last executing test programs: 6.004046048s ago: executing program 0 (id=269): socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/163, 0xa3, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) read(0xffffffffffffffff, &(0x7f0000000140)=""/238, 0xee) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) close(0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000080), 0x200000, 0x4) 5.965238844s ago: executing program 0 (id=270): r0 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x841440, 0x0, 0x0, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000740)='i2c_reply\x00', r1}, 0x10) close(r2) dup3(r0, r1, 0x80000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000c82a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2014000, &(0x7f0000000500)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@fat=@usefree}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@numtail}, {@shortname_win95}, {@shortname_mixed}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x3}}, {@shortname_win95}, {@rodir}]}, 0x26, 0x336, &(0x7f00000001c0)="$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") r7 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000001280)=""/4096, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f00000005c0)) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_unix(&(0x7f0000001280)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=unix,']) 4.994476204s ago: executing program 0 (id=276): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000400)}, 0xffffffffffffffb6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x2, 0x3, 0xff) connect$unix(r1, &(0x7f0000000000)=@abs, 0x6e) close(0x3) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000000)={@private=0xa010101, @broadcast, 0xffffffffffffffff, "1a5a8dddad902ea689da655e37ee850ce48af14be5467fa4f8e398b3b61872c5", 0x797f, 0x8, 0x5, 0xffff}, 0x3c) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) close(0x3) 4.89574978s ago: executing program 0 (id=277): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'bond_slave_1\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f80)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="2a00aa591046cdf2f38ae5f284199758204e0e04a92fc5cf04189ed947751e42880fcbc6c5cd5e6f0842a0d5310d4389fa5068934aac7f5241b6093ad791e6e4e0044c96648f580740ae52c83964ce9579d4bee4a9e5678bf4f3829517588bcd41854b21cb7d5f1d38885f5a97c52758d98e0123fd13772a0c77a63893670424b705564c719a0ff68a357012", 0x8c}], 0x1, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x20}}, {{&(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)="cac0d7831f42340dd322d44e27bc196b780aa63e18cc63022463de9fffe333265efd51978de2b2879b", 0x29}, {&(0x7f0000000200)="da08fa80336993df577616e033334cec6f6d7b1fe51448bffacab0c07cef2c8509dbc02b6fe562c77488feac42df6b5c838905a3d47eb2182f0b830264808b24bbff9c695849fc2ab507ce6a301827232e7cfcaf1af46b1c74338f0799476eced206bdb1a6efea4f9c92ee3d29766db892556cf915f90908ee649fd009a6b7a84f47606ff9eab231ef83e57834e202b3adce02f24215edc5c75f0433cd1ce7d6235536d7a65ad729b7b0fafc19a49964ee07a9abe049467d5596c5c5d21b79eba21c67c7888beb8af87e79c588e6e9cb", 0xd0}], 0x2}}, {{&(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000380)="8874f32a666a2ced6b54e70429f6af22547bcc991e9751a96999e4fca35285c9f4ec3edd311deea6e8b552922a95755151fa1eddbba30ad75cd173a84c1f31c203e71825", 0x44}, {&(0x7f0000000400)}, {&(0x7f0000000440)="ecced11a82f09f5b81a2aeab2e4478b4cada6d20d7ebcd7b2f5e4c781906472d130571b109ce77b6bf68df723af3bcfc3576d4974ee987ae1b2157992f7d384443eb08c94f8bfe27cbfe05186095e91e54e196efe6d55ac9547f9805bc8728492437a5935333e2a8f9a071b5c6dda5bcd5756a92cb3b2201bcd2ac2108e5f1de65394ca9ec5e70e6ee1cfca504c9df6b58862b0a5d2d93b5569bf458609c87335fd09d57b80059f0eeb3cb56e0932c394a46b329567c639f5a0305574cf1b875a0aef1538733860ebf15f6e3c94926f3b3419bee1e07fbe37cef97310e7cb5", 0xdf}, {&(0x7f0000000540)="8f0a56a980fa428b4ecb2ce4311e2564f6218cf1f8da5c053298e5df", 0x1c}, {&(0x7f0000000580)="ed9548d54eff7ff842ef2374995d1b14f9a2f3eed0175c75ec1bb9526c5d4517cdffd0ff77eab1ae56bd49c9b19429e09aa0c78ed9a980b13f9c4906194b331215a908e43a59f42a3a076be2ee7703f40367f8f6d495d9e8f66eeb7a2809711d0124755b4258e3cef85416b8d5b633cc269c261e78ef", 0x76}, {&(0x7f0000000600)="f9bab2f192ac8b3fa582b9ef6a9efd6beda08d245a246d6dd29318bb3176a39fc2ec905466725a95b0a17716c0e92150b0ed62688aebd330da430f604fa1515eacb6081282af1fc37b962c092a31a24c451a4512b8187ad47c0d3a5e56dc4597bc50bb", 0x63}, {&(0x7f0000000680)="edb05b3f8782f6038d28d0e0788cd24ca705eeab83414c9d620a13dab6b7ddaf98ebeddd0b588d1637ceea975c67fd8e4171e9fb8c5ec2f3a95eac1b10dfed441f3df05116434be4f693836d62bb054141bb1f849af363298fe073abefb266e6bc0a301518e0d3c75e6de3a62062eabedb5f35dacbe722721a8cd61ca8bbce64d1c51de9e89530167c97a29c2ff3dcd44c8a21fc6129be88411a706d1cff02c9393ed8a5f4962fae4925d633ae6eedc82260d7f46c419e85c055051d1ec5699d107636221f16e3fc75a8b722817972ba54f0859677d2", 0xd6}], 0x7, &(0x7f0000000840)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @broadcast, @multicast1}}}], 0x60}}, {{&(0x7f00000008c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000900)="374d9e8181307dffbf311d445da7abdd323b512d60f46de3f127", 0x1a}, {&(0x7f0000000940)="43596ef8e71a3c26378914dd9e3d33c4702f136c", 0x14}, {&(0x7f0000000980)="42766536d3a186ba2b0e591127c8d38dc592e9189d455ed0c6762e1aeea6b5ddab9f8f21d08b4ab22bbc0710bb30cd9005c88596ca60ac71a70a28ca671ab40aaf4ab505d6e35e74b90cba00f2a5039750f4088d38f4a24b5b20734cda6cdfff64391eb028e364d906677f9d16e0eee66edc4df9a100decb68bb2ec536c8c0c7c0e80b96c85da0776e2cf7b4f0cbf3e394324b8bea8fbb7866e0d9d0b5af0cbc", 0xa0}], 0x3}}, {{&(0x7f0000000a80)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000001f00)=[{&(0x7f0000000ac0)="0f363ced0952f1effb72595b", 0xc}, {&(0x7f0000000b00)="5a96249d21e8e3bb2ecd15800db9ef0dbb32cf2c04599d4f6fe49907eb9361f7886c07fb", 0x24}, {&(0x7f0000000b40)="fde46906f09210eb71e2404d849f9a3460566b4a412d5773b940ffce85f0b118c4f0fd69650dc051e2f9b3905015b4f1a46e3d1ebb64444b4d7b4ab77bb850b0c8b862576cd06977379037149527f2feb828613083250cd2956d3468eabe11786125c02aa34af5214ec6cf4f06e4e8398605b3b00ece79b0c2d0f514d7756a4c52aa54eb8496e4ed94ef1f485365744dd18d8f3e38b87d6013", 0x99}, {&(0x7f0000000c00)="5037505596e369a3dafb9a23be6157c228cb6c63957fc4252860371add75c7099759f7ca7c2aec0d45f5f7bdad669377d5141c74836e2b3452ee7dba6ebf7850d5c1ad5e580e0ec0dbf76bd5c1467aad079997919bdeb046873a61a974a43204af406c13f3bce46e4bb60f0c2425ff5d1144c045ac707717d548b89a40b8b48f596aa3e9a2ad56a23b5f7e1ef122acaa13cae8f355850a98c9bf6ada0c9b66cdc89db4", 0xa3}, {&(0x7f0000000cc0)="eb3ddeec8289a8f42727eab6097e11bc26464894c7b58b7be9a50d7d422f24f0b1760e22633f96059c48d56bc6b1bad78af7fd44d1b04d5c20e177cfb875fe19eecb4e542d497638ff0f037d2a47f8f23a75bc10e1971950f73003833305529a1326099964ef081ecefe0a6aec5a05e1996f7abd590fdcca1c57b4cdce04b48a88515d1d028375fee813e40438f62eb6489d362859d1c414e5318eb50302e35fbb25d653cc48232aee3d879d81751f401aa4893998e244ee3e2f9dd38c7a25ce293b3117f6d90f557d03ba5e4d29e401ff0f2dca8c", 0xd5}, {&(0x7f0000000dc0)="cb652f61f1fa", 0x6}, {&(0x7f0000000e00)="9d7130df83a650eff07d62bd95d89e20b0fd9aeba37987474accfbada322229a8aa582ae77953e6a92d1223b03a4576ef328724e791114fc22a66d4f07627ac316d8597f3898ccc96e44a8b1a285903af2a465951d7f96d4223886848ba1b841f004be96b3a900ed70f72bc05de33c38aa30939f7ac5c0f07ac8532ef3005b49a7462587192750658d58f682eb2db4cb964c156bf95c3d86b8bd1be34d80c50c3cba70dea7d5ac1a223c9c065509673b9720d6cdc4546a12bf894e518aa183a1cd341b15eec1e35c39970302d48f729ef4de54b3df", 0xd5}, {&(0x7f0000000f00)="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", 0x1000}], 0x8}}], 0x5, 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000002100)=0x10000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002180), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x68, r3, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x32, 0x10}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3bf}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x54}, 0x85) pipe(&(0x7f00000022c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat(r4, &(0x7f0000002300)='./file0\x00', 0x688000, 0x101) mkdirat(r6, &(0x7f0000002340)='./file0\x00', 0x4c) write$P9_RREADDIR(r6, &(0x7f0000002380)={0xe4, 0x29, 0x1, {0x9, [{{0x1, 0x2, 0x4}, 0x6, 0xce, 0x7, './file0'}, {{0x160, 0x0, 0x3}, 0x8000000000000000, 0x1f, 0x7, './file0'}, {{0x40, 0x2, 0x6}, 0x1, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x7}, 0x9d74, 0x40, 0x7, './file0'}, {{0x80, 0x4, 0x8}, 0x9, 0x6, 0x7, './file0'}, {{0x8, 0x4}, 0xe9ee, 0x2, 0x7, './file0'}, {{0x0, 0x2, 0x3}, 0x1, 0x6, 0x7, './file0'}]}}, 0xe4) write$UHID_INPUT2(r4, &(0x7f0000002480)={0xc, {0xcb, "99b8d5edfd977bc74456c504b39087683008acade0d58281cff1d42b7b488a428d028986414437c589adc963f94145411e2050e1e3176191377820eff12bbb15bc229b7ebc331b9de16d1296e703c3ec45fb96bc20de1c6f3b810d4c7c11987375d73c1e291bb3cd80fb597c6ae3f1a100abb04f1dfe03b3a6ed21e6b59ea8a3fc9f4a266c094dadb8efbf4faa437fdc4c9260cbe6d3c3eb3750771de8f63719e75fba42c703ea72e65d852366b48f6522f616ed8112dde0d6a4bcac32a211f54fd7096473011dce2ae010"}}, 0xd1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002580)='./cgroup/syz1\x00', 0x1ff) fcntl$setpipe(r2, 0x407, 0x7fffffffffffffff) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000025c0)={"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"}) setxattr$trusted_overlay_nlink(&(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00), &(0x7f0000002a40)={'L+', 0x80000000}, 0x16, 0x1) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x58, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x298}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x58}}, 0x4000000) read$FUSE(r4, &(0x7f0000002bc0)={0x2020}, 0x2020) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000004c00), 0x4) r7 = syz_open_dev$usbmon(&(0x7f0000004c40), 0x10000000000000, 0x2) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000004cc0)={&(0x7f0000004c80)=[0x0], 0x1}) r8 = syz_open_procfs(0x0, &(0x7f0000004d00)='net/vlan/vlan0\x00') sendmsg$IPVS_CMD_SET_SERVICE(r8, &(0x7f0000004e80)={&(0x7f0000004d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004e40)={&(0x7f0000004d80)={0xbc, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc040}, 0x48000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004ec0)={0xffffffffffffffff}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000004f00)={0x0, r9, 0x9, 0xcd, 0x7, 0x7fffffffffffffff}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r6, 0x11, &(0x7f0000004f40)="b03ddd7292e8bf66b07dfe824a2dd8d5921503c618cad3d3a30956670c83133c21e59eff", 0x24) socket$packet(0x11, 0x3, 0x300) read(r5, &(0x7f0000004f80)=""/182, 0xb6) open(&(0x7f0000005040)='./file0\x00', 0x200802, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000005080)={0x2, 0x28, 0x3, 0x1f, 0xf8, 0x8, 0x3}, 0xc) 3.948224647s ago: executing program 0 (id=283): r0 = socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x1ac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x42, 0x0, 0xfa, 0x2, 0x2, 0x0, 0x256, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x2, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x5, 0x3}}, {0xa, 0x2, [0xffff, 0x6, 0x8000]}}, {{0x1c, 0x1, {0x6, 0x4, 0x400, 0x658, 0x2, 0x8, 0x6, 0x4}}, {0xc, 0x2, [0x0, 0x3, 0x0, 0xffff]}}, {{0x1c, 0x1, {0x18, 0x80, 0xf9c, 0x0, 0x0, 0x5, 0x8758, 0x9}}, {0x16, 0x2, [0x9, 0x7966, 0x3, 0x23, 0x4d3, 0x4, 0xff, 0x67e, 0x6]}}, {{0x1c, 0x1, {0x4, 0x89, 0x8001, 0x6, 0x0, 0x80000001, 0x7f, 0x3}}, {0xa, 0x2, [0x9, 0x3dbe, 0x6]}}, {{0x1c, 0x1, {0x6d, 0x3f, 0x7fff, 0x8001, 0x2, 0x9, 0x1, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x4, 0xff, 0x0, 0x2, 0x1, 0x5, 0x0, 0x4}}, {0xc, 0x2, [0x1d, 0x9f37, 0x101, 0x5]}}, {{0x1c, 0x1, {0x68, 0x3, 0x9, 0xfff, 0x0, 0x6, 0x4, 0x1}}, {0x6, 0x2, [0x800]}}, {{0x1c, 0x1, {0x6, 0x9, 0x3ff, 0x3, 0x2, 0x29, 0x3, 0x7}}, {0x12, 0x2, [0x7ac1, 0x6, 0x80, 0x400, 0x7ff, 0x401, 0x2]}}]}, @TCA_RATE={0x6, 0x5, {0x7f, 0x2}}]}, 0x1ac}}, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) 3.271682262s ago: executing program 4 (id=286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89b0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 3.267638732s ago: executing program 4 (id=288): r0 = socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x0, 0x7fff, 0x0, 0xfc}, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x1ac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x42, 0x0, 0xfa, 0x2, 0x2, 0x0, 0x256, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x2, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x5, 0x3}}, {0xa, 0x2, [0xffff, 0x6, 0x8000]}}, {{0x1c, 0x1, {0x6, 0x4, 0x400, 0x658, 0x2, 0x8, 0x6, 0x4}}, {0xc, 0x2, [0x0, 0x3, 0x0, 0xffff]}}, {{0x1c, 0x1, {0x18, 0x80, 0xf9c, 0x0, 0x0, 0x5, 0x8758, 0x9}}, {0x16, 0x2, [0x9, 0x7966, 0x3, 0x23, 0x4d3, 0x4, 0xff, 0x67e, 0x6]}}, {{0x1c, 0x1, {0x4, 0x89, 0x8001, 0x6, 0x0, 0x80000001, 0x7f, 0x3}}, {0xa, 0x2, [0x9, 0x3dbe, 0x6]}}, {{0x1c, 0x1, {0x6d, 0x3f, 0x7fff, 0x8001, 0x2, 0x9, 0x1, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x4, 0xff, 0x0, 0x2, 0x1, 0x5, 0x0, 0x4}}, {0xc, 0x2, [0x1d, 0x9f37, 0x101, 0x5]}}, {{0x1c, 0x1, {0x68, 0x3, 0x9, 0xfff, 0x0, 0x6, 0x4, 0x1}}, {0x6, 0x2, [0x800]}}, {{0x1c, 0x1, {0x6, 0x9, 0x3ff, 0x3, 0x2, 0x29, 0x3, 0x7}}, {0x12, 0x2, [0x7ac1, 0x6, 0x80, 0x400, 0x7ff, 0x401, 0x2]}}]}, @TCA_RATE={0x6, 0x5, {0x7f, 0x2}}]}, 0x1ac}}, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) 3.195000833s ago: executing program 3 (id=289): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xf31, 0x7000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x7}}}, 0x24}}, 0x0) 3.160265519s ago: executing program 4 (id=290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x3, {0x3, 0x0, 'u'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.143515732s ago: executing program 3 (id=291): socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/163, 0xa3, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) read(0xffffffffffffffff, &(0x7f0000000140)=""/238, 0xee) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) close(0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000080), 0x200000, 0x4) 3.142792352s ago: executing program 3 (id=292): socket$igmp6(0xa, 0x3, 0x2) unshare(0x400) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x11, 0x18}, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000200)={0x1, 0x101}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) r2 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000180)={0x1, r2}) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0xc0189436, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @broadcast}}}}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x800403, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x5518, &(0x7f000000ac80)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x4002, &(0x7f0000000a40)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c6572726f72733d72656d6f756e742d726f2c757466383d3000006f636861727365743d757466382c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d312c757466383d302c726f6469722c0080a96a6dd3589936120523ca072dbebaeeac4227d8a8e04a5d8aae8152a23a32c0de1423c8"], 0x0, 0x24b, &(0x7f0000000480)="$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") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000100)={0x74, 0x0, 0x1f}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0x7}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000000000001000000fffffff2000000000000000000000000000000000000000000000000000000000000000001000040"]) 3.035895118s ago: executing program 0 (id=293): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x14, &(0x7f0000000600)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffff7ffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) r1 = open(0x0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000001c0)={0x1, 0x0, [{0x1000, 0xb6, &(0x7f0000000480)=""/182}]}) copy_file_range(r3, &(0x7f00000002c0)=0x5, r2, &(0x7f0000000340)=0x3, 0xe74b, 0x0) timer_create(0x0, &(0x7f0000000540)={0x0, 0x19, 0x0, @thr={&(0x7f00000006c0)="90b2a37bd2a0cf6be7ce8a42239ca6ede40964e19491c280165826a4577e1c004124ae78f53cf5cd8bf0327f4ef658b4571d6b5b85feacc11bd8f82bbfb3fa30eedea8d785d4d6fc03bde3a11f88710195f22aae949212d67180c34ef21cc0439ff8878ce47280b8014babae3d9ccc7952041c0e5a58f7db73475793a9a0ca3f63b5122d7bfed56921e0d3abde60b118d5901d1b3089a55f63bd6215a4", &(0x7f0000000780)="58523e1b990e5990ceae28b31f76a70a05195d168a71da765824319e23ae5a99da7fce88378d30b360657f23ff5e03c11680cf388dffdf6511a0659bb94d65ad243c4e8e4d6c6a5726f12d7c3187f2240251f21594d5fa14a8ff84272b870740a812a58b546108a01686cf9fd809117e798d1132a5faa5d1b96fc1ce91b5ba9edcd91d18effeed3ed2a758da978b475145ac78412da5e6e89030c3616e4b0bf28ee43dcfc8310c1e2a8ffddb392348e29aed6451bd356a817f2436b8fd60c851ee595d674e0d566788e6f1c1fe061a"}}, &(0x7f0000000580)) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000005c0)={0x1, r4}) sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x4000010) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x18) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/83, &(0x7f0000000880)=""/72}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001600)=ANY=[], 