last executing test programs: 5.125017066s ago: executing program 4 (id=647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x70, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x0, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r6, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd300000000", 0x14}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279", 0x6c}, {&(0x7f0000000800)="fff5c0293353db83a683db60266a3867d03f740f4e0a7bafe7be9b2bacb7c2d40bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15dba086d191c0a8f23acdeb928805cae14ca8aec1241e5342ef1675f8b948568fe6229a3bb6b71418a123e62962d5fb073391000000000020d6bd0000000062b043f12bbc4c839da0f35d437b0add4957016a90d9925b1a09cfefc9387e21fc02f3c548f9c32e0949d36d91b1bdeef1ea6aa5946db4ba26180005216886", 0xe1}, {&(0x7f0000000a40)="560e78011ebeced7c4d4f4adc887d8a4c55ae9e6d3bae49259a935b480ee610812f5c5b35943bdb14ae21509b259f5eaf5f3a7b7ca845156bf64809dee25c0eadad25cac50b01aabdb713c8c9965a19e114c8bbc35054f68bf88c9786ed430aff1952b2498efc44341ebc815cb2ea201611173b2e9d5cac4e7b68b009acd3a67d49ffb192dad5fcac955fee31e59228679db51d72e0ba6816fa254145105", 0x9e}], 0x4}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="02be09ad65c73fc5fbdafe1617323a4a3b2655cbbf36d137a6e542d2a2b303d25a64b2658972a9e0d9a1c80ac6e52d81e85ee9778c06ab2d681fed6f976eea2a1145b9d9a1038eb3d902fb2a4146954b60d59ef539d86c3d1e25c079bbee2d51a03d2d5470cc186a69edfca75569b185326d1af0ac4ea350550070d75404a02520ac2361da8bbba919b4cda582", 0x8d}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f00000001c0)=0x9, 0x4) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x6) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) 4.987938337s ago: executing program 4 (id=649): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.207940027s ago: executing program 3 (id=653): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2b8, &(0x7f0000001080)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xb8) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) 3.778809052s ago: executing program 4 (id=650): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 3.760041155s ago: executing program 0 (id=655): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x14, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) 3.707955313s ago: executing program 0 (id=657): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800000020b9078792f3f528a4bcd8d4c2970fb70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0x168) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0xfffffffffffffffe, 0x29) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000580)={0x50}, 0x50) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000140010c04000000000ec0000000", 0x58}], 0x1) 3.622203006s ago: executing program 0 (id=658): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xb, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 3.523930321s ago: executing program 0 (id=659): socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x14f042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r7 = syz_open_pts(r6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x1a) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4004, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="3d083e45529ab1b809000000f971eb81a448e8d419d382b8555f6e86608bdbd428ccc23988ee33a3ae391d8f9be3528599924e02efaa677571b726619be490c211f68e", @ANYRESDEC=0x0]) utime(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) 3.493152796s ago: executing program 1 (id=661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_mount_image$msdos(&(0x7f0000002280), &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f00000022c0)=ANY=[], 0x1, 0x206, &(0x7f0000002040)="$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") syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES16, @ANYRESHEX=r1, @ANYRESOCT=0x0, @ANYRES16, @ANYRES64], 0x5, 0x35a, &(0x7f0000000e80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000680)={'#! ', './file0', [{0x20, '(\x86\x83\xd7\x00Q'}, {0x20, '\xf5\x8e\xfb\xd1\xd5\x05q\xb0\x89Z\xccf\xf9%\x03\x92\xc9\xeb\xdf.\xe5\xe4\x9b3\xdd\xf8\xba=\xa4|s\xf17\x96;h\xcc\x17\x9c\xdd\x17\";)\xa4\x06\x85\xae!wm\xa3\x00\xea\xa4\x888\xc9q!z\xcd\xaf6\xb0\x8d\xfc+\xe1\x10\xc6\xec\xcale%/\xdaBH\xa2F\xf3\xc4\x82>;1E-\xff\x06\xb6\xfe(c=H~\x81F\x19ILlQ\x05>O\xb2\x1b\x1a|XSk~J\x9a\xa3\x1b\xb1\vbz\xb2\x95\xd9\xa8\xa2\xa9\bD\xbb\x13\x89\x9e\xbb'}]}, 0x9d) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 3.40407816s ago: executing program 1 (id=662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffce7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x376, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) getresgid(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) 3.332323401s ago: executing program 3 (id=663): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800000020b9078792f3f528a4bcd8d4c2970fb70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0x168) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000580)={0x50}, 0x50) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000140010c04000000000ec0000000", 0x58}], 0x1) 2.527750954s ago: executing program 1 (id=665): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='ext4_da_reserve_space\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='ext4_da_reserve_space\x00', r4}, 0x10) write$cgroup_pid(r3, &(0x7f0000000580), 0x12) 2.48377197s ago: executing program 1 (id=666): socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_es_lookup_extent_enter\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r8 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) 2.394415414s ago: executing program 3 (id=667): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x14, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) 2.112233277s ago: executing program 2 (id=670): socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x14f042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r7 = syz_open_pts(r6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'ip6gretap0\x00', 'macsec0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "22f67c570dd0d6613e2531632a99a7d04b8533802a11592bc03ef62b7d71"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x1a) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4004, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="3d083e45529ab1b809000000f971eb81a448e8d419d382b8555f6e86608bdbd428ccc23988ee33a3ae391d8f9be3528599924e02efaa677571b726619be490c211f68e", @ANYRESDEC=0x0]) utime(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) 2.046336057s ago: executing program 3 (id=671): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@base={0xb, 0x8, 0x10001, 0x9, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800007f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r3 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x80803, 0x0) socket$inet6(0xa, 0x200000000003, 0x0) syz_emit_ethernet(0xab, &(0x7f00000014c0)=ANY=[@ANYBLOB], 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x6609, 0x0) sched_setscheduler(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x7fffdffff000, 0x0, 0x4002011, r8, 0x0) 2.046162278s ago: executing program 0 (id=660): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x1b, 0x8000, 0x0, 0xffffffffffffffff, 0x2000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000}, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r3 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r3) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/82, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) (async) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={0x0}, 0x10) 2.045866007s ago: executing program 0 (id=673): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000), 0x0, 0x20008081) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="030000000000000002000000000000000600000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="000000001a00000000000000000000b600"/28, @ANYRES32, @ANYBLOB="00000000ffffffffffffffff00"/25, @ANYRES32]) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000b00)={0x4, {{0xa, 0x4e21, 0x2, @empty, 0xffffffff}}}, 0x88) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r3 = syz_usb_connect(0x5, 0x616, &(0x7f0000001340)={{0x12, 0x1, 0x201, 0xda, 0xee, 0x1a, 0x10, 0x67b, 0xaaa8, 0xc30c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x604, 0x3, 0x0, 0x6, 0x0, 0x3, [{{0x9, 0x4, 0x8c, 0x9, 0x10, 0x34, 0xba, 0x70, 0x40, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "1e03eb"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0x505a, 0x28}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x4, 0x8, 0x34}, @obex={0x5, 0x24, 0x15, 0x3}, @acm={0x4, 0x24, 0x2, 0x3}]}], [{{0x9, 0x5, 0x1, 0x2, 0x200, 0x1f, 0x6, 0x1, [@generic={0x2, 0x7}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x5, 0x44, 0xb9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x101}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x80, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7ff}]}}, {{0x9, 0x5, 0x8d, 0x2, 0x1ff, 0x40, 0x86, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x49}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xd0, 0x0, 0xc7, [@generic={0x58, 0x31, "15265f05b0a9e94e1f0a5dfc8d56054201a7e0077148d11f0635d6adb4f0188754e67feb4ea4dc8a583fb06855215c90d9620913d16da60acfea25bd73e2eae92e634e12fd7002704c2730c757f5fb1cebea82f873c3"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x3, 0x7f, 0x3f, [@generic={0x77, 0x2, "5efcbe952ab4e0a1066fa97026a9634b657bce54de73cb807c5d209cdb443ef3c98f961d65e0750059a394fc139d2a551d1add02b6c3c8126e6f454daa73f93541604bac514bfa529eb300ae5228dac398958e328481a2fb6b7801bddc1846ca2882c2e4e52ff3e12b7b50711e333285f799a626e1"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2c}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x6, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x1}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0xff, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x7}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x97, 0x9, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x9}]}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0xfc, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x7fff}, @generic={0xfb, 0xc, "ba5e3cf141f1ddc933634d95f38bc27961016b483d19df574ccc3f2f6b34a7bf7a7a048f6f00055049a15fc47034606ade9337c9609c6c3654c19a170603d3688380c65a87307fb60a029d774ced9b212d4f5df30cbf641be3fafda3a6f97334448fe337dd483bbe38e434368ff2d81a0ed727a6c1cfe51b9312b2e6e1c4f0c34bdbfc448d78646b0f2060a3b91645444ac1afdf50450bf1936c3b2ddf7888a72e2333956dfe17dc5437cf342ff5a6cee7e8d32a5633fc004e0b7ab8c289a97b774eb2fb7193f36200ed1f84939e0b8e71ad5fb4e91103fcccfa07ecc0534d68fc9de72d22f91bc0223dd2e9f6dd2d5a3f15723d3fe403c6f1"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x40, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x8}]}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0x7, 0x4, 0x1, [@generic={0xda, 0x8, "21e6c4574fcdbb2134c608d958597aa2982ba9d06f3e1d99c85fb0e9d8aae50c7cbf878c286716700a34a8fb7c6d442f7edb5c70625ff59d6041ecff002fdc9c607b3dbf1bd92c867fe9f5ace50f889b82a586dda686df3fc75266d3e9848fabef8171ef5bf01f429b5d6607bba4c70b14cfe5282f6c0e6333eafce6a16502d4bf3b7c160c48fcaefbb35352db9a0b87809fb4b189c68ca71456a1d04772aba2d43e72bfa16a294938c63ec977a5db6755403bdd442adfc58f1be1ff82a6eb8821d3dafd54bb4193d5658c80ca54b07bbf1f4c2053782361"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x200, 0x80, 0x7d, 0x7, [@generic={0x38, 0x8, "0fa5d3092cf81275b7e5a38cbdc8388cb66c4ad03f88e105788f402477253be7f42f4ba3e11aff7a34ae4cc60fa3f4ee0fbcda40f22c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0xfca}]}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x38, 0x96, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x92, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x9, 0x40, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x3}]}}, {{0x9, 0x5, 0x8d296c12875ab41a, 0x3, 0x8, 0x8, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4b, 0x6}]}}]}}, {{0x9, 0x4, 0xb1, 0x2, 0x1, 0xff, 0x5, 0x66, 0x3, [@generic={0x1d, 0xa, "cf0d63e7fe616159848a30970834b4ca11b028695660db3e8eeb57"}], [{{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x1f, 0x40, 0x4, [@generic={0xd2, 0x23, "8cfdd2dff22dcce0bc1607e5578df5a87ecbecbea2ea125d78bfcedee3bf8eb9e8e072cedd93aa51bb9f015f1c6d9e9ce3bdeb75d4d8fb4cd722a44c3910893723742210092306d79e14241d38dba576f7f4ba10ded1d92ff9601a4606dda3e2e83512c647863d10b0175c81d4134f8eed3985315186cf6842a213ea861329ba45ad80f96dd7f17a82ad654eba90459cebccf04301a571a0bdfa69cd757a05a7e199d51aee52c26eb404461f3b6c3bd8b662c712de729c3769de0c36fa9179afcf403ffb3331f6d8d6010e0ad803f3a1"}, @generic={0x1c, 0x21, "5f88855249c8892f9e31f3be06db9b5ddb0cab658952736a7baa"}]}}]}}, {{0x9, 0x4, 0xf2, 0x4, 0x1, 0x1f, 0x30, 0x5a, 0x7, [@hid_hid={0x9, 0x21, 0x7, 0x81, 0x1, {0x22, 0xb8e}}], [{{0x9, 0x5, 0x7, 0x0, 0x10, 0x4, 0x98, 0x40, [@generic={0xc1, 0xf, "cb360828ead29fa44fa41573fd0fedf913e340066e472e5410046cd2c0e920ac18f5e75bef650f65426654502a0e01568541ae0a88b9a1f9bdaafb5c9802d86d990ca3d2163057124623a1b82851b0ddd665e427c6b36a8a8da160e87374826a19953c40f1a293f09b3a56ccce25bbb660129f2ad4c0f16f6d8ed39958c0d55a7cfc24aef91aa777f3a0746325a2f2c54350ee6345dcc457701f7325e60cd8dece7b0eb8ad3a1d8bf3d8f08e0db6414e2b6889e302515c3d56d0291e15bfff"}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x1f, 0x1f, 0x0, 0x20, 0x40}, 0x26, &(0x7f0000000380)={0x5, 0xf, 0x26, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0x3, 0xff31}, @ssp_cap={0x10, 0x10, 0xa, 0x92, 0x1, 0xe1, 0xff0f, 0x188a, [0xf0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x81, 0x4}]}, 0x1, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41c}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000800)={0x14, &(0x7f0000000780)={0x20, 0x2, 0x29, {0x29, 0x22, "a047126b2d148030ce2ef706e0d9f9947629c12e85f3024eccf0ed11b6ccf41e54e3ca58502973"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}}, &(0x7f0000000ac0)={0x34, &(0x7f0000000840)={0x0, 0x16, 0x8c, "0311c2448ff26053f6ddc7e41e68b22ebc24864722802b66548314960bbd75a2e8c0d2e5ad8d9899f9f9b0881b61c90eabb95de351e7cae1b742f0cdb1174b142c8d2a2e2bd83dc00ed7157135f0c4e50bfea9dfef783d1820d987a90972862694c5b282a3c353a4b41505aea0606fb60f20eb02843951a213482734fb9184f4a08ed94d201c9454f4464b35"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0xf4}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000009c0)={0x20, 0x0, 0x49, {0x47, "9c1bf63d8f6ab4f6cfa253d4f82e83d66c1929b07e2a1299c66d8fc19fbbe2591fde037cd69364fa7312d55b3f4db25ce8380ee01f0fff2ab087e0741aa799014b4554002612ac"}}, &(0x7f0000000a40)={0x20, 0x1, 0x1, 0x72}, &(0x7f0000000a80)={0x20, 0x0, 0x1, 0x1}}) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='xfrm0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e756e44ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) 2.0284028s ago: executing program 2 (id=674): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd37039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06acaff0c23374ec7c4aadbb8b985f14893ea78f67026db363c4356dea91d750e168350685e0f4f079d2d8e79be174ef9355b707129d8055ed83d5599bdbb3e3d323e163db2312c1ea84c10b0abd8599692167dcdee8f2a5c751023cf328e86d355eebc", 0xdd}], 0x1}}], 0x1, 0x20008081) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="030000000000000002000000000000000600000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="000000001a00000000000000000000b600"/28, @ANYRES32, @ANYBLOB="00000000ffffffffffffffff00"/25, @ANYRES32]) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000b00)={0x4, {{0xa, 0x4e21, 0x2, @empty, 0xffffffff}}}, 0x88) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r3 = syz_usb_connect(0x5, 0x6db, &(0x7f0000001340)={{0x12, 0x1, 0x201, 0xda, 0xee, 0x1a, 0x10, 0x67b, 0xaaa8, 0xc30c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c9, 0x3, 0x0, 0x6, 0x0, 0x3, [{{0x9, 0x4, 0x8c, 0x9, 0x10, 0x34, 0xba, 0x70, 0x40, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "1e03eb"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0x505a, 0x28}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x4, 0x8, 0x34}, @obex={0x5, 0x24, 0x15, 0x3}, @acm={0x4, 0x24, 0x2, 0x3}]}], [{{0x9, 0x5, 0x1, 0x2, 0x200, 0x1f, 0x6, 0x1, [@generic={0xc7, 0x7, "13d3f1d33c1de9729e98107ec8711ba38e6ee40a2bfa3e0e479ad9e9fdcd693fbdd7fb6832e8016358c17cc3bdc954e44db915c7627c415da62f7d5eb8ba76331bc6773736e3a518f7af53bcf9726670a23cf59e92c4e78dc6fdf82b749400f2dd99545992bb86b8ed0aa065d03370b888c99e86b5e02f4bc0e0b27159fc5fc82cb4e310c2d64a6ca2f7f1c41f2d982eea3a3dd7be61d60b4d33018c9ae754f97be4c52286a612df90043230d6caa26b4dfbf61e0cb0df44cf091aac7d749e2b387b1bea0a"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x5, 0x44, 0xb9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x101}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x80, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7ff}]}}, {{0x9, 0x5, 0x8d, 0x2, 0x1ff, 0x40, 0x86, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x49}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xd0, 0x0, 0xc7, [@generic={0x58, 0x31, "15265f05b0a9e94e1f0a5dfc8d56054201a7e0077148d11f0635d6adb4f0188754e67feb4ea4dc8a583fb06855215c90d9620913d16da60acfea25bd73e2eae92e634e12fd7002704c2730c757f5fb1cebea82f873c3"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x3, 0x7f, 0x3f, [@generic={0x77, 