 4f 8c ff e8 11 24 22 ff eb 9b e8 1e 4f 8c ff e8 05 24 [ 123.453874][ T441] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 123.463597][ T2807] RSP: 0018:ffffc900011cf320 EFLAGS: 00010283 [ 123.463609][ T2807] RAX: ffffffff81de5b4f RBX: 0000008000000000 RCX: 0000000000040000 [ 123.463615][ T2807] RDX: ffffc90000dc9000 RSI: 0000000000000045 RDI: 0000000000000046 [ 123.463622][ T2807] RBP: ffffc900011cf710 R08: ffffffff81de25c3 R09: ffffed1024e1e82a [ 123.463628][ T2807] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 123.463636][ T2807] R13: ffffc900011cf880 R14: 000000cc10000000 R15: ffffc900011cf5e0 [ 123.463644][ T2807] FS: 00007f9a626936c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 123.463650][ T2807] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.463657][ T2807] CR2: 0000000000000002 CR3: 00000001077f6000 CR4: 00000000003506a0 [ 123.463665][ T2807] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 123.463671][ T2807] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 123.463674][ T2807] Call Trace: [ 123.463691][ T2807] ? __die_body+0x62/0xb0 [ 123.463700][ T2807] ? die+0x88/0xb0 [ 123.463708][ T2807] ? do_trap+0x1a4/0x310 [ 123.463718][ T2807] ? ext4_writepages+0x3bdf/0x3c00 [ 123.463727][ T2807] ? handle_invalid_op+0x95/0xc0 [ 123.463735][ T2807] ? ext4_writepages+0x3bdf/0x3c00 [ 123.463751][ T2807] ? exc_invalid_op+0x32/0x50 [ 123.485318][ T441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.488792][ T2807] ? asm_exc_invalid_op+0x12/0x20 [ 123.488803][ T2807] ? ext4_writepages+0x653/0x3c00 [ 123.488819][ T2807] ? ext4_writepages+0x3bdf/0x3c00 [ 123.639011][ T2807] ? ext4_writepages+0x3bdf/0x3c00 [ 123.643951][ T2807] ? unwind_get_return_address+0x4d/0x90 [ 123.649413][ T2807] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 123.654874][ T2807] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 123.660343][ T2807] ? ext4_readpage+0x230/0x230 [ 123.664936][ T2807] ? __kasan_check_write+0x14/0x20 [ 123.670144][ T2807] ? __switch_to+0x5f6/0x1240 [ 123.674669][ T2807] ? sched_clock+0x3a/0x40 [ 123.678910][ T2807] ? compat_start_thread+0x80/0x80 [ 123.683861][ T2807] ? finish_task_switch+0x130/0x5a0 [ 123.688888][ T2807] ? ext4_readpage+0x230/0x230 [ 123.693491][ T2807] do_writepages+0x12e/0x270 [ 123.697921][ T2807] ? __writepage+0x130/0x130 [ 123.702346][ T2807] ? __kasan_check_write+0x14/0x20 [ 123.707380][ T2807] ? _raw_spin_lock+0xa4/0x1b0 [ 123.711976][ T2807] ? _raw_spin_unlock+0x4d/0x70 [ 123.716667][ T2807] __filemap_fdatawrite_range+0x33c/0x3f0 [ 123.722218][ T2807] ? filemap_check_errors+0x150/0x150 [ 123.727434][ T2807] ? avc_has_extended_perms+0x1e3/0xf70 [ 123.732805][ T2807] filemap_flush+0x23/0x30 [ 123.737059][ T2807] ext4_convert_inline_data+0x1a1/0x610 [ 123.742442][ T2807] ? ext4_inline_data_truncate+0xcf0/0xcf0 [ 123.748084][ T2807] ? down_write+0xd7/0x150 [ 123.752476][ T2807] ext4_fallocate+0x149/0x1ca0 [ 123.757034][ T2807] ? avc_policy_seqno+0x1b/0x70 [ 123.761706][ T2807] ? ext4_ext_truncate+0x200/0x200 [ 123.766656][ T2807] ? fsnotify_perm+0x67/0x4e0 [ 123.771168][ T2807] ? security_file_permission+0x7b/0xb0 [ 123.776601][ T2807] ? preempt_count_add+0x92/0x1a0 [ 123.781412][ T2807] vfs_fallocate+0x492/0x570 [ 123.785878][ T2807] do_vfs_ioctl+0x1686/0x1a30 [ 123.790362][ T2807] ? ioctl_has_perm+0x3f0/0x560 [ 123.795038][ T2807] ? __x32_compat_sys_ioctl+0x90/0x90 [ 123.800256][ T2807] ? has_cap_mac_admin+0x3c0/0x3c0 [ 123.805283][ T2807] ? selinux_file_ioctl+0x3cc/0x540 [ 123.810315][ T2807] ? selinux_file_alloc_security+0x120/0x120 [ 123.816128][ T2807] ? __fget_files+0x31e/0x380 [ 123.820643][ T2807] ? security_file_ioctl+0x84/0xb0 [ 123.825673][ T2807] __se_sys_ioctl+0x99/0x190 [ 123.830103][ T2807] __x64_sys_ioctl+0x7b/0x90 [ 123.834613][ T2807] do_syscall_64+0x34/0x70 [ 123.838870][ T2807] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 123.844594][ T2807] RIP: 0033:0x7f9a63411bd9 [ 123.848847][ T2807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.868548][ T2807] RSP: 002b:00007f9a62693048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.876801][ T2807] RAX: ffffffffffffffda RBX: 00007f9a6359ff60 RCX: 00007f9a63411bd9 [ 123.884701][ T2807] RDX: 0000000020000100 RSI: 0000000040305829 RDI: 0000000000000009 [ 123.892502][ T2807] RBP: 00007f9a63480aa1 R08: 0000000000000000 R09: 0000000000000000 [ 123.900319][ T2807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 123.908124][ T2807] R13: 000000000000000b R14: 00007f9a6359ff60 R15: 00007ffcc5ea8468 [ 123.915935][ T2807] Modules linked in: [ 123.944818][ T2807] ---[ end trace 6d1a79cf955a33d4 ]--- [ 123.952678][ T2807] RIP: 0010:ext4_writepages+0x3bdf/0x3c00 [ 123.958619][ T2807] Code: 51 8c ff 31 ff 89 de e8 df 51 8c ff 45 84 f6 75 27 e8 45 4f 8c ff 49 be 00 00 00 00 00 fc ff df e9 0e f7 ff ff e8 31 4f 8c ff <0f> 0b e8 2a 4f 8c ff e8 11 24 22 ff eb 9b e8 1e 4f 8c ff e8 05 24 [ 123.969013][ T441] usb 5-1: config 0 descriptor?? [ 123.978629][ T2807] RSP: 0018:ffffc900011cf320 EFLAGS: 00010283 [ 123.989296][ T2807] RAX: ffffffff81de5b4f RBX: 0000008000000000 RCX: 0000000000040000 [ 123.997374][ T7] device bridge_slave_0 left promiscuous mode [ 124.003312][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.015957][ T2807] RDX: ffffc90000dc9000 RSI: 0000000000000045 RDI: 0000000000000046 [ 124.023748][ T2807] RBP: ffffc900011cf710 R08: ffffffff81de25c3 R09: ffffed1024e1e82a [ 124.034881][ T7] device veth1_macvtap left promiscuous mode [ 124.040960][ T7] device veth0_vlan left promiscuous mode [ 124.047784][ T2807] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 124.055561][ T2807] R13: ffffc900011cf880 R14: 000000cc10000000 R15: ffffc900011cf5e0 [ 124.075935][ T2807] FS: 00007f9a626936c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 124.084815][ T2807] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.091266][ T2807] CR2: 0000000000000002 CR3: 00000001077f6000 CR4: 00000000003506b0 [ 124.099208][ T2807] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.107110][ T2807] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 124.114905][ T2807] Kernel panic - not syncing: Fatal exception [ 124.120891][ T2807] Kernel Offset: disabled [ 124.125026][ T2807] Rebooting in 86400 seconds..