0x4c}}, 0x1) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r6, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x891c, &(0x7f0000000000)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRESHEX=r7, @ANYRESOCT=r6, @ANYRES16=r6], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 2.5700292s ago: executing program 3 (id=297): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x5, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x2e}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev, @initdev}, &(0x7f0000000240)=0xc) unshare(0x22040400) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) preadv(r5, &(0x7f0000000140), 0x10000379, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xce}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) socket$netlink(0x10, 0x3, 0x4) memfd_create(&(0x7f0000000440)='{\x00', 0x6) read$FUSE(r0, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0x2020) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r7, 0x8004550f, 0x0) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r6}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r8}, 0x10) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$bt_BT_SECURITY(r9, 0x29, 0x46, 0x0, 0x20000011) syz_fuse_handle_req(r0, &(0x7f0000006980)="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", 0x2000, &(0x7f0000008d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008a40)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{'], 0x0, 0x0, 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYRESHEX=r0], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x90) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000400)=0xa0809019) 1.592705763s ago: executing program 3 (id=303): socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/163, 0xa3, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) read(r0, &(0x7f0000000140)=""/238, 0xee) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) close(r0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000080), 0x200000, 0x4) 1.536205481s ago: executing program 2 (id=304): getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x11}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000088b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6(0xa, 0x80002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x40000000, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x2, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x15}, 0x10) write(r4, &(0x7f00000000c0)="24e5d61c0b3d8a5b2400000004001f0000f8ffffffffff01000000", 0x1b) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r5, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000080)=0x5, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 1.386519575s ago: executing program 3 (id=305): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="41800000000000002800128008000100736974001c000280060008002b0000000600120000000000080002000a01010008000500", @ANYRES32=0x0, @ANYBLOB="50b105bd374ed2cf204a8d22e8050000000000000010ff7726f9fa0195151809506beb9455fe2dced8cb06f9f24750ab131f10edf7cdf6ab7b5afcfa32e2e544db45cff208f129ab5619af8a9c7ce2dd5d90e981159213ed6f6422829b87b69254fce66c318045f835e47f94e426fd941a6bf6b6e7c2eecbfedff8e6c3018305eca7ec37a38835a6eff77466daf0fce8d99d4da78bc1a6c286"], 0x50}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000021c0)=ANY=[@ANYBLOB="120100008d1ff420e6040a00000201020301090212000100000000090400000014f201"], 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) setns(r5, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x1) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x13) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000ff000000000000000008001900", @ANYRES16=r0, @ANYRES8=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000000c0)='./file1\x00', 0x201a9cf, &(0x7f0000000140)={[{@barrier}, {@nojournal_checksum}], [{@dont_measure}]}, 0x1f, 0x536, &(0x7f0000000780)="$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") r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r7) getpeername$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x7c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x20, 0x80, 0xffffffff, 0x70b9d656, {{0x20, 0x4, 0x1, 0x2, 0x80, 0x67, 0x0, 0x3f, 0x29, 0x0, @multicast2, @local, {[@generic={0xd3eb0ea4ab7fde20, 0x11, "80db7d84ded36924a459cebd58c5c5"}, @lsrr={0x83, 0xf, 0x91, [@dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, @remote]}, @ssrr={0x89, 0x1b, 0x9b, [@rand_addr=0x64010102, @empty, @loopback, @multicast1, @loopback, @multicast1]}, @rr={0x7, 0x1b, 0x97, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x13, 0xf2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x2, 0x7, 0x50, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x8701, 0x8, 0x9, 0x1}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r7, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000dc0)={0x200, r8, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x88}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x4, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x48000}, 0x4004041) 1.044286047s ago: executing program 4 (id=307): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000500)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0xa, &(0x7f0000000100)={&(0x7f0000000080)=@setlink={0x38, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x7fffffff}}]}]}]}, 0x38}}, 0x0) 1.041573708s ago: executing program 4 (id=308): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000006110a000000000629500010000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) 1.041152778s ago: executing program 4 (id=309): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x153, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x20, 0x0, 0x7, {0x7, 0x1, "3539c88578"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 826.207171ms ago: executing program 1 (id=310): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x14, &(0x7f0000000500)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="82"]) recvmmsg(r2, &(0x7f0000007540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000c2388a897b0aecd788c294bdd1303d00000000240012800b00010062726964676500001400028008000220000000000800010000000000"], 0x44}}, 0x0) 608.235935ms ago: executing program 2 (id=312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="c014e2b0b73e2cc7448b121a7ff2d53ebafe054fa4974db4ffd7cf9edf2867ec4325181a2c4a8910cb12b2a2abc02a7a79973886f460d5d132c974735ef719f316ea4adf7cfce13c23d878ee48f3e8e881087664e4050e", 0x57}], 0x1, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000340)=ANY=[@ANYRESHEX], 0x15) (async) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000300)={0x30}, 0x30) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async, rerun: 32) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) (async, rerun: 32) r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r5}, &(0x7f00000000c0)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) (async) readv(r6, &(0x7f0000000000)=[{&(0x7f0000000200)=""/215, 0x7ffff000}], 0x6) (async) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) (async) prlimit64(r0, 0xc, &(0x7f0000000280)={0x7, 0x7}, &(0x7f0000000400)) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x3, 0x8001, 0x0, 0x2503, r4, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5, 0x8}, 0x48) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 552.457904ms ago: executing program 2 (id=313): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xda00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0xfffffffffffff12e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x18, 0x0, &(0x7f00000000c0)) 550.405594ms ago: executing program 2 (id=314): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r4, 0x2, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x1, &(0x7f00000001c0), 0x3, r2, 0xa}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000140)=0xc) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x210020, &(0x7f0000000280)={[{@uid={'uid', 0x3d, r5}}]}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x278d1aff}) 355.384965ms ago: executing program 2 (id=315): socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/163, 0xa3, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) read(r0, &(0x7f0000000140)=""/238, 0xee) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) close(r0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000080), 0x200000, 0x4) 171.366173ms ago: executing program 1 (id=311): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x90) 170.943503ms ago: executing program 1 (id=316): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000080)=@framed={{0x36, 0xa, 0x8, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000480)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffefd}, 0x90) 153.842655ms ago: executing program 1 (id=317): clock_gettime(0x0, &(0x7f0000004240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000080)=""/32, 0x20}, {&(0x7f00000000c0)=""/185, 0xb9}, {&(0x7f0000000180)=""/24, 0x18}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x4}, 0x1}, {{&(0x7f0000001200)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000002880)=[{&(0x7f0000001280)=""/199, 0xc7}, {&(0x7f0000001380)=""/180, 0xb4}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/157, 0x9d}, {&(0x7f0000002500)=""/224, 0xe0}, {&(0x7f0000002600)=""/197, 0xc5}, {&(0x7f0000002700)=""/103, 0x67}, {&(0x7f0000002780)=""/17, 0x11}, {&(0x7f00000027c0)=""/175, 0xaf}], 0x9, &(0x7f0000002940)=""/37, 0x25}, 0xae}, {{&(0x7f0000002980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002a00)=""/168, 0xa8}], 0x1, &(0x7f0000002b00)=""/75, 0x4b}, 0x40}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002b80)=""/177, 0xb1}, {&(0x7f0000002c40)=""/15, 0xf}], 0x2, &(0x7f0000002cc0)=""/228, 0xe4}, 0xfffffffc}, {{&(0x7f0000002dc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004040)=[{&(0x7f0000002e40)=""/214, 0xd6}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/195, 0xc3}], 0x3, &(0x7f0000004080)=""/86, 0x56}, 0x3}], 0x5, 0x100, &(0x7f0000004280)={r0, r1+10000000}) clock_getres(0x0, &(0x7f00000042c0)) getsockname$packet(r2, &(0x7f0000004300)={0x11, 0x0, 0x0}, &(0x7f0000004340)=0x14) clock_gettime(0x6, &(0x7f0000004380)) sched_rr_get_interval(0x0, &(0x7f00000043c0)) getsockname$inet6(r2, &(0x7f0000004400)={0xa, 0x0, 0x0, @empty}, &(0x7f0000004440)=0x1c) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000004640)={&(0x7f0000004480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004600)={&(0x7f00000044c0)={0x128, 0x1, 0x9, 0x3, 0x0, 0x0, {0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x101}}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0xa8, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x35100388}}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x24040000}, 0x8086) socket(0x11, 0x80000, 0x200) r4 = accept$inet6(r2, &(0x7f0000004680)={0xa, 0x0, 0x0, @private1}, &(0x7f00000046c0)=0x1c) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000047c0)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004780)={&(0x7f0000004740)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) shutdown(r4, 0x1) getsockopt$inet6_buf(r4, 0x29, 0x2c, &(0x7f0000004800)=""/24, &(0x7f0000004840)=0x18) openat$uinput(0xffffffffffffff9c, &(0x7f0000004880), 0x802, 0x0) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000048c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000004900), 0x9) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000004980)={'ip_vti0\x00', &(0x7f0000004940)={'syztnl0\x00', r3, 0x20, 0xf840, 0x4, 0xaf44, {{0x8, 0x4, 0x3, 0x7, 0x20, 0x64, 0x0, 0x2, 0x29, 0x0, @remote, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0x71, 0x3, 0xe, [{@rand_addr=0x64010100, 0x9}]}]}}}}}) fcntl$setsig(r2, 0xa, 0x3c) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) nanosleep(&(0x7f00000049c0)={0x0, 0x3938700}, &(0x7f0000004a00)) r7 = geteuid() mount$cgroup(0x0, &(0x7f0000004a40)='./file0\x00', &(0x7f0000004a80), 0xd000, &(0x7f0000004ac0)={[{@subsystem='cpuacct'}, {@noprefix}, {}, {}], [{@uid_gt={'uid>', r7}}, {@audit}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) writev(r4, &(0x7f0000004d40)=[{&(0x7f0000004b40)="2e1cec2737bc317c40ed178c719c4b0b70d742c6f7f03f8a3c9e62ab59e9efbc59c6ca0a658e0d364fb66c4bf7cda505294054a292b7e724892934871914215accb159e4915ede99cc1939a95bdb40d716d83c63459797a4e44a3d9044cde21933bb6691fbcddb459b48e6f0bb0b366e104fb5147fb474263ae7907280e3537fd3555ee2bac96990daf6ebf291a8af8e4cd30c8e669ff5453891c4bc10622637f881ad9eb5544092e16330169e52abb97dcaf9af16593cece18ad271a84ee96b4138a0d77471c31088a6372376e1246b", 0xd0}, {&(0x7f0000004c40)="977c45fec063d985786242612582207d9a6259cf11fbfd54be13dcf0c3fb6c4a1e13a0beef1499141708be52682765549328db0c324cc3f8b47010a36d7a960e904f9603162ea3751b5e347d9b2201ee0d0ab0c9d903cab90ec59e2c37a885675a5f3d1f01a076fa618920a54706490b2c6e03e6feefb3933373bba06b7263b0d8be9079a269eb86b75c176bd704f543f0c813e36945556b0afd400d6e413b59c194771cc0f8ceace10eee8e00b54450f128d7d3496e7e810b570e546f77d5ce520ae99bf7a3828353a9188ab7fb4355b7dd2490e3aed724bf5318c718734ab4dc3d0c6cbe3f0abbcc47f8afd1aa911eda2668c2768d", 0xf6}], 0x2) r8 = syz_open_dev$MSR(&(0x7f0000004d80), 0x800, 0x0) ioctl$EXT4_IOC_SETFSUUID(r8, 0x4008662c, &(0x7f0000004dc0)={0x0, 0x0, "af1604cc0b5b4d63392320fa72d53cce"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004e80)={{0x1, 0xffffffffffffffff}, &(0x7f0000004e00), &(0x7f0000004e40)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004f40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000004ec0), &(0x7f0000004f00)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000054c0)={0xffffffffffffffff, 0xe0, &(0x7f00000053c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000005200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000005240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000005280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf3, &(0x7f00000052c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000005300), &(0x7f0000005340), 0x8, 0x80, 0x8, 0x8, &(0x7f0000005380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000005840)={0x5, 0x26, &(0x7f0000004f80)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @ldst={0x2, 0x1, 0x6, 0x3, 0xb, 0x30}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8001}], &(0x7f00000050c0)='syzkaller\x00', 0x7, 0x68, &(0x7f0000005100)=""/104, 0x41100, 0x10, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000005180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000051c0)={0x4, 0x7, 0x8e3, 0x7}, 0x10, r11, 0xffffffffffffffff, 0x7, &(0x7f0000005780)=[0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000057c0)=[{0x1, 0x5, 0x3}, {0x1, 0x3, 0x5, 0x3}, {0x4, 0x2, 0x3, 0x7}, {0x2, 0x3, 0x9}, {0x0, 0x3, 0x7, 0xa}, {0x3, 0x1, 0xb, 0xb}, {0x3, 0x1, 0xb, 0xb}], 0x10, 0x4}, 0x90) 112.438222ms ago: executing program 2 (id=318): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x1805a, &(0x7f0000000000)=ANY=[], 0x1, 