0x2, "5efcbe952ab4e0a1066fa97026a9634b657bce54de73cb807c5d209cdb443ef3c98f961d65e0750059a394fc139d2a551d1add02b6c3c8126e6f454daa73f93541604bac514bfa529eb300ae5228dac398958e328481a2fb6b7801bddc1846ca2882c2e4e52ff3e12b7b50711e333285f799a626e1"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2c}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x6, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x1}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0xff, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x7}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x97, 0x9, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x9}]}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0xfc, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x7fff}, @generic={0xfb, 0xc, "ba5e3cf141f1ddc933634d95f38bc27961016b483d19df574ccc3f2f6b34a7bf7a7a048f6f00055049a15fc47034606ade9337c9609c6c3654c19a170603d3688380c65a87307fb60a029d774ced9b212d4f5df30cbf641be3fafda3a6f97334448fe337dd483bbe38e434368ff2d81a0ed727a6c1cfe51b9312b2e6e1c4f0c34bdbfc448d78646b0f2060a3b91645444ac1afdf50450bf1936c3b2ddf7888a72e2333956dfe17dc5437cf342ff5a6cee7e8d32a5633fc004e0b7ab8c289a97b774eb2fb7193f36200ed1f84939e0b8e71ad5fb4e91103fcccfa07ecc0534d68fc9de72d22f91bc0223dd2e9f6dd2d5a3f15723d3fe403c6f1"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x40, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x8}]}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0x7, 0x4, 0x1, [@generic={0xda, 0x8, "21e6c4574fcdbb2134c608d958597aa2982ba9d06f3e1d99c85fb0e9d8aae50c7cbf878c286716700a34a8fb7c6d442f7edb5c70625ff59d6041ecff002fdc9c607b3dbf1bd92c867fe9f5ace50f889b82a586dda686df3fc75266d3e9848fabef8171ef5bf01f429b5d6607bba4c70b14cfe5282f6c0e6333eafce6a16502d4bf3b7c160c48fcaefbb35352db9a0b87809fb4b189c68ca71456a1d04772aba2d43e72bfa16a294938c63ec977a5db6755403bdd442adfc58f1be1ff82a6eb8821d3dafd54bb4193d5658c80ca54b07bbf1f4c2053782361"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x200, 0x80, 0x7d, 0x7, [@generic={0x38, 0x8, "0fa5d3092cf81275b7e5a38cbdc8388cb66c4ad03f88e105788f402477253be7f42f4ba3e11aff7a34ae4cc60fa3f4ee0fbcda40f22c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0xfca}]}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x38, 0x96, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x92, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x9, 0x40, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x3}]}}, {{0x9, 0x5, 0x8d296c12875ab41a, 0x3, 0x8, 0x8, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4b, 0x6}]}}]}}, {{0x9, 0x4, 0xb1, 0x2, 0x1, 0xff, 0x5, 0x66, 0x3, [@generic={0x1d, 0xa, "cf0d63e7fe616159848a30970834b4ca11b028695660db3e8eeb57"}], [{{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x1f, 0x40, 0x4, [@generic={0xd2, 0x23, "8cfdd2dff22dcce0bc1607e5578df5a87ecbecbea2ea125d78bfcedee3bf8eb9e8e072cedd93aa51bb9f015f1c6d9e9ce3bdeb75d4d8fb4cd722a44c3910893723742210092306d79e14241d38dba576f7f4ba10ded1d92ff9601a4606dda3e2e83512c647863d10b0175c81d4134f8eed3985315186cf6842a213ea861329ba45ad80f96dd7f17a82ad654eba90459cebccf04301a571a0bdfa69cd757a05a7e199d51aee52c26eb404461f3b6c3bd8b662c712de729c3769de0c36fa9179afcf403ffb3331f6d8d6010e0ad803f3a1"}, @generic={0x1c, 0x21, "5f88855249c8892f9e31f3be06db9b5ddb0cab658952736a7baa"}]}}]}}, {{0x9, 0x4, 0xf2, 0x4, 0x1, 0x1f, 0x30, 0x5a, 0x7, [@hid_hid={0x9, 0x21, 0x7, 0x81, 0x1, {0x22, 0xb8e}}], [{{0x9, 0x5, 0x7, 0x0, 0x10, 0x4, 0x98, 0x40, [@generic={0xc1, 0xf, "cb360828ead29fa44fa41573fd0fedf913e340066e472e5410046cd2c0e920ac18f5e75bef650f65426654502a0e01568541ae0a88b9a1f9bdaafb5c9802d86d990ca3d2163057124623a1b82851b0ddd665e427c6b36a8a8da160e87374826a19953c40f1a293f09b3a56ccce25bbb660129f2ad4c0f16f6d8ed39958c0d55a7cfc24aef91aa777f3a0746325a2f2c54350ee6345dcc457701f7325e60cd8dece7b0eb8ad3a1d8bf3d8f08e0db6414e2b6889e302515c3d56d0291e15bfff"}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x1f, 0x1f, 0x0, 0x20, 0x40}, 0x26, &(0x7f0000000380)={0x5, 0xf, 0x26, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0x3, 0xff31}, @ssp_cap={0x10, 0x10, 0xa, 0x92, 0x1, 0xe1, 0xff0f, 0x188a, [0xf0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x81, 0x4}]}, 0x1, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41c}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000800)={0x14, &(0x7f0000000780)={0x20, 0x2, 0x29, {0x29, 0x22, "a047126b2d148030ce2ef706e0d9f9947629c12e85f3024eccf0ed11b6ccf41e54e3ca58502973"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}}, &(0x7f0000000ac0)={0x34, &(0x7f0000000840)={0x0, 0x16, 0x8c, "0311c2448ff26053f6ddc7e41e68b22ebc24864722802b66548314960bbd75a2e8c0d2e5ad8d9899f9f9b0881b61c90eabb95de351e7cae1b742f0cdb1174b142c8d2a2e2bd83dc00ed7157135f0c4e50bfea9dfef783d1820d987a90972862694c5b282a3c353a4b41505aea0606fb60f20eb02843951a213482734fb9184f4a08ed94d201c9454f4464b35"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0xf4}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000009c0)={0x20, 0x0, 0x49, {0x47, "9c1bf63d8f6ab4f6cfa253d4f82e83d66c1929b07e2a1299c66d8fc19fbbe2591fde037cd69364fa7312d55b3f4db25ce8380ee01f0fff2ab087e0741aa799014b4554002612ac"}}, &(0x7f0000000a40)={0x20, 0x1, 0x1, 0x72}, &(0x7f0000000a80)={0x20, 0x0, 0x1, 0x1}}) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='xfrm0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e756e44ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) 1.7021614s ago: executing program 4 (id=676): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) fstatfs(r2, &(0x7f00000002c0)=""/4096) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) utime(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x9, 0x3f}) 1.655893447s ago: executing program 4 (id=677): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800000020b9078792f3f528a4bcd8d4c2970fb70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0x168) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000580)={0x50}, 0x50) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000140010c04000000000ec0000000", 0x58}], 0x1) 1.581898209s ago: executing program 1 (id=678): eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000200)={r1, 0x0, 0x7}) open$dir(&(0x7f00000000c0)='./file0\x00', 0x4040, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r0, 0x3, 0x80000}) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000580)=0xfffffffffffffc5a, 0x80800) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) accept4$inet6(r2, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000540)=0x1c, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000280)) r4 = socket$nl_route(0x10, 0x3, 0x74) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ff"], 0x15) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000001b40)=ANY=[@ANYBLOB="b8000000000000003235fd62af9c5039ecd026ceda348232607840772a88b4d4bab33edd5290f2684a6d6ebe1940b2645f505c59929f91d7ffb44244587111c11f4c470d9f8768d72002f3a23745c486322f1c5b3e4f607327ecd9e90d73ebc14c1da18218ac952cd0b1b2522f50e2cd0078cc4610fde231255684c6fce45150d0c53c82759cdef37aefb4c78c3a248da08505c9c538cb77ac8dc74072d2ef726e87b2971961ec8e32f366dd2b4c2d59dac942b34035c4053ef19b6a994a23500a677690d819153ea097b5f2bd37c7c80bd0b736a0b7f68487eb240c267e627cad276a94493983c08d85a867b949fdd1f32de0f66b1aed993f6730c82fbffa1a166b832d88517b56ec5a01c30e3119646bb64d9375da0a7539f61c52fd4d", @ANYRES64=0x0, @ANYBLOB='\x00'/108, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00trans=fd,\x00\x00\x00\x00\x00\x00\x00'], 0xb8) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4001) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={&(0x7f00000004c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000000700)="ed57865503", 0x5}, {&(0x7f00000007c0)="8bf8a33330401c8ff987cd7df30b769d4384500a4898fda1a354b2181c73cd66788d3dbb37bdea2af34d1f239a3437653d5820c6d8a3df870fe53009e98a982987751365eb684fa7d24f5c9acdaa09eecc93088afc309fa233bb65ccc200ec3362bc585482789b168f388912cc47f6b5", 0x70}, {&(0x7f0000000840)="00fd6cf1ce0be18e3bea2749df31c78540bc515b5d22a351e1e7921982a6421c52f26ece261077e1923938c738cdcf0f51dcaac89b3c21812949d9a9f233def221a634ecc467cbfaf01dfb626c31dcadee2e992b557fbb81a9ee649538ac2b7e730ac1ed2eb7c9f735daf99cb0fe530db87d7dadcb902ea1eef9117527458d5e55a9cda02b07dd544f41aad534906c8375b85d8aa7a5d7c9cbe35f70420b94048fcc8fe461ff585a5f33717afc5ee8d74ac13b4efb23241ca973d6ae0936436028ba8673", 0xc4}, {&(0x7f0000000940)="d9eb6b5d170c2c149a71b005d11811b65194fdd94512b533149758dae502321ea31a763685b84849c9de2ab2692fd0678fa04f84b9e8dca2971cd969ec7300f84fd850b9d16d9596c20bc6d1", 0x4c}, {&(0x7f00000009c0)="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", 0x1000}], 0x5, &(0x7f0000001a40)=ANY=[@ANYBLOB="14000000000000000000000002000000faffffff0000000080000000000000000000000007000000443c73317f0000010514344d0a0101010000ce7cac1414aa00003c79e0004a04ffff0000e000000200000002ac1414bb0000097eac1414bb00000cbc2ccf000b870ae4659a39957f25000a7f8827f5ff0c1c0f010d9211cd46edf2023a7a01e50011010000000000000000000001000000ff00000000000000"], 0xb0}, 0x40048d5) 1.024393074s ago: executing program 3 (id=672): socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r6 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000400), 0x8) write$binfmt_aout(r6, 0x0, 0x0) inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x8, &(0x7f0000001a80)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa011eee65624aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006e0400000000000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83c6e613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038d0100a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b17680100969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06de269e97fbb0776bf56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105cfdf8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f01000080000000004febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60133641a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df745986d96cc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2e9a20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc5270ee69b10e232e4084913a06d468d0928bad76d697e1015ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846899c6b23c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3a8737cb04a33694f40000000000005d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b95bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f11447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) 886.565755ms ago: executing program 2 (id=675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='ext4_da_reserve_space\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='ext4_da_reserve_space\x00', r4}, 0x10) write$cgroup_pid(r3, &(0x7f0000000580), 0x12) 868.874958ms ago: executing program 2 (id=679): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800000020b9078792f3f528a4bcd8d4c2970fb70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0x168) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0xfffffffffffffffe, 0x29) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000580)={0x50}, 0x50) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000140010c04000000000ec0000000", 0x58}], 0x1) 775.425912ms ago: executing program 2 (id=680): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000640)=0x9, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="cba1ff0000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='ext4_da_reserve_space\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000240), 0x12) 762.861234ms ago: executing program 4 (id=681): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x14, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) 431.911855ms ago: executing program 2 (id=682): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@base={0xb, 0x8, 0x10001, 0x9, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800007f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r3 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x80803, 0x0) socket$inet6(0xa, 0x200000000003, 0x0) syz_emit_ethernet(0xab, &(0x7f00000014c0)=ANY=[@ANYBLOB], 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x6609, 0x0) sched_setscheduler(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x7fffdffff000, 0x0, 0x4002011, r8, 0x0) 270.923279ms ago: executing program 1 (id=684): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000010280)='./mnt\x00', 0x20044, &(0x7f0000000a40)=ANY=[@ANYRESHEX, @ANYBLOB="cdb323c17e2938a103aaaef19dfc2f0c47d2a5cb93ebd0205efacf4041eed6a7a2efd6425311f08174e53d876e5ef5a3f91b433403055b00a0d0d09cc482ad2cf31147c5fc9b373d7587b2e333d86a0197bbd77be09660983d7f426f53d4a48fc5a0fe7c98f070f6b237beff1e3568a6e18228761be8d9a8d4c9250b9e8ae64591d90b50b2658353650dc79df08e821919809bb4ac852658beaaaf130e77cc109d0db07f60ee13c626227d8f09e9e9c0b13e56c4ccfe4c09b011e59393366467c64b9daa0c0696d8a095d76e475920bd0703394ef50eeeb3f8b297dcb36bb3c9baf8058e688f274001c4dc9dff6d382ab03d0db5f3509d1c6703", @ANYRES64], 0x1, 0x10230, &(0x7f0000020500)="$eJzs3D9vG3UYB/DHTRu1tJQIMbBxEiA5ErHOdlJBWSKqqgOkimgZGRzbsdzGdhQnTqiEBAN/dlY2mHgPvAA2lg59B0hsSCwVEsh3F1SqDKV16sb5fKTz9+4557n7WVak5xQlgFNrIfnzj1JcjgsRMRcRlyKy/VKxZVbzeD0i3oiIM49spaL+b2E+Il6KiMvj5nnPUnHqh5+//vTH3z58+/uffplLv/3m9+mtGpi2tyKit53v7/fyHHTyvFPUG6Nulr3lUZH5id7d4niQ5357o/fIb6zoLTeyrHfy9w+294bj3NxqNMfZ6W5m9e1+fsHhqHPYJ/uBO42d7LjV3siyOxxk2bmX9z8o8t5wN+/TKvp9lrWP3d3DzOvtg3a+nu27WTb7u0U97ztotQ/GOSqyuFy0Np7ywz1BPur29w6SUXtn2B30k5VKNa2kSzvNK0tpWn2vvtRpNTabV9q15VZjczkpt1eHg63FpNxpNpPyjWvXFpNqWqlV0neSGzc/SbZaSXmcH3T7e7vdreFiUqvUV85WF5M3q8mttfVk/ePr1z9fv52sDfrJzcEoqadJtX51pXa1/m6yfut2Uktr6cytv/Lf9a/93/V/d6zr//JYuzPzStO+AYCTx/wPTMNTzf/n8/rR83/EfuPwOYH5/6R48effI1045eufGOMbz8QXCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg1Lr46/t72c5CfnymqL9clF4tjkvFub+PUHqs59y4b0Sce8L3f1WKmC+ucbidjYjVYvvrleP9DAAAAGCWPXhYvl/KpvX8ZWHaN8TzNJ+9li59MaF+2WOdiX2HsgdRr02q21x2f5Na6cUonlBNxLnxy/lJdXsic8/1agAAwIvBJAAAAAAz7fE/wwcAAABmj/kfAAAAZl82//v/fwAAADDbHjws35/2PQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA/7N1NCoJQEADgsb+NRNF12nSELtMROkg3aus52kVYRBNERAX2COT7YNDRUZylbzEPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6rt4vN83xelZ1ek977uZX/QAAAABvzG+HQabTvLTIvMp7r/7dn1cOhhFR5zPf1G+riEnW32MUEauM06x08wAAANBfze6w/vc3AAAAAAAAAAAAAAAAAAAAAA8KzP8bl57/19o4AAAAAD4x/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgwu68nAAAgzAA7WeB7j9tEXQDwct7kJBjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoszPr1LhRb/oXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfHTkoAQAEoiC6rAWsZP8iXuwg8lvIezCXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP52VtUeqd+Y+X3Zr0McAGEYgKI0XADFzdDclmuBqSDL9Jpl7yVNRc23zfv1Pndvt2JU8KzO6gAAAABWsOdsv189jsIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBjdw6tAIBBIIq1dB/2H6+Ch8dhEsMXiAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICRN/q4JzqjEgCAkn1zeQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4ckAAAAAAI+v+6HYECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBRAAAA//+BoRfj") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="00000000000000f8b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000300000065000000080000009500"/73], &(0x7f0000000040)='GPL\x00', 0x0, 0xffffffffffffff28, 0x0, 0x100, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r4, &(0x7f0000000100)=@known='user.incfs.id\x00', &(0x7f00000001c0)='\x00\x00o;\xc8\xdd1\xa4lB&\xa9\xb6\x06\x06\x99\t\xf5\x10\x17\'\xcaV\xab\\rw9+\xba\tl|\xde\x93\xea\x95A}\x89\x82\x8c\nN\x97\xbf\xab\xa4_\xc2\x17\xe7+\xc5\xfe\x16-\xdd\xa7\x00\xfe\xa0\xa2\xbdUw\x01\x80\x92\xea\x15\xc2opg\xee\xbd\t\xba\x9d\x98\x983\xfd\v\xc1\xbd\x1e\xd5h\xc3@\xda\xee\x97\xd5~\xee\xd6$\xc6\x8c\x01l\x1e\xd3\x1f\xe4<\xee\b\xe4\x16\xc3Ku\x84\xcd\x89\xb8\x1bF\xcd\r\xbc\xc0\xbb\xf5Q\x06\xb71>\xcd\xdb\x0f\x8c\x14\xc5\t\x92m/u,^\xe6\xc7V\xca|;j\xc1\xf4$\xe1A\x17\xeb\xf1M\x8c\x82\\\x89\x89\x00\x98\xadr\xd4\x86;\xed+\x899\x8a\xe9\x18\xb4]a\xd2\x15\x93\x84\x8b\x85\xae\'\xf4\xc9\xcb\x8c\'\x88\xff\x02\b\xaf\xe9vc\x9au\xba\xce]\x85\x98>\xa6\xe1\xc0)\xff`\xdepJ\x95E\x98\xa6pu\xbdh\xa2\xe3\x9d\x85\x19El\xf4aO\xb7\xcd\x15', 0xfc, 0x0) flistxattr(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES8=r5], 0x0, 0x0, 0x0, 0x0}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$evdev(0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x23, 0x1, 0x7fffffffeffe) r7 = epoll_create1(0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) 0s ago: executing program 3 (id=685): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) kernel console output (not intermixed with test programs): x81 has invalid maxpacket 59391, setting to 1024 [ 121.412683][ T2084] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 121.423378][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.432159][ T15] usb 1-1: config 0 interface 140 has no altsetting 0 [ 121.444991][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.451381][ T15] usb 1-1: config 0 interface 177 has no altsetting 0 [ 121.460503][ T2084] overlayfs: missing 'lowerdir' [ 121.471594][ T15] usb 1-1: config 0 interface 242 has no altsetting 0 [ 121.471894][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.486291][ T2099] incfs: ino conflict with backing FS 1 [ 121.500114][ T25] usb 3-1: config 0 descriptor?? [ 121.516584][ T2096] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 121.603595][ T2104] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.611822][ T2104] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.619326][ T2104] device bridge_slave_0 entered promiscuous mode [ 121.629480][ T2104] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.636402][ T2104] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.643828][ T2104] device bridge_slave_1 entered promiscuous mode [ 121.658670][ T289] usb 