0x105ca, &(0x7f0000004240)="$eJzs3M1uG1UYBuDPDW3aUkqF+sOOkRBSImErTtKKCgkKtAKkpor4WbABHHtiubU9IXackDVILLiN7hAbFlwBG+4DCSE2ILEDgTwzqZqqi5aauCXPI03eM8czn8+xIsXHE08Ah9aZ5I/fK3E6TkTETEScisjblXLLXSni+Yh4ISKO3LVVyv47Hcci4mREnB4XL2pWyoe+/ez7v0a717+6/eovH1++/VtlerMGDtrr9+y/FBG9jaK93Ssyaxd5s+xvjDp59pZHZRYP9G6V+1mR2+laXmG7sXdcI8+ldnF8trE1GOd6t9EcZ7uznvdv9IsnHIzae3XyE242NvP9VrqWZ2eQ5dneLca1U+buYFjUaZX1Ps/Lx3C4l0V/upMW89m4lWezPyz7i7pZK90Z56jM8umimXVb+TjWHuqlfqJc7/S3dpJRujnoZP3kYq3+Sq1+qVrfzFrpMF2uNnqtS8vJXLs7Pqw6O/571M6ydjetNbPefDLXbjar9XoydzVd6zT6Sb1eW6otVC/Ol62Xk7dvfJh0W8ncON/s9LeGne4gWc82k+KM+WSxtnR5Pnmxnry/spqsvnft2srqB59c/ejGGyvvvlUetDes2fx3YpguJ3OLC4uL1fpCdbE+f4DzH6aN3hTnf2dYE5w/PBLvJAEemvU/MA3W//vX/7PW/4dy/XvY5w+PxDtJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBD66ej372TN84U+0+X/c+UXc9FxIWIOB8R5yLi7/uYiWP7ap6NiErZvt/xR+8Zww+VyCuMz5ktt5MRcaXc/nz2v34VAAAA4P/rmx+/+DJiZtzMf7w27QFxkMoPbY5Pql7+kc9Tk6p2Ni+2M6Fq5/ZKTsT5iDh65tcJVbsQEUdOfTqhag9kZl8cvysqRRw5yNEAAAAHY/9KYGKrNwAAAB47X097AExHfr22/F/88lrwbBHlBcET+/YAAACAJ1Bl2gMAAAAAHti//a5uvv6f9P3/fnb/PwAAAHisFPf/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9i5exy1gSgO4A8ch3wqKOLjKlRRSgoOkSOkzAGS26TjCFEkxDlIlyNEEDGeLbyiWK3HeBf9fpJ5Mxb8eUA1HmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgT3/q7frn/vuPrjnHX6dOynwaAAAA4JJDvV2nwbSZv83n3+dTHyNiGRGLiJhHxKW1exUvW5mziBjl8aXn1/d6+B2REs6vmeTjTUR8zse/D31/CwAAAHC79rvVJqI6D9PDp6Eb4pryRZtXpfLSJZ8XpdJmKexbobT5XWQRi4iop38LpS0jYvzuS6G0B6lyaf32aTJqyvia3QAAANdRtUqx1RsAAABPztehG2AYab82/xc/7wVPmpK3BV+3ZgAAAMAzNBq6AQAAAKB3af3v/n8AAABw25r7/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCnQ71d73erTdec46mbR73puGvXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Gd/Xk4gBMIgDPau75wG8w9LGjQGD1aB8PE3HgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL7ld3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4y3XwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/dycQAkEQBvvO/5wW8w9LGjQGEapg4WOGeVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIsdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirsz71twkAYx+HXl0SJ22SE9FYCM9BQIRiBDwnJkmdgABaioaK1WARWAAnONZ0peJ7m/yuuuBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXtPl4Yu3iCgidZkijTc/p/eI+Ii0bdvR5y2L3fnYfN1ztj9Mcn7H9LeMiDKKPs4BAOhd1W2O1bpe/uX9zzvIO8xbzZt68cxPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwZd/+WZuKogCAnzR/2trJxUEXQaFdNKb+S6GroAji4uBY2liKqZa2gi0i1G8g+AXcderqZ3B3cHATpIOKCDpU0ry0txqwVs0L7e8H971zL3nv3ZshcN65AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP7KxFiOduBARx0s7ccubj4+mu50/fH59rNNuvyotpPds3aIcEXfmmo1zPVxLv3n8U39pZfXuVLPZWPyPweA+nlXsxcQE/ziI6ItpCJIgivu7PIcfJwAADrRy1lp5/bvy+tXWWGEyYvP57vx/NIljj/n/1xdPrqXPSvP/Ws9W2P+qy/ML1aWV1TNz81OzjdnGvdrExIWL9cuXxmvVrXcl1cP+xgQAAIC/Vclamv8PTP5a/z+SxLHH/P/B9ZsnWmND2TVF+X9XO0W/vGcCAABwuB09+eVToct4oVKJh1PLy4u19nG7P94+5jDV37u1uzuYtTT/L07mNDcAAACgpzbWCiMRsd7pz2TnrvX/sZ3r0vr/22elG+k9ixExnNX/z07fb870ZCX9rxd/Qs57jQAAAORrOGtp/b+8tf+/tP2ZgYgYO9WOO6N72f8/evrl+/RZ6f7/8z1bYX8aqLe/j61zPaJUz3tGAAAAHGRDWSt832z79vRKxf5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfrBj9ygRA1EAgJOdjVbigmBj4wlEO6sFC8F7iILgEbyCd/AO3iOlaGktW4iFrbxJRpdtFiwSf74PJu8lDJmXqfIGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhrcfKVp7jMunzSP3t8vTmP+LQSw8tbuxsj8rqq6yHr/m3q47ErAAAA4D9Ipb+vquq5uT+LOJnn/r8pc6Lnv9vq8tLMr/b9JZbeP8Zeenj/XGjWrRMvvby6vjgc7At/vu21M6Z55/PZSyqHMDuLJu9nfdu2pxs53RygWADgWw5K7JPyPxTxaMzCAPjL9pdvpv2olvr/NB+lLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBBfQQAAP//EvBwDQ==") r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000102505a1a4400001020301090272fe02010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810320"], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x81000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x13, r3, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000fc0)={'filter\x00', 0x2, [{}, {}]}, 0x48) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r2, &(0x7f0000000f80)='./file2\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x141842, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) 425.48µs ago: executing program 1 (id=319): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x300, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=320): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c60ebab1c176bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc28d0072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd5adb8e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d01006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d0901000000ffffffffcc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f60109af93a09fab1daae4b518d7a5d95a017864487367d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff6f16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c64ac4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5ce4ba01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b059bc295aa0e38ff07edc3492b96e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe449678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a6a2bb0cfb284fcfde9015769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed327bf4548f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443a6a64c7803760880af23fb3f430a5d11fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630ed5a0c2261bc2d5de6ee174534b8dfc0432ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79aa2832c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574bda31f81d61ccfd58080d2330b9c7b535aed87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf31523d753cf27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e72daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca67905e877893646d185a75582f866785af6b0149e336c31fb177e3e85f4c60cbbde4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3045b9c790984c6fb65fd7887bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981b90d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212dedd245b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000000000000000000000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699f61acdc8e36010d76093ddd227df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de28f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eebf33a260a9b2647726795617a9d170000000000000000000000000767003cacbcd49d0f7ba330f3b788ad4cf448e89c48c32915b1c356e3814621f166d55edb985cb1c3224652996c492c6249af22aa673ddf67d75325652cc6d74b00df9cc0012bc725b168c3aab1c7f2303ad6d54a612d7f9791a49b582c2b982423d837ac2e74aa1cde817adc1b24f1b2b6b9d0af28522b14b22359f89f836860811dddc56d303b057e6d81b0a87a5c99279e57c4b297919b478fae9526354e15f1d56dfe9334eaf449"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000640)={'tunl0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x40, 0x40, 0x8, 0x2a8, {{0xc, 0x4, 0x2, 0x27, 0x30, 0x66, 0x0, 0x6, 0x2f, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x1b, 0xce, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010100, @multicast2, @multicast2, @private=0xa010102]}]}}}}}) r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f00000006c0)='bpf_lsm_inode_notifysecctx\x00') r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000700), 0x4001, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%pS \x00'}, 0x20) r10 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r10, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000000000000000000002003e000000000000000000380000000000000000000000000020000005"], 0x38) close(r10) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x217, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x7ff, 0x401, 0x40, 0x2248, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x6, 0x1d, &(0x7f0000000440)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @exit, @cb_func={0x18, 0x4}, @generic={0x35, 0x6, 0xc, 0x5, 0x52f}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x41}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0xf1, 0x8, 0x7, 0x6, 0x7ff}], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x14, &(0x7f0000000580)=""/20, 0x40f00, 0x0, '\x00', r6, 0x36, r0, 0x8, &(0x7f0000000680)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, r7, r0, 0x1, &(0x7f0000000900)=[r8, r9, r10, r11, r12], &(0x7f0000000940)=[{0x4, 0x5, 0x4}], 0x10, 0x200}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000180)=0x1e) syz_usb_connect$uac1(0x2, 0x98, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000000000406b1d010140000102030109028600030100000209040000000801"], 0x0) kernel console output (not intermixed with test programs): ered promiscuous mode [ 26.839266][ T427] FAT-fs (loop4): Unrecognized mount option "GPL" or missing value [ 26.925662][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.932547][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.939882][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.946810][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.012490][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.230226][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.521565][ T453] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.539399][ T450] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 27.620583][ T448] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 27.676393][ T448] ext4 filesystem being mounted at /root/syzkaller.9CbLkG/2/bus supports timestamps until 2038 (0x7fffffff) [ 27.686933][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.696080][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.705721][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.781312][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.806069][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.812952][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.832076][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.866616][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.874561][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.881402][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.901535][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.055494][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.062988][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.070508][ T23] kauditd_printk_skb: 78 callbacks suppressed [ 28.070544][ T23] audit: type=1400 audit(1719618525.650:154): avc: denied { append } for pid=446 comm="syz.2.21" path="/root/syzkaller.9CbLkG/2/bus/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.087229][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.102303][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.127061][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.135087][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.160638][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.168948][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.178979][ T485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'. [ 28.186382][ T23] audit: type=1400 audit(1719618525.810:155): avc: denied { read write } for pid=482 comm="syz.1.27" name="fuse" dev="devtmpfs" ino=9170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 28.193413][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.223403][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.230957][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.232520][ T23] audit: type=1400 audit(1719618525.810:156): avc: denied { open } for pid=482 comm="syz.1.27" path="/dev/fuse" dev="devtmpfs" ino=9170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 28.238574][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.261299][ T23] audit: type=1400 audit(1719618525.880:157): avc: denied { ioctl } for pid=480 comm="syz.3.28" path="socket:[11878]" dev="sockfs" ino=11878 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.269012][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.316253][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.323770][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.331107][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.338479][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.345818][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.353354][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.360737][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.368732][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.375846][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.383083][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.390284][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.397606][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.404794][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.412007][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.419208][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.426670][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.433955][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.441217][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.448398][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.455563][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.462836][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.470000][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.477205][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.484369][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.491608][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.498897][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.506618][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.513813][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.521146][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.528321][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.535671][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.542910][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.550107][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.557319][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.564597][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.571830][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.579022][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.586458][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.593644][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.601142][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.608381][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.615531][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.622830][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.629975][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.637174][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.644344][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.651586][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.658781][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.666040][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.673404][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.680609][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.687819][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.695087][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.702321][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.709770][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.716989][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.724173][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.731574][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.739073][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.746571][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.753772][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.761118][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.768319][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.775640][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.782878][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.790034][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.797236][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.804419][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.811680][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.818986][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.826142][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.833699][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.840908][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.848113][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.855373][ T374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.867962][ T23] audit: type=1400 audit(1719618526.520:158): avc: denied { read } for pid=480 comm="syz.3.28" name="ppp" dev="devtmpfs" ino=9259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.874437][ T374] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 28.901245][ T23] audit: type=1400 audit(1719618526.520:159): avc: denied { open } for pid=480 comm="syz.3.28" path="/dev/ppp" dev="devtmpfs" ino=9259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.932533][ T23] audit: type=1400 audit(1719618526.520:160): avc: denied { read } for pid=480 comm="syz.3.28" name="usbmon0" dev="devtmpfs" ino=9260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 28.946389][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.956476][ T23] audit: type=1400 audit(1719618526.520:161): avc: denied { open } for pid=480 comm="syz.3.28" path="/dev/usbmon0" dev="devtmpfs" ino=9260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 28.963569][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.994481][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.002567][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.010651][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.018471][ T23] audit: type=1400 audit(1719618526.520:162): avc: denied { ioctl } for pid=487 comm="syz.1.29" path="socket:[12725]" dev="sockfs" ino=12725 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.043133][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.043958][ T491] ====================================================== [ 29.043958][ T491] WARNING: the mand mount option is being deprecated and [ 29.043958][ T491] will be removed in v5.15! [ 29.043958][ T491] ====================================================== [ 29.051576][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.085718][ T23] audit: type=1400 audit(1719618526.520:163): avc: denied { connect } for pid=487 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.094442][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.125327][ T485] kvm: emulating exchange as write [ 29.172318][ T491] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 29.201308][ T491] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 29.266881][ T7] device bridge_slave_1 left promiscuous mode [ 29.273085][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.284530][ T7] device bridge_slave_0 left promiscuous mode [ 29.290695][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.395898][ T506] 9pnet: Insufficient options for proto=fd [ 29.541300][ T508] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 29.582286][ T497] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 29.724204][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.743992][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.749520][ T512] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 29.773726][ T512] ext4 filesystem being mounted at /root/syzkaller.rOoS8E/1/file0 supports timestamps until 2038 (0x7fffffff) [ 29.775242][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.798319][ T515] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 29.809671][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.830095][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.837925][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.839660][ T424] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 29.845264][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.867535][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.875634][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.882980][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.890250][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.897513][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.905560][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.912906][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.920174][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.927549][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.934783][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.942074][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.949641][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.957051][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.964293][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.971621][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.979139][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.986480][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 29.993721][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 30.001050][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 30.008309][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 30.015506][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 30.022693][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 30.027478][ T501] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 30.046344][ T501] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 30.273366][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 30.280629][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 30.287809][ T374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 30.298887][ T374] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 30.310143][ T531] EXT4-fs (loop2): Test dummy encryption mode enabled [ 30.317557][ T531] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 30.629862][ T538] EXT4-fs (loop1): Ignoring removed orlov option [ 30.648134][ T538] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,nodelalloc,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,lazytime,,errors=continue [ 30.895948][ T540] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 30.912889][ T540] ext4 filesystem being mounted at /root/syzkaller.9CbLkG/5/bus supports timestamps until 2038 (0x7fffffff) [ 31.513149][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.520725][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.527957][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.535532][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.542775][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.550430][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.557648][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.564827][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.566207][ T374] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.572082][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.586781][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.594069][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.603285][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.613841][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.621073][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.634920][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.642447][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.649766][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.666228][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.673426][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.682095][ T574] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 31.691612][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.703172][ T574] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 31.714389][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.721817][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.729335][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.736553][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.743740][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.751529][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.758781][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.765930][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.773338][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.780534][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.788017][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.795214][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.802442][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.809642][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.816848][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.824034][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.831495][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.838734][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.845946][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.853180][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.860328][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.867948][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.875140][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.882460][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.889740][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.896962][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.904135][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.911462][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.918721][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.925904][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.933150][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.940426][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.947984][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.955165][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.962419][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.966299][ T374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.969599][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.980650][ T374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.987504][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.987524][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 31.997459][ T374] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 32.008249][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.015649][ T374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.020884][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.031643][ T374] usb 2-1: config 0 descriptor?? [ 32.035966][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.056223][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.063535][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.070837][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.078102][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.085283][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.095455][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.097038][ T573] F2FS-fs (loop4): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 32.102799][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.102812][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.102825][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.102838][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.102851][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.102870][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.102883][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.102901][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.117487][ T573] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 32.119363][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.139872][ T573] F2FS-fs (loop4): invalid crc value [ 32.140673][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.149800][ T573] F2FS-fs (loop4): Found nat_bits in checkpoint [ 32.169949][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.210937][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.226224][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.226864][ T573] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 32.233502][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.240263][ T573] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 32.251477][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.254118][ T573] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 32.261389][ T471] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 32.276764][ T471] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 32.293199][ T588] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.339939][ T538] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 32.356963][ T538] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=538 comm=syz.1.39 [ 32.376876][ T538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 32.464508][ T601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=601 comm=syz.2.51 [ 32.699030][ T601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.51'. [ 32.708451][ T601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=601 comm=syz.2.51 [ 32.817517][ T588] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 32.826752][ T588] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 33.003768][ T624] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 33.003768][ T624] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 33.003768][ T624] [ 33.021583][ T374] usbhid 2-1:0.0: can't add hid device: -71 [ 33.027720][ T374] usbhid: probe of 2-1:0.0 failed with error -71 [ 33.030523][ T624] EXT4-fs (loop1): Unrecognized mount option "fsname=^_" or missing value [ 33.042628][ T374] usb 2-1: USB disconnect, device number 2 [ 33.132739][ T657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=657 comm=syz.3.60 [ 33.161316][ T23] kauditd_printk_skb: 26 callbacks suppressed [ 33.161324][ T23] audit: type=1400 audit(1719618530.810:190): avc: denied { create } for pid=656 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.206245][ T653] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.259236][ T23] audit: type=1400 audit(1719618530.910:191): avc: denied { ioctl } for pid=656 comm="syz.3.60" path="/dev/cpu/0/msr" dev="devtmpfs" ino=9168 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 33.307040][ T23] audit: type=1400 audit(1719618530.910:192): avc: denied { append } for pid=668 comm="syz.0.65" name="event2" dev="devtmpfs" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.310899][ T673] EXT4-fs (loop0): Test dummy encryption mode enabled [ 33.340609][ T673] EXT4-fs (loop0): Ignoring removed oldalloc option [ 33.347287][ T673] EXT4-fs (loop0): Test dummy encryption mode enabled [ 33.358625][ T662] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.365622][ T662] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.365650][ T673] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 33.373083][ T662] device bridge_slave_0 entered promiscuous mode [ 33.387353][ T662] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.394176][ T662] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.401747][ T662] device bridge_slave_1 entered promiscuous mode [ 33.444359][ T662] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.451238][ T662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.458348][ T662] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.465078][ T662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.485669][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.493426][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.500881][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.527253][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.535952][ T641] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.542829][ T641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.550261][ T374] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.567702][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.577990][ T673] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 33.578190][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.587750][ T653] usb 3-1: config 0 has an invalid interface number: 200 but max is 1 [ 33.594137][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.602992][ T653] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.610178][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.626570][ T653] usb 3-1: config 0 has no interface number 1 [ 33.627393][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.635623][ T23] audit: type=1400 audit(1719618531.280:193): avc: denied { setopt } for pid=679 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.651100][ T681] input: syz1 as /devices/virtual/input/input4 [ 33.666716][ T653] usb 3-1: config 0 interface 200 has no altsetting 0 [ 33.673640][ T23] audit: type=1400 audit(1719618531.280:194): avc: denied { write } for pid=679 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.678722][ T673] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000003,delalloc,,errors=continue [ 33.694729][ T23] audit: type=1400 audit(1719618531.290:195): avc: denied { ioctl } for pid=679 comm="syz.3.68" path="/dev/uinput" dev="devtmpfs" ino=845 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.712968][ T673] ext4 filesystem being mounted at /root/syzkaller.rOoS8E/9/file0 supports timestamps until 2038 (0x7fffffff) [ 33.758672][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.773981][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.781180][ T641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.790843][ T673] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #15: comm syz.0.66: corrupted xattr block 32 [ 33.802992][ T673] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 33.806458][ T374] usb 2-1: Using ep0 maxpacket: 32 [ 33.812672][ T673] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #15: comm syz.0.66: corrupted xattr block 32 [ 33.817372][ T23] audit: type=1400 audit(1719618531.460:196): avc: denied { rename } for pid=672 comm="syz.0.66" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.828992][ T673] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 33.859964][ T673] EXT4-fs error (device loop0): __ext4_new_inode:1122: comm syz.0.66: failed to insert inode 16: doubly allocated? [ 33.862931][ T23] audit: type=1400 audit(1719618531.510:197): avc: denied { unlink } for pid=672 comm="syz.0.66" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.893854][ T653] usb 3-1: New USB device found, idVendor=0403, idProduct=bdc8, bcdDevice=cb.ec [ 33.900877][ T23] audit: type=1400 audit(1719618531.520:198): avc: denied { setattr } for pid=672 comm="syz.0.66" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.904526][ T653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.932328][ T653] usb 3-1: Product: syz [ 33.932337][ T653] usb 3-1: Manufacturer: syz [ 33.932344][ T653] usb 3-1: SerialNumber: syz [ 33.937173][ T653] usb 3-1: config 0 descriptor?? [ 