4-1: USB disconnect, device number 20 [ 121.696606][ T15] usb 1-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 121.705810][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.714127][ T15] usb 1-1: Product: syz [ 121.718146][ T15] usb 1-1: Manufacturer: syz [ 121.722540][ T15] usb 1-1: SerialNumber: syz [ 121.729880][ T15] usb 1-1: config 0 descriptor?? [ 121.734816][ T2108] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.742203][ T2108] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.749752][ T2108] device bridge_slave_0 entered promiscuous mode [ 121.756994][ T2088] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.763780][ T2088] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.773511][ T2108] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.780436][ T2108] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.787649][ T2108] device bridge_slave_1 entered promiscuous mode [ 121.848569][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.855756][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.866259][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.874818][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.882945][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.889783][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.898236][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.916618][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.924665][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.933107][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.940051][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.948188][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.955975][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.963911][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.971768][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.977323][ T25] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 121.979585][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.988373][ T25] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 121.996201][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.007683][ T25] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 122.023672][ T2104] device veth0_vlan entered promiscuous mode [ 122.032509][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.040974][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.048501][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.056117][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.079319][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.086883][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.095585][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.104030][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.112427][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.119369][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.126987][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.135233][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.144251][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.151144][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.158367][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.166338][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.174582][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.179856][ T24] audit: type=1400 audit(1719576960.469:1122): avc: denied { create } for pid=2115 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 122.183575][ T2104] device veth1_macvtap entered promiscuous mode [ 122.203851][ T24] audit: type=1400 audit(1719576960.469:1123): avc: denied { map } for pid=2115 comm="syz.3.500" path="socket:[27201]" dev="sockfs" ino=27201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.230858][ T24] audit: type=1400 audit(1719576960.469:1124): avc: denied { read } for pid=2115 comm="syz.3.500" path="socket:[27201]" dev="sockfs" ino=27201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.245421][ T2108] device veth0_vlan entered promiscuous mode [ 122.263361][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.271962][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.279891][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.287788][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.295023][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.302824][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.312288][ T419] device bridge_slave_1 left promiscuous mode [ 122.318654][ T419] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.326014][ T419] device bridge_slave_0 left promiscuous mode [ 122.332411][ T419] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.339956][ T419] device veth1_macvtap left promiscuous mode [ 122.345763][ T419] device veth0_vlan left promiscuous mode [ 122.434223][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.442535][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.446593][ T1964] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 122.453073][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.467255][ T15] pl2303 1-1:0.140: required interrupt-in endpoint missing [ 122.475527][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.483742][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.493543][ T2108] device veth1_macvtap entered promiscuous mode [ 122.506972][ T15] pl2303 1-1:0.177: required endpoints missing [ 122.520387][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.529338][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.546984][ T15] pl2303 1-1:0.242: required endpoints missing [ 122.561031][ T15] usb 1-1: USB disconnect, device number 18 [ 122.612407][ T2122] incfs: ino conflict with backing FS 1 [ 122.755705][ T2125] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.762780][ T2125] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.770321][ T2125] device bridge_slave_0 entered promiscuous mode [ 122.779461][ T2125] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.786336][ T2125] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.793555][ T2125] device bridge_slave_1 entered promiscuous mode [ 122.836878][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.844090][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.846628][ T1964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.855226][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.871386][ T1964] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 122.873792][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.889259][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.896125][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.896652][ T1964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.914516][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.922642][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.926993][ T323] usb 3-1: USB disconnect, device number 20 [ 122.931336][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.939334][ T1964] usb 4-1: config 0 descriptor?? [ 122.945370][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.952423][ T24] audit: type=1400 audit(1719576961.239:1125): avc: denied { unmount } for pid=1702 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 122.955789][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.956663][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.990818][ T24] audit: type=1400 audit(1719576961.269:1126): avc: denied { rename } for pid=75 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.013499][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.024694][ T24] audit: type=1400 audit(1719576961.269:1127): avc: denied { unlink } for pid=75 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.049179][ T24] audit: type=1400 audit(1719576961.269:1128): avc: denied { create } for pid=75 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.110985][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.125722][ T2125] device veth0_vlan entered promiscuous mode [ 123.132271][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.140429][ T24] audit: type=1400 audit(1719576961.419:1129): avc: denied { execute } for pid=2134 comm="syz.2.506" path=2F6D656D66643AC0873A2A18C16BA7875BA06F383449AA4BA5D30B86CA3C7FFD368D7DD8F247B8EA65299086E39608E0FAB1D84EB257CB8D7D336C6D38A537C9202864656C6574656429 dev="tmpfs" ino=1218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.423145][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.430771][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.446569][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.461012][ T2125] device veth1_macvtap entered promiscuous mode [ 123.480932][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.494428][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.509774][ T1964] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 123.535601][ T1964] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0008/input/input5 [ 123.620837][ T1964] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 123.667257][ T419] device bridge_slave_1 left promiscuous mode [ 123.673692][ T419] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.681736][ T419] device bridge_slave_0 left promiscuous mode [ 123.688176][ T419] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.697281][ T419] device veth1_macvtap left promiscuous mode [ 123.703529][ T419] device veth0_vlan left promiscuous mode [ 123.722741][ T24] audit: type=1400 audit(1719576962.009:1130): avc: denied { bind } for pid=2115 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.784899][ T2146] SELinux: security_context_str_to_sid(root) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 123.974226][ T24] audit: type=1400 audit(1719576962.259:1131): avc: denied { create } for pid=2134 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.116746][ T2156] syz.0.511[2156] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.117127][ T2156] syz.0.511[2156] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.142124][ T2156] fuse: Bad value for 'user_id' [ 124.310087][ T15] usb 4-1: USB disconnect, device number 21 [ 124.467667][ T24] audit: type=1400 audit(1719576962.759:1132): avc: denied { mount } for pid=2157 comm="syz.4.512" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 124.490162][ T2159] incfs: ino conflict with backing FS 1 [ 124.716583][ T5] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 125.216663][ T390] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 125.224512][ T24] audit: type=1400 audit(1719576963.509:1133): avc: denied { unmount } for pid=2104 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 125.316537][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 125.326101][ T5] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 125.343102][ T2173] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.350178][ T2173] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.357451][ T2173] device bridge_slave_0 entered promiscuous mode [ 125.364262][ T2173] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.371234][ T2173] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.378658][ T2173] device bridge_slave_1 entered promiscuous mode [ 125.415489][ T2173] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.422361][ T2173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.429459][ T2173] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.436313][ T2173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.456314][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.463780][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.471344][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.482645][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.491005][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.496518][ T390] usb 1-1: Using ep0 maxpacket: 16 [ 125.497988][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.512629][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.521163][ T5] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 125.530511][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.537571][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.545302][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.553157][ T5] usb 3-1: Product: syz [ 125.557784][ T5] usb 3-1: Manufacturer: syz [ 125.579779][ T2173] device veth0_vlan entered promiscuous mode [ 125.587291][ T5] usb 3-1: SerialNumber: syz [ 125.592144][ T2173] device veth1_macvtap entered promiscuous mode [ 125.594522][ T5] usb 3-1: config 0 descriptor?? [ 125.605080][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.613422][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.621896][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.630346][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.640890][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.648479][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.655805][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.664155][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.672636][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.710561][ T390] usb 1-1: config 0 has an invalid interface number: 140 but max is 2 [ 125.725790][ T390] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 125.740715][ T390] usb 1-1: config 0 has an invalid interface number: 177 but max is 2 [ 125.749303][ T390] usb 1-1: config 0 has an invalid interface number: 242 but max is 2 [ 125.758116][ T390] usb 1-1: config 0 has no interface number 0 [ 125.765416][ T390] usb 1-1: config 0 has no interface number 1 [ 125.804899][ T390] usb 1-1: config 0 has no interface number 2 [ 125.811313][ T390] usb 1-1: config 0 interface 140 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 125.822228][ T390] usb 1-1: config 0 interface 140 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 32 [ 125.831980][ T390] usb 1-1: config 0 interface 140 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 511 [ 125.842323][ T390] usb 1-1: config 0 interface 140 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 125.853504][ T24] audit: type=1400 audit(1719576964.139:1134): avc: denied { connect } for pid=2160 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.857304][ T2178] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 125.887378][ T2178] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 125.896010][ T390] usb 1-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 125.907121][ T390] usb 1-1: config 0 interface 140 altsetting 9 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 125.911131][ T2178] F2FS-fs (loop1): invalid crc value [ 125.918344][ T390] usb 1-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 125.925505][ T2178] F2FS-fs (loop1): Found nat_bits in checkpoint [ 125.933896][ T390] usb 1-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 125.950325][ T390] usb 1-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 125.960945][ T390] usb 1-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x1A, skipping [ 125.965966][ T2178] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 125.971685][ T390] usb 1-1: config 0 interface 177 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 125.979227][ T2161] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 125.991436][ T2178] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 126.002965][ T2161] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #16: comm syz.2.513: invalid indirect mapped block 83886080 (level 1) [ 126.013079][ T390] usb 1-1: config 0 interface 242 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 126.022097][ T2161] EXT4-fs (loop2): Remounting filesystem read-only [ 126.030729][ T390] usb 1-1: config 0 interface 140 has no altsetting 0 [ 126.036894][ T2161] EXT4-fs (loop2): 1 orphan inode deleted [ 126.043007][ T390] usb 1-1: config 0 interface 177 has no altsetting 0 [ 126.048702][ T2161] EXT4-fs (loop2): 1 truncate cleaned up [ 126.055091][ T390] usb 1-1: config 0 interface 242 has no altsetting 0 [ 126.061405][ T2161] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000000000,block_validity,quota, [ 126.207209][ T7] device bridge_slave_1 left promiscuous mode [ 126.213268][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.226937][ T7] device bridge_slave_0 left promiscuous mode [ 126.233622][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.245571][ T7] device veth1_macvtap left promiscuous mode [ 126.251569][ T7] device veth0_vlan left promiscuous mode [ 126.463092][ T390] usb 1-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 126.472525][ T390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.487727][ T390] usb 1-1: Product: syz [ 126.491765][ T390] usb 1-1: Manufacturer: syz [ 126.495416][ T2200] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 126.496166][ T390] usb 1-1: SerialNumber: syz [ 126.506002][ T2200] ext4 filesystem being mounted at /root/syzkaller.JnStWH/9/bus supports timestamps until 2038 (0x7fffffff) [ 126.513760][ T390] usb 1-1: config 0 descriptor?? [ 126.536338][ T2125] attempt to access beyond end of device [ 126.536338][ T2125] loop1: rw=2051, want=53248, limit=40427 [ 126.548099][ T388] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 126.555783][ T2125] attempt to access beyond end of device [ 126.555783][ T2125] loop1: rw=2051, want=77824, limit=40427 [ 126.567683][ T2125] attempt to access beyond end of device [ 126.567683][ T2125] loop1: rw=2051, want=86016, limit=40427 [ 126.576406][ T2166] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 126.582917][ T2125] F2FS-fs (loop1): Issue discard(6144, 6144, 512) failed, ret: -5 [ 126.585577][ T2125] F2FS-fs (loop1): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 126.585871][ T2166] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 126.593520][ T2125] F2FS-fs (loop1): Issue discard(10240, 10240, 512) failed, ret: -5 [ 126.956736][ T388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.975522][ T388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.985279][ T388] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.998103][ T388] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.010066][ T388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.019015][ T388] usb 5-1: config 0 descriptor?? [ 127.106812][ T390] pl2303 1-1:0.140: required interrupt-in endpoint missing [ 127.146802][ T390] pl2303 1-1:0.177: required endpoints missing [ 127.186860][ T390] pl2303 1-1:0.242: required endpoints missing [ 127.193813][ T390] usb 1-1: USB disconnect, device number 19 [ 127.456822][ T5] snd-usb-audio: probe of 3-1:0.0 failed with error -12 [ 127.467219][ T5] usb 3-1: USB disconnect, device number 21 [ 127.487587][ T388] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 127.494868][ T388] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 127.502650][ T388] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 127.512730][ T388] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 127.606965][ T2219] incfs: ino conflict with backing FS 1 [ 127.997977][ T2223] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 128.006828][ T2223] ext4 filesystem being mounted at /root/syzkaller.jthFab/6/bus supports timestamps until 2038 (0x7fffffff) [ 128.195823][ T2232] SELinux: security_context_str_to_sid(root) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 128.460952][ T2243] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.468044][ T2243] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.475158][ T2243] device bridge_slave_0 entered promiscuous mode [ 128.482229][ T2243] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.490241][ T2247] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.493010][ T2243] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.509270][ T2243] device bridge_slave_1 entered promiscuous mode [ 128.509703][ T2247] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.565235][ T2243] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.572125][ T2243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.579211][ T2243] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.585969][ T2243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.621079][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.628552][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.635645][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.646115][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.654144][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.661010][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.680488][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.688873][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.695718][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.728196][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.736435][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.751966][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.766799][ T2243] device veth0_vlan entered promiscuous mode [ 128.773816][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.782951][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.790659][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.804962][ T2243] device veth1_macvtap entered promiscuous mode [ 128.812919][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.831477][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.841156][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.857890][ T7] device bridge_slave_1 left promiscuous mode [ 128.864119][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.871814][ T7] device bridge_slave_0 left promiscuous mode [ 128.877986][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.885883][ T7] device veth1_macvtap left promiscuous mode [ 128.904026][ T7] device veth0_vlan left promiscuous mode [ 128.941526][ T2253] EXT4-fs (loop1): filesystem is read-only [ 128.962171][ T2253] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 128.974377][ T2253] EXT4-fs (loop1): filesystem is read-only [ 128.980502][ T2253] EXT4-fs (loop1): orphan cleanup on readonly fs [ 128.987582][ T2253] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.537: bg 0: block 64: padding at end of block bitmap is not set [ 129.002412][ T2253] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 129.011749][ T2253] EXT4-fs (loop1): 1 orphan inode deleted [ 129.017799][ T2253] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,data_err=ignore,delalloc,nogrpid,nombcache,stripe=0x000000000000a797,data_err=abort,grpid,noauto_da_alloc,,errors=continue [ 129.066637][ T2253] xt_TCPMSS: Only works on TCP SYN packets [ 129.078663][ T24] audit: type=1400 audit(1719576967.369:1135): avc: denied { map } for pid=2252 comm="syz.1.537" path="socket:[28709]" dev="sockfs" ino=28709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.103078][ T24] audit: type=1400 audit(1719576967.369:1136): avc: denied { read } for pid=2252 comm="syz.1.537" path="socket:[28709]" dev="sockfs" ino=28709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.127390][ T2257] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.153786][ T2257] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 129.168715][ T2257] EXT4-fs (loop2): 1 truncate cleaned up [ 129.174250][ T2257] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,block_validity,sysvgroups,,errors=continue [ 129.429077][ T2266] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.453970][ T2266] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.486510][ T1964] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 129.729316][ T323] usb 5-1: USB disconnect, device number 19 [ 129.811257][ T1964] usb 2-1: Using ep0 maxpacket: 16 [ 130.116567][ T1964] usb 2-1: config 0 has an invalid interface number: 140 but max is 2 [ 130.124678][ T1964] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 130.133537][ T1964] usb 2-1: config 0 has an invalid interface number: 177 but max is 2 [ 130.142212][ T1964] usb 2-1: config 0 has an invalid interface number: 242 but max is 2 [ 130.150660][ T1964] usb 2-1: config 0 has no interface number 0 [ 130.157844][ T1964] usb 2-1: config 0 has no interface number 1 [ 130.163768][ T1964] usb 2-1: config 0 has no interface number 2 [ 130.169734][ T1964] usb 2-1: config 0 interface 140 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 130.180451][ T1964] usb 2-1: config 0 interface 140 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 32 [ 130.190204][ T1964] usb 2-1: config 0 interface 140 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 511 [ 130.218223][ T1964] usb 2-1: config 0 interface 140 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 130.229604][ T1964] usb 2-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 130.240378][ T1964] usb 2-1: config 0 interface 140 altsetting 9 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 130.251442][ T1964] usb 2-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 130.262428][ T1964] usb 2-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 130.274926][ T1964] usb 2-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 130.288914][ T1964] usb 2-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x1A, skipping [ 130.299585][ T1964] usb 2-1: config 0 interface 177 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 130.310184][ T1964] usb 2-1: config 0 interface 242 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 130.321142][ T1964] usb 2-1: config 0 interface 140 has no altsetting 0 [ 130.327969][ T1964] usb 2-1: config 0 interface 177 has no altsetting 0 [ 130.334573][ T1964] usb 2-1: config 0 interface 242 has no altsetting 0 [ 130.352919][ T2278] SELinux: security_context_str_to_sid(root) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 130.516772][ T1964] usb 2-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 130.525830][ T1964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.527859][ T2287] incfs: ino conflict with backing FS 1 [ 130.534010][ T1964] usb 2-1: Product: syz [ 130.544880][ T1964] usb 2-1: Manufacturer: syz [ 130.549575][ T1964] usb 2-1: SerialNumber: syz [ 130.556351][ T1964] usb 2-1: config 0 descriptor?? [ 130.558521][ T2288] netlink: 64 bytes leftover after parsing attributes in process `syz.2.541'. [ 130.576580][ T2263] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 130.583645][ T2263] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 130.788582][ T2292] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 130.797464][ T2292] ext4 filesystem being mounted at /root/syzkaller.OMAdYC/6/bus supports timestamps until 2038 (0x7fffffff) [ 131.056949][ T1964] pl2303 2-1:0.140: required interrupt-in endpoint missing [ 131.097253][ T1964] pl2303 2-1:0.177: required endpoints missing [ 131.136887][ T1964] pl2303 2-1:0.242: required endpoints missing [ 131.144551][ T1964] usb 2-1: USB disconnect, device number 20 [ 131.429072][ T2304] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.435928][ T2304] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.444622][ T2307] incfs: ino conflict with backing FS 1 [ 131.450703][ T2304] device bridge_slave_0 entered promiscuous mode [ 131.463736][ T2304] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.473512][ T2304] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.481252][ T2304] device bridge_slave_1 entered promiscuous mode [ 131.516516][ T388] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 131.553654][ T2304] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.560550][ T2304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.567637][ T2304] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.574486][ T2304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.585701][ T2310] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 131.597384][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.605524][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.614315][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.621674][ T2310] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.646697][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.658158][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.665134][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.684240][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.695204][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.702078][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.709492][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.727882][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.735819][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.743914][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.752738][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.765489][ T2304] device veth0_vlan entered promiscuous mode [ 131.773703][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.783609][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.786584][ T388] usb 3-1: Using ep0 maxpacket: 16 [ 131.856828][ T2304] device veth1_macvtap entered promiscuous mode [ 131.877104][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.906601][ T388] usb 3-1: config 0 has an invalid interface number: 140 but max is 2 [ 131.916177][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.924856][ T388] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 131.933705][ T388] usb 3-1: config 0 has an invalid interface number: 177 but max is 2 [ 131.938195][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.951952][ T388] usb 3-1: config 0 has an invalid interface number: 242 but max is 2 [ 131.961086][ T2314] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 131.969895][ T2314] ext4 filesystem being mounted at /root/syzkaller.OMAdYC/7/bus supports timestamps until 2038 (0x7fffffff) [ 131.974037][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.981464][ T388] usb 3-1: config 0 has no interface number 0 [ 132.011191][ T388] usb 3-1: config 0 has no interface number 1 [ 132.035174][ T388] usb 3-1: config 0 has no interface number 2 [ 132.044320][ T388] usb 3-1: config 0 interface 140 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 132.069451][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.084179][ T388] usb 3-1: config 0 interface 140 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 32 [ 132.107416][ T388] usb 3-1: config 0 interface 140 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 511 [ 132.127166][ T388] usb 3-1: config 0 interface 140 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 132.160013][ T388] usb 3-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 132.180763][ T388] usb 3-1: config 0 interface 140 altsetting 9 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 132.206571][ T388] usb 3-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 132.226528][ T388] usb 3-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 132.247126][ T388] usb 3-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 132.269585][ T388] usb 3-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x1A, skipping [ 132.290929][ T388] usb 3-1: config 0 interface 177 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 132.302731][ T388] usb 3-1: config 0 interface 242 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 132.326697][ T388] usb 3-1: config 0 interface 140 has no altsetting 0 [ 132.333342][ T388] usb 3-1: config 0 interface 177 has no altsetting 0 [ 132.342529][ T388] usb 3-1: config 0 interface 242 has no altsetting 0 [ 132.360229][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.369194][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.377815][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.386026][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.497125][ T7] device bridge_slave_1 left promiscuous mode [ 132.515324][ T388] usb 3-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 132.530584][ T388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.566484][ T388] usb 3-1: Product: syz [ 132.570498][ T388] usb 3-1: Manufacturer: syz [ 132.572591][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.575006][ T388] usb 3-1: SerialNumber: syz [ 132.579661][ T388] usb 3-1: config 0 descriptor?? [ 132.591280][ T7] device bridge_slave_0 left promiscuous mode [ 132.608100][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.626600][ T2301] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 132.636571][ T7] device veth1_macvtap left promiscuous mode [ 132.642576][ T2301] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 132.646538][ T7] device veth0_vlan left promiscuous mode [ 132.877377][ T321] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 132.893040][ T2338] syz.4.559[2338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.893097][ T2338] syz.4.559[2338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.895849][ T2329] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.922635][ T2329] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.930144][ T2329] device bridge_slave_0 entered promiscuous mode [ 132.938239][ T2329] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.945078][ T2329] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.952683][ T2329] device bridge_slave_1 entered promiscuous mode [ 133.020302][ T2329] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.027396][ T2329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.034464][ T2329] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.041245][ T2329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.064716][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.072617][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.080576][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.097592][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.105957][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.112830][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.120518][ T2342] incfs: ino conflict with backing FS 1 [ 133.126057][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.126897][ T388] pl2303 3-1:0.140: required interrupt-in endpoint missing [ 133.135246][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.148020][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.155542][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.156621][ T321] usb 2-1: Using ep0 maxpacket: 16 [ 133.167856][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.183782][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.192181][ T388] pl2303 3-1:0.177: required endpoints missing [ 133.202072][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.210968][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.218635][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.228237][ T2329] device veth0_vlan entered promiscuous mode [ 133.238161][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.247786][ T2329] device veth1_macvtap entered promiscuous mode [ 133.248042][ T388] pl2303 3-1:0.242: required endpoints missing [ 133.264052][ T388] usb 3-1: USB disconnect, device number 22 [ 