33.951730][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.952326][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.952513][ T686] incfs: mount failed -22 [ 33.954739][ T23] audit: type=1400 audit(1719618531.600:199): avc: denied { mounton } for pid=672 comm="syz.0.66" path="/root/syzkaller.rOoS8E/9/file0/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 33.986604][ T374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.017639][ T653] usb 3-1: Ignoring serial port reserved for JTAG [ 34.022305][ T424] EXT4-fs error (device loop0) in ext4_free_inode:352: Corrupt filesystem [ 34.024723][ T653] ftdi_sio 3-1:0.200: FTDI USB Serial Device converter detected [ 34.042208][ T653] usb 3-1: Detected FT2232C [ 34.043458][ T424] EXT4-fs error (device loop0) in ext4_free_inode:352: Corrupt filesystem [ 34.046889][ T374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.056120][ T424] EXT4-fs error (device loop0) in ext4_free_inode:352: Corrupt filesystem [ 34.064488][ T374] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 34.074143][ T424] EXT4-fs error (device loop0) in ext4_free_inode:352: Corrupt filesystem [ 34.081741][ T374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.090707][ T424] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #15: comm syz-executor: corrupted xattr block 32 [ 34.100640][ T374] usb 2-1: config 0 descriptor?? [ 34.113185][ T424] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 34.123915][ T424] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #15: comm syz-executor: corrupted xattr block 32 [ 34.135837][ T424] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 34.144906][ T424] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2930: inode #15: comm syz-executor: corrupted xattr block 32 [ 34.157160][ T424] EXT4-fs warning (device loop0): ext4_evict_inode:321: xattr delete (err -117) [ 34.171191][ T374] hub 2-1:0.0: USB hub found [ 34.226274][ T653] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 34.246309][ T653] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 34.248614][ T179] device bridge_slave_1 left promiscuous mode [ 34.261390][ T653] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 34.261771][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.277472][ T653] usb 3-1: USB disconnect, device number 2 [ 34.283173][ T179] device bridge_slave_0 left promiscuous mode [ 34.283765][ T653] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 34.298191][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.298472][ T653] ftdi_sio 3-1:0.200: device disconnected [ 34.376321][ T374] hub 2-1:0.0: 1 port detected [ 34.489598][ T695] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.496499][ T695] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.503852][ T695] device bridge_slave_0 entered promiscuous mode [ 34.511279][ T695] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.520755][ T695] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.528628][ T695] device bridge_slave_1 entered promiscuous mode [ 34.598002][ T692] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 34.605514][ T692] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 34.620493][ T692] F2FS-fs (loop4): invalid crc value [ 34.637468][ T692] F2FS-fs (loop4): Found nat_bits in checkpoint [ 34.678458][ T692] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 34.685393][ T692] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 34.685786][ T695] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.699739][ T695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.706972][ T695] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.713799][ T695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.721880][ T662] attempt to access beyond end of device [ 34.721880][ T662] loop4: rw=2049, want=45104, limit=40427 [ 34.741281][ T700] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.748721][ T700] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.756132][ T700] device bridge_slave_0 entered promiscuous mode [ 34.771578][ T710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 34.807621][ T700] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.814539][ T700] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.821950][ T700] device bridge_slave_1 entered promiscuous mode [ 34.912326][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.924819][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.939129][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.083539][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.143439][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.166616][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.196499][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.204407][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.213512][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.222577][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.269062][ T374] usb 2-1: USB disconnect, device number 3 [ 35.309038][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.336513][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.364564][ T727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=727 comm=syz.4.76 [ 35.377189][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.390079][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.476246][ T648] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.543029][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.560669][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.585530][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.595645][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.615640][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.622509][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.639978][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.650137][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.658387][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.665203][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.672508][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.681608][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.689191][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.729698][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.756573][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.758486][ T741] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 35.765118][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.833594][ T746] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.856370][ T648] usb 3-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice=ac.5f [ 35.865355][ T648] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.874585][ T648] usb 3-1: config 0 descriptor?? [ 35.879809][ T736] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.886828][ T736] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.894208][ T736] device bridge_slave_0 entered promiscuous mode [ 35.901543][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.910154][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.918854][ T179] device bridge_slave_1 left promiscuous mode [ 35.924935][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.932279][ T179] device bridge_slave_0 left promiscuous mode [ 35.939177][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.947246][ T179] device bridge_slave_1 left promiscuous mode [ 35.953670][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.960897][ T179] device bridge_slave_0 left promiscuous mode [ 35.966916][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.059581][ T736] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.066465][ T736] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.073599][ T736] device bridge_slave_1 entered promiscuous mode [ 36.158836][ T648] usb 3-1: USB disconnect, device number 3 [ 36.166280][ T374] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 36.402893][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.410209][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.420276][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.429432][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.437487][ T471] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.444316][ T471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.457306][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.469027][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.477439][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.485794][ T623] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.492706][ T623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.525720][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.533990][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.550418][ T762] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.557419][ T762] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.564683][ T762] device bridge_slave_0 entered promiscuous mode [ 36.572185][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.580111][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.588333][ T762] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.595251][ T762] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.602517][ T762] device bridge_slave_1 entered promiscuous mode [ 36.635926][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.659511][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.681286][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.696989][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.701286][ T767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=767 comm=syz.2.95 [ 36.705367][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.728426][ T374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.742440][ T374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.752893][ T374] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.777276][ T374] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.786129][ T374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.795136][ T374] usb 5-1: config 0 descriptor?? [ 36.808748][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.828025][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.877664][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.885663][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.893940][ T653] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.900798][ T653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.910266][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.918596][ T653] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.925440][ T653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.953398][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.967009][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.982654][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.017758][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.037816][ T653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.070804][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.088927][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.104023][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.173466][ T783] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 37.185049][ T783] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 37.194711][ T783] erofs: (device loop3): z_erofs_vle_normalaccess_readpage: failed to read, err [-117] [ 37.205167][ T783] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 37.214916][ T783] erofs: (device loop3): z_erofs_vle_normalaccess_readpage: failed to read, err [-117] [ 37.245699][ T783] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 37.259214][ T783] erofs: (device loop3): z_erofs_vle_normalaccess_readpage: failed to read, err [-117] [ 37.406303][ T377] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.453801][ T374] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 37.468030][ T374] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 37.480688][ T374] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 37.676350][ T377] usb 1-1: Using ep0 maxpacket: 8 [ 37.691328][ T770] F2FS-fs (loop1): Test dummy encryption mode enabled [ 37.708321][ T770] F2FS-fs (loop1): Found nat_bits in checkpoint [ 37.735050][ T770] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 37.776245][ T374] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 37.796329][ T377] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 37.804662][ T377] usb 1-1: config 179 has no interface number 0 [ 37.811048][ T377] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 37.822223][ T377] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 37.833701][ T377] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 37.843555][ T179] device bridge_slave_1 left promiscuous mode [ 37.844761][ T377] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 37.860558][ T377] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 37.863651][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.873754][ T377] usb 1-1: config 179 interface 65 has no altsetting 0 [ 37.887353][ T377] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 37.896298][ T179] device bridge_slave_0 left promiscuous mode [ 37.896391][ T377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.906406][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.917914][ T179] device bridge_slave_1 left promiscuous mode [ 37.923873][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.931361][ T179] device bridge_slave_0 left promiscuous mode [ 37.936280][ T781] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 37.937368][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.961341][ T377] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5 [ 38.066443][ T800] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 38.079050][ T800] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 38.096227][ T374] usb 4-1: device descriptor read/64, error 18 [ 38.120371][ T800] 9pnet: Insufficient options for proto=fd [ 38.177256][ T781] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 38.188766][ T634] usb 1-1: USB disconnect, device number 2 [ 38.196217][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 38.204511][ T634] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 38.324813][ T805] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.331731][ T805] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.339082][ T805] device bridge_slave_0 entered promiscuous mode [ 38.345737][ T805] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.353512][ T805] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.361003][ T805] device bridge_slave_1 entered promiscuous mode [ 38.405235][ T805] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.412086][ T805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.419250][ T805] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.426071][ T805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.448159][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.455521][ T634] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.463397][ T634] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.473557][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.481576][ T471] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.488436][ T471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.496396][ T374] usb 4-1: device descriptor read/64, error 18 [ 38.504049][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.512409][ T471] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.519251][ T471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.537637][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.548868][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.569699][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.580872][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.594043][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.607154][ T648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.620415][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.743703][ T23] kauditd_printk_skb: 17 callbacks suppressed [ 38.743713][ T23] audit: type=1400 audit(1719618536.390:217): avc: denied { mounton } for pid=812 comm="syz.0.106" path="/root/syzkaller.psMgu1/3/file0" dev="sda1" ino=2014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 38.776396][ T374] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 38.846828][ T23] audit: type=1400 audit(1719618536.500:218): avc: denied { setopt } for pid=812 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.196880][ T179] device bridge_slave_1 left promiscuous mode [ 39.203023][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.210218][ T374] usb 4-1: device descriptor read/64, error 18 [ 39.216826][ T179] device bridge_slave_0 left promiscuous mode [ 39.222757][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.363316][ T648] usb 5-1: USB disconnect, device number 2 [ 39.591077][ T23] audit: type=1400 audit(1719618537.240:219): avc: denied { connect } for pid=834 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.610860][ T374] usb 4-1: device descriptor read/64, error 18 [ 39.736299][ T374] usb usb4-port1: attempt power cycle [ 39.770124][ T837] syz.2.114[837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.770172][ T837] syz.2.114[837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.810720][ T843] 9pnet: p9_errstr2errno: server reported unknown error á [ 40.038728][ T832] F2FS-fs (loop1): Test dummy encryption mode enabled [ 40.053282][ T832] F2FS-fs (loop1): Found nat_bits in checkpoint [ 40.077765][ T832] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 40.126232][ T634] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 40.146231][ T374] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 40.236275][ T374] usb 4-1: Invalid ep0 maxpacket: 48 [ 40.301045][ T23] audit: type=1400 audit(1719618537.950:220): avc: denied { block_suspend } for pid=858 comm="syz.0.121" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.386199][ T374] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 40.395385][ T23] audit: type=1400 audit(1719618538.040:221): avc: denied { remove_name } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=888 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.421167][ T23] audit: type=1400 audit(1719618538.040:222): avc: denied { rename } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=888 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.443772][ T634] usb 3-1: too many configurations: 183, using maximum allowed: 8 [ 40.451825][ T23] audit: type=1400 audit(1719618538.040:223): avc: denied { create } for pid=144 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.530623][ T374] usb 4-1: device descriptor read/8, error -71 [ 40.586431][ T867] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.587430][ T634] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 40.593323][ T867] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.600930][ T634] usb 3-1: can't read configurations, error -61 [ 40.614476][ T867] device bridge_slave_0 entered promiscuous mode [ 40.627505][ T867] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.634630][ T867] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.641675][ T23] audit: type=1400 audit(1719618538.280:224): avc: denied { nlmsg_write } for pid=871 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.646761][ T867] device bridge_slave_1 entered promiscuous mode [ 40.668212][ T23] audit: type=1400 audit(1719618538.280:225): avc: denied { bind } for pid=871 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.668226][ T23] audit: type=1400 audit(1719618538.280:226): avc: denied { name_bind } for pid=871 comm="syz.3.124" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 40.710579][ T874] fscrypt (sda1, inode 2013): Direct key flag not allowed with different contents and filenames modes [ 40.722563][ T874] fuse: Bad value for 'fd' [ 40.756261][ T374] usb 4-1: device descriptor read/8, error -71 [ 40.762279][ T634] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 40.772192][ T867] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.779059][ T867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.786390][ T867] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.793204][ T867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.815187][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.823457][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.828871][ T877] FAT-fs (loop3): Directory bread(block 1285) failed [ 40.838069][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.847601][ T428] device bridge_slave_1 left promiscuous mode [ 40.849678][ T877] FAT-fs (loop3): Directory bread(block 1285) failed [ 40.853602][ T428] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.860920][ T877] FAT-fs (loop3): Directory bread(block 1285) failed [ 40.873630][ T877] FAT-fs (loop3): Directory bread(block 1285) failed [ 40.873646][ T428] device bridge_slave_0 left promiscuous mode [ 40.882705][ T877] FAT-fs (loop3): Directory bread(block 1285) failed [ 40.886631][ T428] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.893279][ T374] usb usb4-port1: unable to enumerate USB device [ 40.900730][ T877] FAT-fs (loop3): Directory bread(block 1285) failed [ 40.912965][ T877] FAT-fs (loop3): Directory bread(block 1285) failed [ 40.924533][ T877] FAT-fs (loop3): Directory bread(block 1285) failed [ 40.931326][ T877] FAT-fs (loop3): Directory bread(block 1285) failed [ 40.938072][ T877] FAT-fs (loop3): Directory bread(block 1285) failed [ 41.002225][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.010648][ T471] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.017511][ T471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.028174][ T880] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 41.056335][ T634] usb 3-1: too many configurations: 183, using maximum allowed: 8 [ 41.078164][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.086878][ T471] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.093738][ T471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.112057][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.160603][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.176358][ T634] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 41.186580][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.194075][ T885] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 41.196607][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.210408][ T634] usb 3-1: can't read configurations, error -61 [ 41.227649][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.235987][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.240573][ T634] usb usb3-port1: attempt power cycle [ 41.245171][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.251437][ T885] EXT4-fs (loop0): orphan cleanup on readonly fs [ 41.267634][ T885] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz.0.130: bg 0: block 248: padding at end of block bitmap is not set [ 41.283476][ T885] EXT4-fs (loop0): 1 truncate cleaned up [ 41.289693][ T885] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,grpquota,quota,noblock_validity,nodiscard,nomblk_io_submit,,errors=continue [ 41.401553][ T903] overlayfs: failed to resolve './file1': -2 [ 41.526201][ T655] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 41.676202][ T634] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 41.706484][ T18] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 41.806287][ T634] usb 3-1: too many configurations: 183, using maximum allowed: 8 [ 41.886407][ T655] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 41.897334][ T655] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.907497][ T655] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 41.916536][ T655] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.925328][ T655] usb 5-1: config 0 descriptor?? [ 41.933362][ T634] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 41.940970][ T634] usb 3-1: can't read configurations, error -61 [ 41.976200][ T18] usb 1-1: device descriptor read/64, error 18 [ 42.096327][ T634] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 42.226300][ T634] usb 3-1: too many configurations: 183, using maximum allowed: 8 [ 42.366308][ T634] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 42.373717][ T634] usb 3-1: can't read configurations, error -61 [ 42.380282][ T634] usb usb3-port1: unable to enumerate USB device [ 42.386203][ T18] usb 1-1: device descriptor read/64, error 18 [ 42.427793][ T655] kye 0003:0458:0153.0006: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.4-1/input0 [ 42.458167][ T920] capability: warning: `syz.1.138' uses 32-bit capabilities (legacy support in use) [ 42.619795][ T377] usb 5-1: USB disconnect, device number 3 [ 42.716236][ T18] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 42.977550][ T936] rtc_cmos 00:00: Alarms can be up to one day in the future [ 43.026221][ T18] usb 1-1: device descriptor read/64, error 18 [ 43.176916][ T941] overlayfs: failed to resolve './file1': -2 [ 43.219102][ T938] F2FS-fs (loop3): Found nat_bits in checkpoint [ 43.252781][ T938] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 43.833079][ T23] kauditd_printk_skb: 9 callbacks suppressed [ 43.833096][ T23] audit: type=1400 audit(1719618541.088:234): avc: denied { connect } for pid=942 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.863294][ T954] 9pnet: p9_errstr2errno: server reported unknown error á~zxªüø [ 43.880281][ T23] audit: type=1400 audit(1719618541.098:235): avc: denied { shutdown } for pid=942 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.900857][ T23] audit: type=1400 audit(1719618541.490:236): avc: denied { unmount } for pid=762 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.908355][ T762] attempt to access beyond end of device [ 43.908355][ T762] loop3: rw=2049, want=45112, limit=40427 [ 43.967366][ T956] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 43.971849][ T18] usb 1-1: device descriptor read/64, error 18 [ 43.977625][ T956] ext4 filesystem being mounted at /root/syzkaller.9CbLkG/25/file0 supports timestamps until 2038 (0x7fffffff) [ 44.113144][ T18] usb usb1-port1: attempt power cycle [ 44.424515][ T978] 9pnet: p9_errstr2errno: server reported unknown error á~zxªüø [ 44.455971][ T23] audit: type=1400 audit(1719618542.033:237): avc: denied { mounton } for pid=975 comm="syz.1.155" path="/proc/975/cgroup" dev="proc" ino=16969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 44.646268][ T18] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 44.677419][ T980] netlink: 'syz.0.156': attribute type 1 has an invalid length. [ 44.699930][ T980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 44.968241][ T997] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 45.024614][ T967] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 45.051754][ T967] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 45.061129][ T23] audit: type=1400 audit(1719618542.585:238): avc: denied { write } for pid=996 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 45.065908][ T997] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 45.098089][ T967] F2FS-fs (loop4): invalid crc value [ 45.103356][ T997] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 45.116663][ T997] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.116663][ T997] [ 45.126797][ T997] EXT4-fs (loop1): Total free blocks count 0 [ 45.133766][ T967] F2FS-fs (loop4): Found nat_bits in checkpoint [ 45.147541][ T997] EXT4-fs (loop1): Free/Dirty block details [ 45.164647][ T23] audit: type=1400 audit(1719618542.688:239): avc: denied { relabelfrom } for pid=996 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 45.178679][ T997] EXT4-fs (loop1): free_blocks=68451041280 [ 45.197210][ T23] audit: type=1400 audit(1719618542.688:240): avc: denied { relabelto } for pid=996 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 45.206482][ T18] usb 1-1: device not accepting address 5, error -71 [ 45.255055][ T997] EXT4-fs (loop1): dirty_blocks=64 [ 45.262077][ T997] EXT4-fs (loop1): Block reservation details [ 45.268191][ T997] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 45.328443][ T23] audit: type=1400 audit(1719618542.837:241): avc: denied { watch watch_reads } for pid=996 comm="syz.1.160" path="/proc/996/task/997" dev="proc" ino=16321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 45.329361][ T967] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 45.359704][ T967] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 45.624599][ T965] F2FS-fs (loop2): Found nat_bits in checkpoint [ 45.740335][ T23] audit: type=1326 audit(1719618543.230:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1017 comm="syz.1.162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8837af6b99 code=0x0 [ 45.740480][ T965] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 45.825878][ T23] audit: type=1400 audit(1719618543.296:243): avc: denied { read write } for pid=964 comm="syz.2.154" name="file1" dev="loop2" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.852687][ T1020] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 45.872605][ T1020] ext4 filesystem being mounted at /root/syzkaller.psMgu1/13/bus supports timestamps until 2038 (0x7fffffff) [ 46.426281][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.559654][ T377] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 46.567195][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.575120][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.582863][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.590063][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.597853][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.605476][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.612951][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.620794][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.628155][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.635767][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.643047][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.650889][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.658356][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.665558][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.673338][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.680931][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.688883][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.696478][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.704111][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.711478][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.718666][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.726585][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.739572][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.747314][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.754705][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.761900][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.769455][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.776844][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.784488][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.791678][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.799138][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.807770][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.814968][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.822877][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.837056][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.844253][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.862824][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.870975][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.878171][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.885746][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.893134][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.900326][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.908823][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.916651][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.924262][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.931469][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.939103][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.946690][ T377] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.957423][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.964546][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.971809][ T377] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 30 [ 46.984653][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.991924][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.999226][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.006414][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.013724][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.020937][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.028108][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.035469][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.042692][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.049849][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.057160][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.064288][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.071458][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.079131][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.086366][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.093611][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.100717][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.108242][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.115791][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.122995][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.130214][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.137497][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.144595][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.151831][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.159200][ T377] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.168017][ T377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.175886][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.183071][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.190262][ T377] usb 3-1: Product: syz [ 47.194224][ T377] usb 3-1: Manufacturer: syz [ 47.198818][ T377] usb 3-1: SerialNumber: syz [ 47.203459][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.210678][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.218272][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.225893][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.233125][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.240514][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.248305][ T124] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 47.258176][ T124] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 47.266572][ T1037] F2FS-fs (loop3): invalid crc value [ 47.277811][ T1037] F2FS-fs (loop3): Found nat_bits in checkpoint [ 47.327685][ T1040] F2FS-fs (loop1): Found nat_bits in checkpoint [ 47.363751][ T1037] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 47.400318][ T1055] netlink: 28 bytes leftover after parsing attributes in process `syz.4.166'. [ 47.450332][ T1045] attempt to access beyond end of device [ 47.450332][ T1045] loop3: rw=2049, want=45120, limit=40427 [ 47.461625][ T377] cdc_ncm 3-1:1.0: bind() failure [ 47.468980][ T377] usb 3-1: USB disconnect, device number 8 [ 47.534255][ T1057] 9pnet: p9_fd_create_unix (1057): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 47.613209][ T1040] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 47.713870][ T762] attempt to access beyond end of device [ 47.713870][ T762] loop3: rw=524288, want=45072, limit=40427 [ 47.727189][ T1040] attempt to access beyond end of device [ 47.727189][ T1040] loop1: rw=2049, want=53792, limit=40427 [ 47.731879][ T762] attempt to access beyond end of device [ 47.731879][ T762] loop3: rw=0, want=45072, limit=40427 [ 47.740595][ T1040] attempt to access beyond end of device [ 47.740595][ T1040] loop1: rw=0, want=53792, limit=40427 [ 47.762582][ T1040] attempt to access beyond end of device [ 47.762582][ T1040] loop1: rw=0, want=53792, limit=40427 [ 47.773627][ T1040] attempt to access beyond end of device [ 47.773627][ T1040] loop1: rw=0, want=53792, limit=40427 [ 47.791116][ T1040] attempt to access beyond end of device [ 47.791116][ T1040] loop1: rw=0, want=53792, limit=40427 [ 47.840368][ T1062] syz.4.166 (pid 1062) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 47.904982][ T867] attempt to access beyond end of device [ 47.904982][ T867] loop1: rw=2049, want=45104, limit=40427 [ 48.384633][ T1066] 9pnet: Unknown protocol version 9p2000aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 48.410706][ T1064] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.505130][ T1064] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.512554][ T1064] device bridge_slave_0 entered promiscuous mode [ 48.522954][ T1064] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.529813][ T1064] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.537154][ T1064] device bridge_slave_1 entered promiscuous mode [ 48.603794][ T1064] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.610687][ T1064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.617799][ T1064] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.624655][ T1064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.650988][ T1074] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 48.673409][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.682168][ T655] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.689351][ T655] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.700695][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.728455][ T634] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.735328][ T634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.813005][ T1081] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.919140][ T655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.927460][ T655] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.934331][ T655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.952041][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.964905][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.966171][ T1081] EXT4-fs error (device loop2): ext4_orphan_get:1236: inode #17: comm syz.2.174: iget: bad i_size value: -6917529027641081756 [ 48.986020][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.991568][ T1081] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz.2.174: couldn't read orphan inode 17 (err -117) [ 48.998056][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.013450][ T428] device bridge_slave_1 left promiscuous mode [ 49.019798][ T1081] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 49.028674][ T428] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.038603][ T428] device bridge_slave_0 left promiscuous mode [ 49.045269][ T428] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.118905][ T1081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.174'. [ 49.138445][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.149544][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.160175][ T1081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 49.175354][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.183234][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.196538][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.204669][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.217738][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.267340][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.277959][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.292619][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.805756][ T23] kauditd_printk_skb: 9 callbacks suppressed [ 49.805772][ T23] audit: type=1400 audit(1719618547.019:253): avc: denied { create } for pid=1099 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 49.849674][ T1107] 9pnet: p9_errstr2errno: server reported unknown error á~zxªüø [ 50.032674][ T23] audit: type=1400 audit(1719618547.243:254): avc: denied { mount } for pid=1119 comm="syz.2.183" name="/" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 50.078407][ T23] audit: type=1400 audit(1719618547.290:255): avc: denied { bind } for pid=1123 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.128247][ T23] audit: type=1400 audit(1719618547.318:256): avc: denied { unmount } for pid=358 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 50.149772][ T23] audit: type=1400 audit(1719618547.327:257): avc: denied { map } for pid=1125 comm="syz.1.185" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 50.175185][ T23] audit: type=1400 audit(1719618547.327:258): avc: denied { execute } for pid=1125 comm="syz.1.185" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 50.298927][ T23] audit: type=1400 audit(1719618547.477:259): avc: denied { connect } for pid=1133 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.320327][ T1130] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 50.333070][ T1130] ext4 filesystem being mounted at /root/syzkaller.9CbLkG/31/file0 supports timestamps until 2038 (0x7fffffff) [ 50.345127][ T23] audit: type=1400 audit(1719618547.477:260): avc: denied { write } for pid=1133 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.374935][ T1130] x_tables: duplicate underflow at hook 1 [ 50.388681][ T23] audit: type=1400 audit(1719618547.561:261): avc: denied { setattr } for pid=1129 comm="syz.2.186" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.417525][ T23] audit: type=1400 audit(1719618547.580:262): avc: denied { mount } for pid=1146 comm="syz.1.192" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 50.531816][ T1147] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 50.599975][ T616] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 50.701724][ T634] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 50.843560][ T1165] EXT4-fs (loop4): Online defrag not supported with bigalloc [ 51.134610][ T616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.145498][ T616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.155047][ T616] usb 4-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 51.164384][ T616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.173029][ T616] usb 4-1: config 0 descriptor?? [ 51.239107][ T1169] FAT-fs (loop0): Directory bread(block 64) failed [ 51.245559][ T1169] FAT-fs (loop0): Directory bread(block 65) failed [ 51.252089][ T1169] FAT-fs (loop0): Directory bread(block 66) failed [ 51.258329][ T1169] FAT-fs (loop0): Directory bread(block 67) failed [ 51.264741][ T1169] FAT-fs (loop0): Directory bread(block 68) failed [ 51.271090][ T1169] FAT-fs (loop0): Directory bread(block 69) failed [ 51.277606][ T1169] FAT-fs (loop0): Directory bread(block 70) failed [ 51.283867][ T1169] FAT-fs (loop0): Directory bread(block 71) failed [ 51.290313][ T1169] FAT-fs (loop0): Directory bread(block 72) failed [ 51.296750][ T1169] FAT-fs (loop0): Directory bread(block 73) failed [ 51.368557][ T634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.379470][ T634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.389283][ T634] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 51.398150][ T634] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.407122][ T634] usb 2-1: config 0 descriptor?? [ 51.434663][ T1139] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 51.688338][ T1174] fscrypt: AES-128-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 51.716092][ T616] wacom 0003:056A:030A.0008: hidraw0: USB HID v0.00 Device [HID 056a:030a] on usb-dummy_hcd.3-1/input0 [ 51.736212][ T1184] input: syz0 as /devices/virtual/input/input9 [ 51.780666][ T1174] fscrypt: AES-128-CBC-ESSIV using implementation "essiv(cbc-aes-aesni,sha256-avx2)" [ 51.785852][ T1148] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.887856][ T1188] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 51.914378][ T124] usb 4-1: USB disconnect, device number 6 [ 51.930691][ T1188] EXT4-fs error (device loop2): ext4_orphan_get:1236: inode #16: comm syz.2.199: casefold flag without casefold feature [ 51.945576][ T1188] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 51.955262][ T1188] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.199: bg 0: block 64: padding at end of block bitmap is not set [ 52.000013][ T1195] 9pnet: p9_errstr2errno: server reported unknown error á~zxªüø [ 52.016347][ T1188] EXT4-fs (loop2): 1 orphan inode deleted [ 52.044418][ T1188] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,block_validity,grpid,,errors=continue [ 52.081874][ T1188] ext4 filesystem being mounted at /root/syzkaller.9CbLkG/36/control supports timestamps until 2038 (0x7fffffff) [ 52.159067][ T1188] syz.2.199 (1188) used greatest stack depth: 20184 bytes left [ 52.513624][ T634] usbhid 2-1:0.0: can't add hid device: -71 [ 52.519689][ T634] usbhid: probe of 2-1:0.0 failed with error -71 [ 52.527022][ T634] usb 2-1: USB disconnect, device number 4 [ 53.021953][ T1225] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 53.029686][ T1227] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 53.043564][ T1225] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 53.052094][ T1227] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 53.061775][ T1225] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 53.069788][ T1227] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 53.123123][ T1225] System zones: 1-12 [ 53.126935][ T1227] System zones: 1-12 [ 53.149491][ T1227] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2221: inode #15: comm syz.4.210: corrupted in-inode xattr [ 53.163474][ T1225] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2221: inode #15: comm syz.3.209: corrupted in-inode xattr [ 53.176647][ T1227] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz.4.210: couldn't read orphan inode 15 (err -117) [ 53.188588][ T1225] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz.3.209: couldn't read orphan inode 15 (err -117) [ 53.200489][ T1227] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 53.220100][ T1225] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 53.249441][ T1237] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 53.335519][ T1237] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,max_dir_size_kb=0x0000000000000001,dioread_lock,mblk_io_submit,abort,lazytime,noload,nojournal_checksum,noauto_da_alloc,,errors=continue [ 53.423140][ T649] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 53.689590][ T649] usb 1-1: Using ep0 maxpacket: 16 [ 53.706566][ T1249] input: syz0 as /devices/virtual/input/input10 [ 53.872419][ T649] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.882147][ T649] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.895804][ T649] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 53.905740][ T649] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.917546][ T649] usb 1-1: config 0 descriptor?? [ 53.961053][ T649] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 54.185147][ T1249] EXT4-fs error (device loop1): ext4_orphan_get:1236: inode #16: comm syz.1.213: casefold flag without casefold feature [ 54.198969][ T1249] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 54.207848][ T1249] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.213: bg 0: block 64: padding at end of block bitmap is not set [ 54.222727][ T1249] EXT4-fs (loop1): 1 orphan inode deleted [ 54.228537][ T1249] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,block_validity,grpid,,errors=continue [ 54.240898][ T1249] ext4 filesystem being mounted at /root/syzkaller.ULpT6E/21/control supports timestamps until 2038 (0x7fffffff) [ 54.387547][ T1263] netlink: 20 bytes leftover after parsing attributes in process `syz.4.219'. [ 54.419531][ T1263] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.426628][ T1263] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.437794][ T1263] device bridge_slave_1 left promiscuous mode [ 54.443879][ T1263] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.453197][ T1263] device bridge_slave_0 left promiscuous mode [ 54.459434][ T1263] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.470073][ T649] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 54.720485][ T1274] IPv6: sit1: Disabled Multicast RS [ 54.772570][ T1276] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2930: inode #16: comm syz.2.222: corrupted xattr block 8 [ 54.784558][ T1276] EXT4-fs warning (device loop2): ext4_evict_inode:321: xattr delete (err -117) [ 54.794022][ T1276] EXT4-fs (loop2): 1 orphan inode deleted [ 54.799607][ T1276] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 54.809083][ T1276] ext4 filesystem being mounted at /root/syzkaller.9CbLkG/44/bus supports timestamps until 2038 (0x7fffffff) [ 55.036561][ T655] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 55.039609][ T74] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 55.058054][ T649] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.069045][ T649] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.078598][ T649] usb 4-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 55.087607][ T649] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.096111][ T649] usb 4-1: config 0 descriptor?? [ 55.314574][ T74] usb 2-1: Using ep0 maxpacket: 32 [ 55.358571][ T1258] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 55.432245][ T655] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.443019][ T655] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.452498][ T655] usb 5-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 55.461852][ T655] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.470975][ T655] usb 5-1: config 0 descriptor?? [ 55.606641][ T649] wacom 0003:056A:030A.0009: hidraw0: USB HID v0.00 Device [HID 056a:030a] on usb-dummy_hcd.3-1/input0 [ 55.635393][ T74] usb 2-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 55.644299][ T74] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.652548][ T74] usb 2-1: Product: syz [ 55.656593][ T74] usb 2-1: Manufacturer: syz [ 55.660930][ T74] usb 2-1: SerialNumber: syz [ 55.666049][ T74] usb 2-1: config 0 descriptor?? [ 55.710554][ T74] usb-storage 2-1:0.0: USB Mass Storage device detected [ 55.717950][ T74] usb-storage 2-1:0.0: This device (04e6,000a,0200 S f2 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 5.4.274-syzkaller-00003-g51e9abf68baf) [ 55.717950][ T74] Please send a copy of this message to and [ 55.747092][ T1279] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 55.822999][ T649] usb 4-1: USB disconnect, device number 7 [ 55.933727][ T1274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 56.001214][ T655] wacom 0003:056A:030A.000A: hidraw0: USB HID v0.00 Device [HID 056a:030a] on usb-dummy_hcd.4-1/input0 [ 56.060565][ T1274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1274 comm=syz.1.221 [ 56.082893][ T649] usb 2-1: USB disconnect, device number 5 [ 56.127014][ T634] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 56.217224][ T23] kauditd_printk_skb: 21 callbacks suppressed [ 56.217232][ T23] audit: type=1400 audit(1719618553.025:272): avc: denied { listen } for pid=1277 comm="syz.4.