133.272795][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.292719][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.366592][ T321] usb 2-1: config 0 has an invalid interface number: 140 but max is 2 [ 133.374648][ T321] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 133.383325][ T321] usb 2-1: config 0 has an invalid interface number: 177 but max is 2 [ 133.391383][ T321] usb 2-1: config 0 has an invalid interface number: 242 but max is 2 [ 133.394669][ T24] audit: type=1326 audit(1719576971.689:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cda2db29 code=0x7fc00000 [ 133.399496][ T321] usb 2-1: config 0 has no interface number 0 [ 133.424431][ T24] audit: type=1326 audit(1719576971.689:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39cda2db29 code=0x7fc00000 [ 133.436137][ T321] usb 2-1: config 0 has no interface number 1 [ 133.452958][ T2348] 9pnet: Insufficient options for proto=fd [ 133.476653][ T321] usb 2-1: config 0 has no interface number 2 [ 133.485637][ T2350] netlink: 64 bytes leftover after parsing attributes in process `syz.3.557'. [ 133.494629][ T321] usb 2-1: config 0 interface 140 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 133.505706][ T321] usb 2-1: config 0 interface 140 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 32 [ 133.515925][ T321] usb 2-1: config 0 interface 140 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 511 [ 133.526203][ T321] usb 2-1: config 0 interface 140 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 133.537217][ T321] usb 2-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 133.547954][ T321] usb 2-1: config 0 interface 140 altsetting 9 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 133.559101][ T321] usb 2-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 133.569894][ T321] usb 2-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 133.580523][ T321] usb 2-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 133.591302][ T321] usb 2-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x1A, skipping [ 133.602428][ T321] usb 2-1: config 0 interface 177 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 133.615637][ T321] usb 2-1: config 0 interface 242 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 133.627132][ T321] usb 2-1: config 0 interface 140 has no altsetting 0 [ 133.633797][ T321] usb 2-1: config 0 interface 177 has no altsetting 0 [ 133.641114][ T321] usb 2-1: config 0 interface 242 has no altsetting 0 [ 133.806570][ T321] usb 2-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 133.835391][ T321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.843554][ T321] usb 2-1: Product: syz [ 133.847696][ T321] usb 2-1: Manufacturer: syz [ 133.852201][ T321] usb 2-1: SerialNumber: syz [ 133.857491][ T321] usb 2-1: config 0 descriptor?? [ 133.876685][ T2330] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 133.883485][ T2330] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 133.891186][ T7] device bridge_slave_1 left promiscuous mode [ 133.897408][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.904702][ T7] device bridge_slave_0 left promiscuous mode [ 133.910998][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.918583][ T7] device veth1_macvtap left promiscuous mode [ 133.924498][ T7] device veth0_vlan left promiscuous mode [ 133.976600][ T323] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 134.049021][ T2354] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.055884][ T2354] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.063615][ T2354] device bridge_slave_0 entered promiscuous mode [ 134.071071][ T2354] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.077969][ T2354] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.085107][ T2354] device bridge_slave_1 entered promiscuous mode [ 134.118259][ T24] audit: type=1326 audit(1719576972.399:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cda2db29 code=0x7fc00000 [ 134.118319][ T2354] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.141730][ T24] audit: type=1326 audit(1719576972.399:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39cda2db29 code=0x7fc00000 [ 134.148286][ T2354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.148359][ T2354] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.148367][ T2354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.166160][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.201312][ T24] audit: type=1326 audit(1719576972.399:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cda2db29 code=0x7fc00000 [ 134.225133][ T24] audit: type=1326 audit(1719576972.399:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cda2db29 code=0x7fc00000 [ 134.248963][ T24] audit: type=1326 audit(1719576972.399:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cda2db29 code=0x7fc00000 [ 134.249585][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.272335][ T323] usb 3-1: Using ep0 maxpacket: 16 [ 134.279274][ T24] audit: type=1326 audit(1719576972.399:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cda2db29 code=0x7fc00000 [ 134.307344][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.340471][ T24] audit: type=1326 audit(1719576972.399:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cda2db29 code=0x7fc00000 [ 134.344574][ T2362] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.367653][ T24] audit: type=1326 audit(1719576972.399:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cda2db29 code=0x7fc00000 [ 134.378573][ T2362] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 134.410899][ T321] pl2303 2-1:0.140: required interrupt-in endpoint missing [ 134.417983][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.430043][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.431800][ T2362] EXT4-fs (loop3): 1 truncate cleaned up [ 134.440214][ T24] audit: type=1326 audit(1719576972.399:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cda2db29 code=0x7fc00000 [ 134.446701][ T2362] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,block_validity,sysvgroups,,errors=continue [ 134.469127][ T323] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 134.481247][ T321] pl2303 2-1:0.177: required endpoints missing [ 134.493374][ T323] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 134.493385][ T323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.516924][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.524905][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.531889][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.544386][ T24] audit: type=1326 audit(1719576972.399:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cda2db29 code=0x7fc00000 [ 134.566011][ T323] usb 3-1: config 0 descriptor?? [ 134.567988][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.584013][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.590976][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.600129][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.608002][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.618841][ T321] pl2303 2-1:0.242: required endpoints missing [ 134.630136][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.638073][ T321] usb 2-1: USB disconnect, device number 21 [ 134.654382][ T2367] EXT4-fs (loop0): filesystem is read-only [ 134.661965][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.675020][ T2367] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 134.683236][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.694827][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.706067][ T2354] device veth0_vlan entered promiscuous mode [ 134.717299][ T2367] EXT4-fs (loop0): filesystem is read-only [ 134.726196][ T2367] EXT4-fs (loop0): orphan cleanup on readonly fs [ 134.737377][ T2206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.747990][ T2354] device veth1_macvtap entered promiscuous mode [ 134.757657][ T2367] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.568: bg 0: block 64: padding at end of block bitmap is not set [ 134.776927][ T2367] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 134.792175][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.798258][ T2367] EXT4-fs (loop0): 1 orphan inode deleted [ 134.800982][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.805628][ T2367] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,data_err=ignore,delalloc,nogrpid,nombcache,stripe=0x000000000000a797,data_err=abort,grpid,noauto_da_alloc,,errors=continue [ 134.855577][ T2374] syz.4.565 uses obsolete (PF_INET,SOCK_PACKET) [ 134.872813][ T2367] xt_TCPMSS: Only works on TCP SYN packets [ 135.006554][ T323] usbhid 3-1:0.0: can't add hid device: -71 [ 135.012437][ T323] usbhid: probe of 3-1:0.0 failed with error -71 [ 135.029012][ T2377] exFAT-fs (loop4): invalid fs_name [ 135.034143][ T2377] exFAT-fs (loop4): failed to read boot sector [ 135.093100][ T2383] syz.0.569[2383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.093495][ T2383] syz.0.569[2383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.119314][ T2383] fuse: Bad value for 'user_id' [ 135.247686][ T323] usb 3-1: USB disconnect, device number 23 [ 135.249979][ T2377] exFAT-fs (loop4): failed to recognize exfat type [ 135.830459][ T7] device bridge_slave_1 left promiscuous mode [ 135.841176][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.864965][ T7] device bridge_slave_0 left promiscuous mode [ 135.871916][ T2398] SELinux: security_context_str_to_sid(root) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 136.152500][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.164951][ T7] device veth1_macvtap left promiscuous mode [ 136.171182][ T7] device veth0_vlan left promiscuous mode [ 136.582680][ T2416] 9pnet: Insufficient options for proto=fd [ 136.686502][ T2206] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 136.698039][ T2422] incfs: ino conflict with backing FS 1 [ 136.747364][ T323] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 136.886538][ T5] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 137.046776][ T2206] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 137.057509][ T2206] usb 5-1: config 1 interface 0 has no altsetting 0 [ 137.126518][ T5] usb 3-1: Using ep0 maxpacket: 8 [ 137.136637][ T323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.147417][ T323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.157076][ T323] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 137.165953][ T323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.174572][ T323] usb 1-1: config 0 descriptor?? [ 137.216625][ T2206] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40 [ 137.225745][ T2206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.233637][ T2206] usb 5-1: Product: ᘰ [ 137.237772][ T2206] usb 5-1: Manufacturer: 嫅Ø괃쮞ⴂ썫舠帥涱ན⺖紐梺聄詯쵚 [ 137.246260][ T2206] usb 5-1: SerialNumber: В [ 137.250735][ T5] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 137.260279][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.269404][ T5] usb 3-1: config 0 descriptor?? [ 137.284631][ T2424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=2424 comm=syz.3.583 [ 137.297139][ T2406] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 137.486675][ T2431] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.493767][ T2431] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.501198][ T2431] device bridge_slave_0 entered promiscuous mode [ 137.509934][ T2431] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.517020][ T2431] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.524376][ T2431] device bridge_slave_1 entered promiscuous mode [ 137.554482][ T2431] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.561340][ T2431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.568443][ T2431] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.575357][ T2431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.583920][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.591396][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.606591][ T388] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 137.615310][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.623055][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.636764][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.645012][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.654054][ T323] hid-multitouch 0003:0EEF:72D0.000A: unbalanced delimiter at end of report description [ 137.664325][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.671178][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.678398][ T323] hid-multitouch: probe of 0003:0EEF:72D0.000A failed with error -22 [ 137.687155][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.695319][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.703344][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.710189][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.717438][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.725245][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.733032][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.741058][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.756571][ T2206] usbhid 5-1:1.0: can't add hid device: -71 [ 137.756761][ T2431] device veth0_vlan entered promiscuous mode [ 137.762469][ T2206] usbhid: probe of 5-1:1.0 failed with error -71 [ 137.768797][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.774448][ T5] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 137.783938][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.794385][ T2206] usb 5-1: USB disconnect, device number 20 [ 137.805257][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.806534][ T5] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 137.813992][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.838797][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.846094][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.846593][ T388] usb 4-1: Using ep0 maxpacket: 16 [ 137.860349][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.869153][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.880417][ T2431] device veth1_macvtap entered promiscuous mode [ 137.890400][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 137.898172][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.906317][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.906337][ T306] usb 1-1: USB disconnect, device number 20 [ 137.924721][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.933652][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.199292][ T419] device bridge_slave_1 left promiscuous mode [ 138.212391][ T419] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.254890][ T388] usb 4-1: config 0 has an invalid interface number: 140 but max is 2 [ 138.263120][ T388] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 138.263232][ T419] device bridge_slave_0 left promiscuous mode [ 138.271632][ T388] usb 4-1: config 0 has an invalid interface number: 177 but max is 2 [ 138.271649][ T388] usb 4-1: config 0 has an invalid interface number: 242 but max is 2 [ 138.293829][ T388] usb 4-1: config 0 has no interface number 0 [ 138.296637][ T419] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.299821][ T388] usb 4-1: config 0 has no interface number 1 [ 138.313039][ T388] usb 4-1: config 0 has no interface number 2 [ 138.319215][ T388] usb 4-1: config 0 interface 140 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 138.319487][ T419] device veth1_macvtap left promiscuous mode [ 138.329910][ T388] usb 4-1: config 0 interface 140 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 32 [ 138.329928][ T388] usb 4-1: config 0 interface 140 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 511 [ 138.338569][ T419] device veth0_vlan left promiscuous mode [ 138.345574][ T388] usb 4-1: config 0 interface 140 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 138.372487][ T388] usb 4-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 138.382966][ T388] usb 4-1: config 0 interface 140 altsetting 9 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 138.394071][ T388] usb 4-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 138.405250][ T388] usb 4-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 138.415804][ T388] usb 4-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 138.426438][ T388] usb 4-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x1A, skipping [ 138.437070][ T388] usb 4-1: config 0 interface 177 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 138.447678][ T388] usb 4-1: config 0 interface 242 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 138.458397][ T388] usb 4-1: config 0 interface 140 has no altsetting 0 [ 138.464984][ T388] usb 4-1: config 0 interface 177 has no altsetting 0 [ 138.471645][ T388] usb 4-1: config 0 interface 242 has no altsetting 0 [ 138.636818][ T388] usb 4-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 138.646203][ T388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.654139][ T388] usb 4-1: Product: syz [ 138.658140][ T388] usb 4-1: Manufacturer: syz [ 138.662496][ T388] usb 4-1: SerialNumber: syz [ 138.670655][ T388] usb 4-1: config 0 descriptor?? [ 138.686572][ T2428] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 138.693467][ T2428] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 138.746498][ T15] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 138.986514][ T15] usb 5-1: Using ep0 maxpacket: 16 [ 139.076534][ T306] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 139.166918][ T388] pl2303 4-1:0.140: required interrupt-in endpoint missing [ 139.186634][ T15] usb 5-1: config 0 has an invalid interface number: 140 but max is 2 [ 139.194777][ T15] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 139.203602][ T15] usb 5-1: config 0 has an invalid interface number: 177 but max is 2 [ 139.211615][ T15] usb 5-1: config 0 has an invalid interface number: 242 but max is 2 [ 139.219874][ T388] pl2303 4-1:0.177: required endpoints missing [ 139.226044][ T15] usb 5-1: config 0 has no interface number 0 [ 139.231945][ T15] usb 5-1: config 0 has no interface number 1 [ 139.237976][ T15] usb 5-1: config 0 has no interface number 2 [ 139.243821][ T15] usb 5-1: config 0 interface 140 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 139.254525][ T15] usb 5-1: config 0 interface 140 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 32 [ 139.264850][ T388] pl2303 4-1:0.242: required endpoints missing [ 139.270929][ T15] usb 5-1: config 0 interface 140 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 511 [ 139.281895][ T388] usb 4-1: USB disconnect, device number 22 [ 139.290176][ T15] usb 5-1: config 0 interface 140 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 139.301130][ T15] usb 5-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 139.311603][ T15] usb 5-1: config 0 interface 140 altsetting 9 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 139.322499][ T306] usb 2-1: Using ep0 maxpacket: 16 [ 139.327467][ T15] usb 5-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 139.338093][ T15] usb 5-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 139.349083][ T15] usb 5-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 139.359949][ T15] usb 5-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x1A, skipping [ 139.370685][ T15] usb 5-1: config 0 interface 177 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 139.381336][ T15] usb 5-1: config 0 interface 242 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 139.392058][ T15] usb 5-1: config 0 interface 140 has no altsetting 0 [ 139.398983][ T15] usb 5-1: config 0 interface 177 has no altsetting 0 [ 139.405650][ T15] usb 5-1: config 0 interface 242 has no altsetting 0 [ 139.446607][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.457615][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.465797][ T2420] IPv4: Oversized IP packet from 127.202.26.0 [ 139.467692][ T306] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 139.486216][ T306] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 139.674773][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.683574][ T306] usb 2-1: config 0 descriptor?? [ 139.746651][ T15] usb 5-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 139.755652][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.763510][ T15] usb 5-1: Product: syz [ 139.767446][ T15] usb 5-1: Manufacturer: syz [ 139.771935][ T15] usb 5-1: SerialNumber: syz [ 139.777010][ T15] usb 5-1: config 0 descriptor?? [ 139.795999][ T24] kauditd_printk_skb: 176 callbacks suppressed [ 139.796010][ T24] audit: type=1326 audit(1719576978.079:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17763c0b29 code=0x7fc00000 [ 139.802237][ T2442] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.825730][ T24] audit: type=1326 audit(1719576978.079:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17763c0b29 code=0x7fc00000 [ 139.833322][ T2439] udc-core: couldn't find an available UDC or it's busy [ 139.855411][ T2442] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.862239][ T2457] 9pnet: Insufficient options for proto=fd [ 139.869165][ T2439] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 140.026568][ T306] usbhid 2-1:0.0: can't add hid device: -71 [ 140.032425][ T306] usbhid: probe of 2-1:0.0 failed with error -71 [ 140.040071][ T306] usb 2-1: USB disconnect, device number 22 [ 140.106724][ T5] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 140.116934][ T5] asix: probe of 3-1:0.0 failed with error -71 [ 140.123922][ T5] usb 3-1: USB disconnect, device number 24 [ 140.221687][ T2459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=2459 comm=syz.0.594 [ 140.257309][ T24] audit: type=1400 audit(1719576978.549:1327): avc: denied { create } for pid=2462 comm="syz.0.596" dev="anon_inodefs" ino=29436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 140.271165][ T2463] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 140.279455][ T24] audit: type=1400 audit(1719576978.549:1328): avc: denied { ioctl } for pid=2462 comm="syz.0.596" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=29436 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 140.298489][ T2463] 9pnet: Insufficient options for proto=fd [ 140.358384][ T15] pl2303 5-1:0.140: required interrupt-in endpoint missing [ 140.406959][ T15] pl2303 5-1:0.177: required endpoints missing [ 140.448528][ T15] pl2303 5-1:0.242: required endpoints missing [ 140.463273][ T15] usb 5-1: USB disconnect, device number 21 [ 140.507394][ T2470] incfs: ino conflict with backing FS 1 [ 140.530104][ T24] audit: type=1326 audit(1719576978.819:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17763c0b29 code=0x7fc00000 [ 140.553889][ T24] audit: type=1326 audit(1719576978.819:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f17763c0b29 code=0x7fc00000 [ 140.577361][ T24] audit: type=1326 audit(1719576978.819:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17763c0b29 code=0x7fc00000 [ 140.602410][ T24] audit: type=1326 audit(1719576978.819:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17763c0b29 code=0x7fc00000 [ 140.626249][ T24] audit: type=1326 audit(1719576978.819:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17763c0b29 code=0x7fc00000 [ 140.669329][ T24] audit: type=1326 audit(1719576978.819:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz.3.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17763c0b29 code=0x7fc00000 [ 140.726542][ T323] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 140.966653][ T2206] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 141.116660][ T323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.135657][ T323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.146594][ T323] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 141.155930][ T323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.188391][ T323] usb 2-1: config 0 descriptor?? [ 141.326754][ T2206] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 141.345587][ T2206] usb 3-1: config 1 interface 0 has no altsetting 0 [ 141.516733][ T2206] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40 [ 141.530834][ T2206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.571109][ T2206] usb 3-1: Product: ᘰ [ 141.575105][ T2206] usb 3-1: Manufacturer: 嫅Ø괃쮞ⴂ썫舠帥涱ན⺖紐梺聄詯쵚 [ 141.584156][ T2206] usb 3-1: SerialNumber: В [ 141.616574][ T2472] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 141.671179][ T2487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=2487 comm=syz.3.606 [ 141.726255][ T2485] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.758497][ T2485] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.765767][ T2485] device bridge_slave_0 entered promiscuous mode [ 141.799566][ T2485] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.808871][ T2485] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.819146][ T2485] device bridge_slave_1 entered promiscuous mode [ 141.867795][ T2494] syz.4.608 (pid 2494) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 141.908668][ T2485] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.915566][ T2485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.922673][ T2485] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.929563][ T2485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.959713][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.967987][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.975544][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.011778][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.023774][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.030918][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.039251][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.046560][ T20] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 142.055999][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.062899][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.070693][ T2497] EXT4-fs (loop4): filesystem is read-only [ 142.078152][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.086236][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.087207][ T2497] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 142.093955][ T2206] usbhid 3-1:1.0: can't add hid device: -71 [ 142.121818][ T2485] device veth0_vlan entered promiscuous mode [ 142.126026][ T2497] EXT4-fs (loop4): filesystem is read-only [ 142.133366][ T2497] EXT4-fs (loop4): orphan cleanup on readonly fs [ 142.140205][ T2497] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.609: bg 0: block 64: padding at end of block bitmap is not set [ 142.152486][ T2485] device veth1_macvtap entered promiscuous mode [ 142.154654][ T2497] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 142.160737][ T2206] usbhid: probe of 3-1:1.0 failed with error -71 [ 142.169348][ T2497] EXT4-fs (loop4): 1 orphan inode deleted [ 142.182564][ T2206] usb 3-1: USB disconnect, device number 25 [ 142.191374][ T2497] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,data_err=ignore,delalloc,nogrpid,nombcache,stripe=0x000000000000a797,data_err=abort,grpid,noauto_da_alloc,,errors=continue [ 142.218911][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.227526][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.235358][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.242871][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.252167][ T2497] xt_TCPMSS: Only works on TCP SYN packets [ 142.258385][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.283026][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.291797][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.786804][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.798962][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.810734][ T20] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 142.822324][ T2511] 9pnet: Insufficient options for proto=fd [ 142.833845][ T7] device bridge_slave_1 left promiscuous mode [ 142.837696][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.840974][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.859135][ T20] usb 4-1: config 0 descriptor?? [ 142.867006][ T7] device bridge_slave_0 left promiscuous mode [ 142.873481][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.881733][ T7] device veth1_macvtap left promiscuous mode [ 142.887732][ T7] device veth0_vlan left promiscuous mode [ 143.086548][ T323] usbhid 2-1:0.0: can't add hid device: -71 [ 143.092518][ T323] usbhid: probe of 2-1:0.0 failed with error -71 [ 143.103790][ T323] usb 2-1: USB disconnect, device number 23 [ 143.125261][ T2515] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.132632][ T2515] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.139917][ T2515] device bridge_slave_0 entered promiscuous mode [ 143.154572][ T2515] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.163472][ T2515] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.171048][ T2515] device bridge_slave_1 entered promiscuous mode [ 143.230558][ T2515] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.237531][ T2515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.244616][ T2515] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.251516][ T2515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.278264][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.285965][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.293750][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.313924][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.322113][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.328978][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.337008][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.345015][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.351875][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.359141][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.547668][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.584682][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.593218][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.601347][ T20] usbhid 4-1:0.0: can't add hid device: -71 [ 143.608302][ T20] usbhid: probe of 4-1:0.0 failed with error -71 [ 143.611885][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.618165][ T20] usb 4-1: USB disconnect, device number 23 [ 143.623680][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.637832][ T2515] device veth0_vlan entered promiscuous mode [ 143.655053][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.662797][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.674543][ T2515] device veth1_macvtap entered promiscuous mode [ 143.681544][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.689928][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.696626][ T306] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 143.697899][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.766426][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.774641][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.783618][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.791711][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.976387][ T2540] 9pnet: Insufficient options for proto=fd [ 144.092357][ T306] usb 1-1: Using ep0 maxpacket: 16 [ 144.129172][ T2542] EXT4-fs (loop4): filesystem is read-only [ 144.135258][ T2542] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 144.147177][ T2542] EXT4-fs (loop4): filesystem is read-only [ 144.152811][ T2542] EXT4-fs (loop4): orphan cleanup on readonly fs [ 144.160298][ T2542] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.620: bg 0: block 64: padding at end of block bitmap is not set [ 144.174685][ T2542] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 144.183701][ T2542] EXT4-fs (loop4): 1 orphan inode deleted [ 144.189502][ T2542] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,data_err=ignore,delalloc,nogrpid,nombcache,stripe=0x000000000000a797,data_err=abort,grpid,noauto_da_alloc,,errors=continue [ 144.210941][ T7] device bridge_slave_1 left promiscuous mode [ 144.220687][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.228401][ T7] device bridge_slave_0 left promiscuous mode [ 144.234599][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.245620][ T7] device veth1_macvtap left promiscuous mode [ 144.251650][ T7] device veth0_vlan left promiscuous mode [ 144.300816][ T2548] incfs: ino conflict with backing FS 1 [ 144.306703][ T306] usb 1-1: config 0 has an invalid interface number: 140 but max is 2 [ 144.314741][ T306] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 144.323823][ T306] usb 1-1: config 0 has an invalid interface number: 177 but max is 2 [ 144.332022][ T306] usb 1-1: config 0 has an invalid interface number: 242 but max is 2 [ 144.340148][ T306] usb 1-1: config 0 has no interface number 0 [ 144.346015][ T306] usb 1-1: config 0 has no interface number 1 [ 144.354844][ T306] usb 1-1: config 0 has no interface number 2 [ 144.360817][ T306] usb 1-1: config 0 interface 140 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 144.371485][ T306] usb 1-1: config 0 interface 140 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 32 [ 144.381456][ T306] usb 1-1: config 0 interface 140 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 511 [ 144.391405][ T306] usb 1-1: config 0 interface 140 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 144.402311][ T306] usb 1-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 144.412769][ T306] usb 1-1: config 0 interface 140 altsetting 9 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 144.423767][ T306] usb 1-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 144.434325][ T306] usb 1-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 144.444693][ T306] usb 1-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 144.455219][ T306] usb 1-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x1A, skipping [ 144.465919][ T306] usb 1-1: config 0 interface 177 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 144.476482][ T306] usb 1-1: config 0 interface 242 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 144.497394][ T306] usb 1-1: config 0 interface 140 has no altsetting 0 [ 144.504022][ T306] usb 1-1: config 0 interface 177 has no altsetting 0 [ 144.510893][ T306] usb 1-1: config 0 interface 242 has no altsetting 0 [ 144.546618][ T20] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 144.795453][ T2554] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.802764][ T2554] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.814322][ T2554] device bridge_slave_0 entered promiscuous mode [ 144.825609][ T2554] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.833864][ T2554] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.844409][ T2554] device bridge_slave_1 entered promiscuous mode [ 144.920800][ T306] usb 1-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 144.929719][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.938353][ T306] usb 1-1: Product: syz [ 144.942329][ T306] usb 1-1: Manufacturer: syz [ 144.946763][ T20] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 144.946860][ T306] usb 1-1: SerialNumber: syz [ 144.962731][ T20] usb 4-1: config 1 interface 0 has no altsetting 0 [ 144.965720][ T306] usb 1-1: config 0 descriptor?? [ 144.980373][ T2554] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.987275][ T2554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.994321][ T2554] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.001327][ T2554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.008513][ T2520] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.015927][ T2520] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.022985][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.030474][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.037867][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.047268][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.055240][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.062100][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.077184][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.085282][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.092139][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.099395][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.107937][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.123416][ T2554] device veth0_vlan entered promiscuous mode [ 145.129830][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.138672][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.146355][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.154326][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.165777][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.173645][ T20] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40 [ 145.182783][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.184636][ T2554] device veth1_macvtap entered promiscuous mode [ 145.190966][ T20] usb 4-1: Product: ᘰ [ 145.200873][ T20] usb 4-1: Manufacturer: 嫅Ø괃쮞ⴂ썫舠帥涱ན⺖紐梺聄詯쵚 [ 145.201721][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.210640][ T20] usb 4-1: SerialNumber: В [ 145.226119][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.236693][ T2546] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 145.477720][ T306] pl2303 1-1:0.140: required interrupt-in endpoint missing [ 145.485441][ T2567] incfs: ino conflict with backing FS 1 [ 145.546186][ T306] pl2303 1-1:0.177: required endpoints missing [ 145.556586][ T1964] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 145.746752][ T20] usbhid 4-1:1.0: can't add hid device: -71 [ 145.753266][ T20] usbhid: probe of 4-1:1.0 failed with error -71 [ 145.788042][ T306] pl2303 1-1:0.242: required endpoints missing [ 145.795114][ T20] usb 4-1: USB disconnect, device number 24 [ 145.795877][ T306] usb 1-1: USB disconnect, device number 21 [ 145.816585][ T1964] usb 5-1: Using ep0 maxpacket: 16 [ 145.837451][ T2573] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.844374][ T2573] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.851881][ T2573] device bridge_slave_0 entered promiscuous mode [ 145.861625][ T2573] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.868526][ T2573] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.875639][ T2573] device bridge_slave_1 entered promiscuous mode [ 145.912379][ T2573] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.919347][ T2573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.926399][ T2573] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.933226][ T2573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.946790][ T1964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.953481][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.957938][ T1964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.978769][ T1964] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 145.991752][ T1964] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 146.001067][ T2579] incfs: ino conflict with backing FS 1 [ 146.006990][ T1964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.021326][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.025778][ T1964] usb 5-1: config 0 descriptor?? [ 146.033148][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.060981][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.070089][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.076972][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.084233][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.092552][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.099400][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.113585][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.121476][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.134877][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.147519][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.155309][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.161719][ T24] kauditd_printk_skb: 207 callbacks suppressed [ 146.161731][ T24] audit: type=1326 audit(1719576984.449:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2582 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17763c0b29 code=0x7fc00000 [ 146.163008][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.168749][ T24] audit: type=1326 audit(1719576984.449:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2582 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17763c0b29 code=0x7fc00000 [ 146.193670][ T2573] device veth0_vlan entered promiscuous mode [ 146.212660][ T2584] 9pnet: Insufficient options for proto=fd [ 146.229576][ T2573] device veth1_macvtap entered promiscuous mode [ 146.260357][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.275919][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.284955][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.354775][ T2586] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.361758][ T2586] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.369327][ T2586] device bridge_slave_0 entered promiscuous mode [ 146.377731][ T2591] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 146.379146][ T2586] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.396205][ T1964] usbhid 5-1:0.0: can't add hid device: -71 [ 146.401964][ T1964] usbhid: probe of 5-1:0.0 failed with error -71 [ 146.408082][ T2586] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.409218][ T1964] usb 5-1: USB disconnect, device number 22 [ 146.417762][ T2586] device bridge_slave_1 entered promiscuous mode [ 146.422648][ T2591] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.484283][ T2586] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.491205][ T2586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.498357][ T2586] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.505108][ T2586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.524439][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.531984][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.539762][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.557781][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.565957][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.572933][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.580887][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.589036][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.595721][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.603120][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.610974][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.620303][ T7] device bridge_slave_1 left promiscuous mode [ 146.626293][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.633638][ T7] device bridge_slave_0 left promiscuous mode [ 146.639735][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.648254][ T7] device veth1_macvtap left promiscuous mode [ 146.654102][ T7] device veth0_vlan left promiscuous mode [ 146.656662][ T25] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 146.896167][ T24] audit: type=1326 audit(1719576985.179:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2582 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17763c0b29 code=0x7fc00000 [ 146.936725][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.945171][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.960655][ T2586] device veth0_vlan entered promiscuous mode [ 146.968893][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.180010][ T2607] syz.3.643[2607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.180086][ T2607] syz.3.643[2607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.193041][ T2607] fuse: Bad value for 'user_id' [ 147.256720][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.325326][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.340945][ T25] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 147.352490][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.380601][ T25] usb 2-1: config 0 descriptor?? [ 147.380722][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.404898][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.412565][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.431137][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.439433][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.448582][ T2586] device veth1_macvtap entered promiscuous mode [ 147.468432][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.475875][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.484223][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.494470][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.502985][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.559066][ T2613] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.750053][ T2616] incfs: ino conflict with backing FS 1 [ 147.779692][ T306] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 148.056810][ T306] usb 3-1: Using ep0 maxpacket: 16 [ 148.084992][ T25] usb 2-1: language id specifier not provided by device, defaulting to English [ 148.129613][ T2623] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.137025][ T2623] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.144296][ T2623] device bridge_slave_0 entered promiscuous mode [ 148.151468][ T2623] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.158320][ T2623] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.165570][ T2623] device bridge_slave_1 entered promiscuous mode [ 148.200699][ T2623] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.207562][ T2623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.214617][ T2623] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.221711][ T2623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.241548][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.247265][ T24] audit: type=1326 audit(1719576986.529:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2629 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195d3d5b29 code=0x7fc00000 [ 148.266708][ T306] usb 3-1: config 0 has an invalid interface number: 140 but max is 2 [ 148.273371][ T24] audit: type=1326 audit(1719576986.529:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2629 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f195d3d5b29 code=0x7fc00000 [ 148.281135][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.303613][ T2631] 9pnet: Insufficient options for proto=fd [ 148.310610][ T306] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 148.324715][ T306] usb 3-1: config 0 has an invalid interface number: 177 but max is 2 [ 148.333028][ T306] usb 3-1: config 0 has an invalid interface number: 242 but max is 2 [ 148.341203][ T306] usb 3-1: config 0 has no interface number 0 [ 148.347103][ T306] usb 3-1: config 0 has no interface number 1 [ 148.353098][ T306] usb 3-1: config 0 has no interface number 2 [ 148.359183][ T306] usb 3-1: config 0 interface 140 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 148.370008][ T306] usb 3-1: config 0 interface 140 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 32 [ 148.380017][ T306] usb 3-1: config 0 interface 140 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 511 [ 148.390001][ T306] usb 3-1: config 0 interface 140 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 148.400728][ T306] usb 3-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 148.411179][ T306] usb 3-1: config 0 interface 140 altsetting 9 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 148.422078][ T306] usb 3-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 148.432646][ T306] usb 3-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 148.443218][ T306] usb 3-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 148.454010][ T306] usb 3-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x1A, skipping [ 148.465398][ T306] usb 3-1: config 0 interface 177 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 148.475957][ T306] usb 3-1: config 0 interface 242 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 148.486623][ T306] usb 3-1: config 0 interface 140 has no altsetting 0 [ 148.493209][ T306] usb 3-1: config 0 interface 177 has no altsetting 0 [ 148.499868][ T306] usb 3-1: config 0 interface 242 has no altsetting 0 [ 148.506834][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.518344][ T7] device bridge_slave_1 left promiscuous mode [ 148.524513][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.531945][ T7] device bridge_slave_0 left promiscuous mode [ 148.538358][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.546877][ T7] device bridge_slave_1 left promiscuous mode [ 148.552885][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.560146][ T7] device bridge_slave_0 left promiscuous mode [ 148.566160][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.574209][ T7] device veth1_macvtap left promiscuous mode [ 148.580252][ T7] device veth0_vlan left promiscuous mode [ 148.585954][ T7] device veth1_macvtap left promiscuous mode [ 148.592054][ T7] device veth0_vlan left promiscuous mode [ 148.596528][ T25] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #100: -71 [ 148.606348][ T25] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71 [ 148.614375][ T25] uclogic 0003:256C:006D.000B: failed probing pen v1 parameters: -71 [ 148.622627][ T25] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 148.630070][ T25] uclogic: probe of 0003:256C:006D.000B failed with error -71 [ 148.642388][ T25] usb 2-1: USB disconnect, device number 24 [ 148.666904][ T306] usb 3-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 148.685999][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.701345][ T306] usb 3-1: Product: syz [ 148.708226][ T306] usb 3-1: Manufacturer: syz [ 148.712701][ T306] usb 3-1: SerialNumber: syz [ 148.719022][ T306] usb 3-1: config 0 descriptor?? [ 148.727743][ T2633] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.741953][ T2633] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.803360][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.811598][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.818462][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.825587][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.833954][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.840900][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.857403][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.865264][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.881306][ T2623] device veth0_vlan entered promiscuous mode [ 148.888285][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.897019][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.905310][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.912977][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.936990][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.949282][ T2623] device veth1_macvtap entered promiscuous mode [ 148.960087][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.968826][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.979318][ T24] audit: type=1326 audit(1719576987.259:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2629 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195d3d5b29 code=0x7fc00000 [ 149.003291][ T24] audit: type=1326 audit(1719576987.259:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2629 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f195d3d5b29 code=0x7fc00000 [ 149.027555][ T24] audit: type=1326 audit(1719576987.259:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2629 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195d3d5b29 code=0x7fc00000 [ 149.028760][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.051044][ T24] audit: type=1326 audit(1719576987.259:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2629 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195d3d5b29 code=0x7fc00000 [ 149.082250][ T24] audit: type=1326 audit(1719576987.259:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2629 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195d3d5b29 code=0x7fc00000 [ 149.086312][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.198492][ T306] pl2303 3-1:0.140: required interrupt-in endpoint missing [ 149.245165][ T2647] incfs: ino conflict with backing FS 1 [ 149.247170][ T306] pl2303 3-1:0.177: required endpoints missing [ 149.296835][ T306] pl2303 3-1:0.242: required endpoints missing [ 149.311320][ T306] usb 3-1: USB disconnect, device number 26 [ 149.407621][ T5] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 149.427087][ T2652] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.433928][ T2652] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.441296][ T2652] device bridge_slave_0 entered promiscuous mode [ 149.448531][ T2652] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.455352][ T2652] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.465678][ T2652] device bridge_slave_1 entered promiscuous mode [ 149.472763][ T2657] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.513800][ T2652] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.520668][ T2652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.527820][ T2652] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.534654][ T2652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.557379][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.565159][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.574942][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.591127][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.599889][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.606769][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.615177][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.624009][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.630881][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.667312][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 149.687339][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.717314][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.335308][ T2668] incfs: ino conflict with backing FS 1 [ 150.342036][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.353093][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.379677][ T5] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.392882][ T5] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 150.403586][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.413835][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.422669][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.426087][ T5] usb 5-1: config 0 descriptor?? [ 150.435471][ T2652] device veth0_vlan entered promiscuous mode [ 150.450965][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.468907][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.487106][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.494541][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.496821][ T2673] 9pnet: Insufficient options for proto=fd [ 150.525007][ T2652] device veth1_macvtap entered promiscuous mode [ 150.535104][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.544698][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.553208][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.568590][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.577094][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.585260][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.593444][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.602003][ T7] device bridge_slave_1 left promiscuous mode [ 150.608208][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.615965][ T7] device bridge_slave_0 left promiscuous mode [ 150.622889][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.638059][ T7] device veth1_macvtap left promiscuous mode [ 150.643897][ T7] device veth0_vlan left promiscuous mode [ 150.749611][ T2680] incfs: ino conflict with backing FS 1 [ 150.776529][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 150.782403][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 150.798396][ T5] usb 5-1: USB disconnect, device number 23 [ 150.939794][ T2690] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.947867][ T2690] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.955032][ T2690] device bridge_slave_0 entered promiscuous mode [ 150.962317][ T2690] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.969395][ T2690] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.976742][ T2690] device bridge_slave_1 entered promiscuous mode [ 151.031686][ T2695] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.038732][ T2695] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.045927][ T2695] device bridge_slave_0 entered promiscuous mode [ 151.054109][ T2695] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.061355][ T2695] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.068783][ T2695] device bridge_slave_1 entered promiscuous mode [ 151.104965][ T2690] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.111970][ T2690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.119024][ T2690] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.125779][ T2690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.150928][ T2695] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.157815][ T2695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.164976][ T2695] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.166622][ T306] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 151.171894][ T2695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.202549][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.210738][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.220349][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.229250][ T390] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.236678][ T390] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.266291][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.278371][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.316981][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.324857][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.348077][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.356003][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.362878][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.378581][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.388500][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.395346][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.406293][ T2690] device veth0_vlan entered promiscuous mode [ 151.416133][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.416620][ T306] usb 1-1: Using ep0 maxpacket: 16 [ 151.424390][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.436249][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.444337][ T24] kauditd_printk_skb: 129 callbacks suppressed [ 151.444350][ T24] audit: type=1326 audit(1719576989.729:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2703 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059cc15b29 code=0x7fc00000 [ 151.475818][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.484055][ T1964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.493736][ T2707] 9pnet: Insufficient options for proto=fd [ 151.501070][ T2708] incfs: ino conflict with backing FS 1 [ 151.586174][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.594167][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.605139][ T2690] device veth1_macvtap entered promiscuous mode [ 151.617084][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.624829][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.633391][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.644408][ T2695] device veth0_vlan entered promiscuous mode [ 151.652650][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.660836][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.668821][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.676049][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.689950][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.698010][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.711006][ T2695] device veth1_macvtap entered promiscuous mode [ 151.717795][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.725799][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.733958][ T306] usb 1-1: config 0 has an invalid interface number: 140 but max is 2 [ 151.743061][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.750931][ T306] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 151.759657][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.767768][ T306] usb 1-1: config 0 has an invalid interface number: 177 but max is 2 [ 151.775809][ T306] usb 1-1: config 0 has an invalid interface number: 242 but max is 2 [ 151.784137][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.791880][ T306] usb 1-1: config 0 has no interface number 0 [ 151.797825][ T306] usb 1-1: config 0 has no interface number 1 [ 151.804107][ T306] usb 1-1: config 0 has no interface number 2 [ 151.810705][ T306] usb 1-1: config 0 interface 140 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 151.821686][ T306] usb 1-1: config 0 interface 140 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 32 [ 151.831438][ T306] usb 1-1: config 0 interface 140 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 511 [ 151.841569][ T306] usb 1-1: config 0 interface 140 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 151.852391][ T306] usb 1-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 151.857738][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.862798][ T306] usb 1-1: config 0 interface 140 altsetting 9 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 151.874722][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.885744][ T306] usb 1-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 151.900869][ T306] usb 1-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 151.912232][ T306] usb 1-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 151.922941][ T306] usb 1-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x1A, skipping [ 151.933718][ T306] usb 1-1: config 0 interface 177 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 151.944473][ T306] usb 1-1: config 0 interface 242 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 151.955171][ T306] usb 1-1: config 0 interface 140 has no altsetting 0 [ 151.961967][ T306] usb 1-1: config 0 interface 177 has no altsetting 0 [ 151.968689][ T306] usb 1-1: config 0 interface 242 has no altsetting 0 [ 151.977802][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.989044][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.086183][ T2715] incfs: ino conflict with backing FS 1 [ 152.143730][ T2623] ------------[ cut here ]------------ [ 152.149445][ T306] usb 1-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 152.159070][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.167872][ T2623] WARNING: CPU: 0 PID: 2623 at fs/inode.c:304 drop_nlink+0xc1/0x110 [ 152.176016][ T24] audit: type=1326 audit(1719576990.459:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2703 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f059cc15b29 code=0x7fc00000 [ 152.179770][ T306] usb 1-1: Product: syz [ 152.203374][ T2623] Modules linked in: [ 152.207058][ T2623] CPU: 0 PID: 2623 Comm: syz-executor Not tainted 5.10.216-syzkaller-00510-ga4a2b7a82ee4 #0 [ 152.216524][ T24] audit: type=1326 audit(1719576990.459:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2703 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059cc15b29 code=0x7fc00000 [ 152.217412][ T306] usb 1-1: Manufacturer: syz [ 152.244412][ T2623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 152.254403][ T2623] RIP: 0010:drop_nlink+0xc1/0x110 [ 152.259189][ T2623] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 77 ce f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 af 38 b3 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 152.265295][ T24] audit: type=1326 audit(1719576990.459:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2703 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059cc15b29 code=0x7fc00000 [ 152.278970][ T306] usb 1-1: SerialNumber: syz [ 152.306428][ T2623] RSP: 0018:ffffc90000b87cc0 EFLAGS: 00010293 [ 152.312341][ T2623] RAX: ffffffff81b77251 RBX: 0000000000000000 RCX: ffff88810ba713c0 [ 152.325737][ T306] usb 1-1: config 0 descriptor?? [ 152.339213][ T2623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.342379][ T24] audit: type=1326 audit(1719576990.459:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2703 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059cc15b29 code=0x7fc00000 [ 152.347157][ T2623] RBP: ffffc90000b87ce8 R08: ffffffff81b771d4 R09: 0000000000000003 [ 152.376237][ T24] audit: type=1326 audit(1719576990.459:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2703 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059cc15b29 code=0x7fc00000 [ 152.387209][ T2623] R10: fffff52000170f88 R11: dffffc0000000001 R12: dffffc0000000000 [ 152.402252][ T24] audit: type=1326 audit(1719576990.459:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2703 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059cc15b29 code=0x7fc00000 [ 152.434175][ T24] audit: type=1326 audit(1719576990.459:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2703 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059cc15b29 code=0x7fc00000 [ 152.457685][ T2623] R13: 1ffff1102222ed11 R14: ffff888111176840 R15: ffff888111176888 [ 152.457697][ T2623] FS: 00005555562db500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 152.457705][ T2623] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.457713][ T2623] CR2: 00007ff16157c710 CR3: 0000000115810000 CR4: 00000000003506b0 [ 152.457723][ T2623] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.457730][ T2623] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.457734][ T2623] Call Trace: [ 152.457759][ T2623] ? show_regs+0x58/0x60 [ 152.491075][ T24] audit: type=1326 audit(1719576990.459:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2703 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059cc15b29 code=0x7fc00000 [ 152.535773][ T2623] ? __warn+0x160/0x2f0 [ 152.540769][ T2623] ? drop_nlink+0xc1/0x110 [ 152.545569][ T7] device bridge_slave_1 left promiscuous mode [ 152.551881][ T2623] ? report_bug+0x3d9/0x5b0 [ 152.556301][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.563487][ T2623] ? drop_nlink+0xc1/0x110 [ 152.573593][ T2623] ? handle_bug+0x41/0x70 [ 152.583810][ T2623] ? exc_invalid_op+0x1b/0x50 [ 152.586055][ T24] audit: type=1326 audit(1719576990.459:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2703 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059cc15b29 code=0x7fc00000 [ 152.588775][ T7] device bridge_slave_0 left promiscuous mode [ 152.619847][ T2623] ? asm_exc_invalid_op+0x12/0x20 [ 152.627652][ T2623] ? drop_nlink+0x44/0x110 [ 152.633387][ T2623] ? drop_nlink+0xc1/0x110 [ 152.637789][ T2623] ? drop_nlink+0xc1/0x110 [ 152.642104][ T2623] shmem_rmdir+0x59/0x90 [ 152.646138][ T2623] vfs_rmdir+0x2b7/0x3f0 [ 152.650469][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.657444][ T2623] incfs_kill_sb+0x108/0x220 [ 152.662982][ T7] device bridge_slave_1 left promiscuous mode [ 152.676682][ T2623] deactivate_locked_super+0xad/0x110 [ 152.682028][ T2623] deactivate_super+0xbe/0xf0 [ 152.686703][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.693742][ T2623] cleanup_mnt+0x45c/0x510 [ 152.700669][ T7] device bridge_slave_0 left promiscuous mode [ 152.706769][ T2623] __cleanup_mnt+0x19/0x20 [ 152.713221][ T2623] task_work_run+0x129/0x190 [ 152.718930][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.728065][ T2623] exit_to_user_mode_loop+0xbf/0xd0 [ 152.747434][ T7] device bridge_slave_1 left promiscuous mode [ 152.753386][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.763185][ T2623] syscall_exit_to_user_mode+0xa2/0x1a0 [ 152.768700][ T2623] do_syscall_64+0x40/0x70 [ 152.772922][ T2623] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 152.779221][ T7] device bridge_slave_0 left promiscuous mode [ 152.785151][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.792179][ T2623] RIP: 0033:0x7fabaf196e57 [ 152.796399][ T2623] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 152.817574][ T7] device veth1_macvtap left promiscuous mode [ 152.823472][ T7] device veth0_vlan left promiscuous mode [ 152.829245][ T2623] RSP: 002b:00007ffd4c8f11b8 EFLAGS: 00000206 [ 152.829330][ T7] device veth1_macvtap left promiscuous mode [ 152.841093][ T2623] ORIG_RAX: 00000000000000a6 [ 152.845530][ T2623] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fabaf196e57 [ 152.853698][ T7] device veth0_vlan left promiscuous mode [ 152.859766][ T2623] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4c8f1270 [ 152.867966][ T7] device veth1_macvtap left promiscuous mode [ 152.873781][ T7] device veth0_vlan left promiscuous mode [ 152.879412][ T2623] RBP: 00007ffd4c8f1270 R08: 0000000000000000 R09: 0000000000000000 [ 152.889525][ T2623] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffd4c8f2320 [ 152.916648][ T2623] R13: 00007fabaf20364a R14: 0000000000024ec3 R15: 00007ffd4c8f2360 [ 152.924555][ T2623] ---[ end trace 4f34b216d66b8d8d ]--- [ 152.942078][ T2623] ================================================================== [ 152.950177][ T2623] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 152.956239][ T2623] Write of size 4 at addr 0000000000000170 by task syz-executor/2623 [ 152.964129][ T2623] SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 152.