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.221555][ T124] usb 5-1: USB disconnect, device number 4 [ 56.333261][ T74] usb 1-1: USB disconnect, device number 7 [ 56.394743][ T1295] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.416443][ T634] usb 3-1: device descriptor read/64, error 18 [ 56.421181][ T1295] EXT4-fs error (device loop0): ext4_orphan_get:1236: inode #17: comm syz.0.227: iget: bad i_size value: -6917529027641081756 [ 56.440835][ T1295] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz.0.227: couldn't read orphan inode 17 (err -117) [ 56.452905][ T1295] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 56.499240][ T1295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.227'. [ 56.532595][ T1295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.227'. [ 56.553546][ T1305] input: syz0 as /devices/virtual/input/input17 [ 56.707298][ T1306] EXT4-fs error (device loop3): ext4_orphan_get:1236: inode #16: comm syz.3.229: casefold flag without casefold feature [ 56.708716][ T1315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.232'. [ 56.720230][ T1306] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 56.736163][ T1315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 56.737083][ T1306] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.229: bg 0: block 64: padding at end of block bitmap is not set [ 56.803416][ T1318] 9pnet: p9_errstr2errno: server reported unknown error á~zxªüø [ 56.958102][ T1306] Quota error (device loop3): write_blk: dquota write failed [ 56.965560][ T1306] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 56.975867][ T23] audit: type=1400 audit(1719618553.746:273): avc: denied { mounton } for pid=1314 comm="syz.0.232" path="/root/syzkaller.psMgu1/23/file0" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 [ 56.978789][ T1315] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 57.000833][ T1306] Quota error (device loop3): write_blk: dquota write failed [ 57.015044][ T1306] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 57.021923][ T1315] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 57.033444][ T1315] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 57.037610][ T634] usb 3-1: device descriptor read/64, error 18 [ 57.042352][ T1306] Quota error (device loop3): write_blk: dquota write failed [ 57.055151][ T1315] System zones: 1-12 [ 57.055628][ T1306] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 57.059066][ T23] audit: type=1400 audit(1719618553.812:274): avc: denied { create } for pid=1319 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 57.069238][ T1306] EXT4-fs (loop3): 1 orphan inode deleted [ 57.090157][ T23] audit: type=1400 audit(1719618553.849:275): avc: denied { write } for pid=1319 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 57.094638][ T1306] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,block_validity,grpid,,errors=continue [ 57.115841][ T1315] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2221: inode #15: comm syz.0.232: corrupted in-inode xattr [ 57.126515][ T1306] ext4 filesystem being mounted at /root/syzkaller.gDxbfN/7/control supports timestamps until 2038 (0x7fffffff) [ 57.138487][ T1315] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz.0.232: couldn't read orphan inode 15 (err -117) [ 57.166939][ T1315] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 57.304739][ T1325] request_module fs-rpc_pipefs succeeded, but still no fs? [ 57.380979][ T634] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 57.508333][ T124] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 57.624171][ T1334] FAT-fs (loop1): Directory bread(block 64) failed [ 57.630628][ T1334] FAT-fs (loop1): Directory bread(block 65) failed [ 57.637028][ T1334] FAT-fs (loop1): Directory bread(block 66) failed [ 57.643260][ T1334] FAT-fs (loop1): Directory bread(block 67) failed [ 57.649718][ T1334] FAT-fs (loop1): Directory bread(block 68) failed [ 57.656230][ T1334] FAT-fs (loop1): Directory bread(block 69) failed [ 57.662527][ T1334] FAT-fs (loop1): Directory bread(block 70) failed [ 57.668874][ T1334] FAT-fs (loop1): Directory bread(block 71) failed [ 57.675234][ T1334] FAT-fs (loop1): Directory bread(block 72) failed [ 57.677136][ T634] usb 3-1: device descriptor read/64, error 18 [ 57.681633][ T1334] FAT-fs (loop1): Directory bread(block 73) failed [ 57.816141][ T124] usb 5-1: Invalid ep0 maxpacket: 512 [ 58.051425][ T124] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 58.276004][ T634] usb 3-1: device descriptor read/64, error 18 [ 58.318606][ T124] usb 5-1: Invalid ep0 maxpacket: 512 [ 58.323903][ T124] usb usb5-port1: attempt power cycle [ 58.339964][ T649] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 58.404176][ T634] usb usb3-port1: attempt power cycle [ 58.532640][ T655] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 58.607291][ T649] usb 1-1: Using ep0 maxpacket: 16 [ 58.613999][ T1346] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.630472][ T1346] EXT4-fs error (device loop1): ext4_orphan_get:1236: inode #17: comm syz.1.241: iget: bad i_size value: -6917529027641081756 [ 58.643834][ T1346] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz.1.241: couldn't read orphan inode 17 (err -117) [ 58.655985][ T1346] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 58.668751][ T1346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.241'. [ 58.683527][ T1346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'. [ 58.735612][ T649] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.745410][ T649] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.758549][ T649] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 58.767733][ T124] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 58.775481][ T649] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.784020][ T649] usb 1-1: config 0 descriptor?? [ 58.832444][ T649] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 58.853167][ T634] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 58.863974][ T124] usb 5-1: Invalid ep0 maxpacket: 512 [ 58.928029][ T655] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.938838][ T655] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.948366][ T655] usb 4-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 58.957259][ T655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.965242][ T634] usb 3-1: Invalid ep0 maxpacket: 56 [ 58.971257][ T655] usb 4-1: config 0 descriptor?? [ 59.024176][ T124] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 59.068467][ T1354] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c118, mo2=0002] [ 59.076484][ T1354] System zones: 0-1, 3-12 [ 59.081057][ T1354] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,bsddf,abort,lazytime,debug_want_extra_isize=0x0000000000000080,noauto_da_alloc,norecovery,min_batch_time=0x000000000000ffff,debug,,errors=continue [ 59.131084][ T374] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 59.131129][ T124] usb 5-1: Invalid ep0 maxpacket: 512 [ 59.143821][ T124] usb usb5-port1: unable to enumerate USB device [ 59.228664][ T1341] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 59.479202][ T655] wacom 0003:056A:030A.000B: hidraw0: USB HID v0.00 Device [HID 056a:030a] on usb-dummy_hcd.3-1/input0 [ 59.526622][ T374] usb 2-1: Using ep0 maxpacket: 32 [ 59.586030][ T1364] FAT-fs (loop2): error, clusters badly computed (775 != 1) [ 59.593154][ T1364] FAT-fs (loop2): Filesystem has been set read-only [ 59.599749][ T1364] FAT-fs (loop2): error, clusters badly computed (776 != 2) [ 59.607187][ T1364] FAT-fs (loop2): error, clusters badly computed (777 != 3) [ 59.692917][ T74] usb 4-1: USB disconnect, device number 8 [ 59.849784][ T1375] 9pnet: p9_errstr2errno: server reported unknown error á~zxªüø [ 60.018511][ T374] usb 2-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 60.027440][ T374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.035316][ T374] usb 2-1: Product: syz [ 60.039320][ T374] usb 2-1: Manufacturer: syz [ 60.043732][ T374] usb 2-1: SerialNumber: syz [ 60.048747][ T374] usb 2-1: config 0 descriptor?? [ 60.093746][ T374] usb-storage 2-1:0.0: USB Mass Storage device detected [ 60.101087][ T374] usb-storage 2-1:0.0: This device (04e6,000a,0200 S f2 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 5.4.274-syzkaller-00003-g51e9abf68baf) [ 60.101087][ T374] Please send a copy of this message to and [ 60.275038][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 60.306896][ T1385] cgroup1: Unknown subsys name 'fsname' [ 60.349847][ T1352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 60.438369][ T1352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1352 comm=syz.1.242 [ 60.473000][ T634] usb 2-1: USB disconnect, device number 6 [ 60.495496][ T1399] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 60.503832][ T1399] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 60.512668][ T1399] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 60.520480][ T1399] System zones: 1-12 [ 60.525114][ T1399] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2221: inode #15: comm syz.3.254: corrupted in-inode xattr [ 60.537174][ T1399] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz.3.254: couldn't read orphan inode 15 (err -117) [ 60.548970][ T1399] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 60.669906][ T1406] fuse: Unknown parameter 'g ' [ 60.873738][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 60.910525][ T634] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 60.943055][ T1412] fuse: Unknown parameter 'ghÀÐeid' [ 61.255191][ T634] usb 1-1: USB disconnect, device number 8 [ 61.382849][ T1429] overlayfs: missing 'lowerdir' [ 61.547192][ T74] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 61.687816][ T1441] EXT4-fs (loop3): Ignoring removed orlov option [ 61.731170][ T1441] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,data_err=abort,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,orlov,bsdgroups,max_batch_time=0x0000000000000400,user_xattr,quota,,errors=continue [ 61.894799][ T1454] FAT-fs (loop0): Directory bread(block 64) failed [ 61.901177][ T1454] FAT-fs (loop0): Directory bread(block 65) failed [ 61.907544][ T1454] FAT-fs (loop0): Directory bread(block 66) failed [ 61.913850][ T1454] FAT-fs (loop0): Directory bread(block 67) failed [ 61.920281][ T1454] FAT-fs (loop0): Directory bread(block 68) failed [ 61.926587][ T1454] FAT-fs (loop0): Directory bread(block 69) failed [ 61.932953][ T1454] FAT-fs (loop0): Directory bread(block 70) failed [ 61.939319][ T1454] FAT-fs (loop0): Directory bread(block 71) failed [ 61.945717][ T1454] FAT-fs (loop0): Directory bread(block 72) failed [ 61.951991][ T1454] FAT-fs (loop0): Directory bread(block 73) failed [ 61.953461][ T74] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.969538][ T74] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.979160][ T74] usb 2-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 61.990236][ T74] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.002641][ T74] usb 2-1: config 0 descriptor?? [ 62.061922][ T1424] F2FS-fs (loop4): Test dummy encryption mode enabled [ 62.088601][ T1424] F2FS-fs (loop4): Found nat_bits in checkpoint [ 62.113975][ T1424] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 62.310788][ T1426] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 62.457642][ T1467] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 62.471553][ T1467] ext4 filesystem being mounted at /root/syzkaller.9CbLkG/59/bus supports timestamps until 2038 (0x7fffffff) [ 62.597926][ T74] wacom 0003:056A:030A.000C: hidraw0: USB HID v0.00 Device [HID 056a:030a] on usb-dummy_hcd.1-1/input0 [ 62.625131][ T1473] IPv6: sit1: Disabled Multicast RS [ 62.846392][ T74] usb 2-1: USB disconnect, device number 7 [ 62.865111][ T1477] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c118, mo2=0002] [ 62.883527][ T1477] System zones: 0-1, 3-12 [ 62.888423][ T1477] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,bsddf,abort,lazytime,debug_want_extra_isize=0x0000000000000080,noauto_da_alloc,norecovery,min_batch_time=0x000000000000ffff,debug,,errors=continue [ 62.909842][ T23] kauditd_printk_skb: 8 callbacks suppressed [ 62.909851][ T23] audit: type=1400 audit(1719618559.293:284): avc: denied { write } for pid=1483 comm="syz.0.277" name="usbmon6" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.944072][ T634] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 62.952525][ T23] audit: type=1400 audit(1719618559.293:285): avc: denied { ioctl } for pid=1483 comm="syz.0.277" path="/dev/usbmon6" dev="devtmpfs" ino=832 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.978197][ T23] audit: type=1326 audit(1719618559.321:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1476 comm="syz.3.275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d566c1b99 code=0x0 [ 63.012007][ T1487] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.018851][ T1487] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.026303][ T1487] device bridge_slave_0 entered promiscuous mode [ 63.033525][ T1487] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.040370][ T1487] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.047695][ T1487] device bridge_slave_1 entered promiscuous mode [ 63.115110][ T1487] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.121981][ T1487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.129109][ T1487] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.135867][ T1487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.171522][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.179603][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.187323][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.197750][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.205954][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.212794][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.228606][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.238672][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.245526][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.325506][ T924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.334167][ T924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.355936][ T924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.366511][ T634] usb 3-1: Using ep0 maxpacket: 32 [ 63.418374][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.426939][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.456380][ T924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.464658][ T924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.685364][ T634] usb 3-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 63.694439][ T634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.702980][ T634] usb 3-1: Product: syz [ 63.707199][ T634] usb 3-1: Manufacturer: syz [ 63.711654][ T634] usb 3-1: SerialNumber: syz [ 63.721149][ T634] usb 3-1: config 0 descriptor?? [ 63.760776][ T634] usb-storage 3-1:0.0: USB Mass Storage device detected [ 63.821709][ T634] usb-storage 3-1:0.0: This device (04e6,000a,0200 S f2 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 5.4.274-syzkaller-00003-g51e9abf68baf) [ 63.821709][ T634] Please send a copy of this message to and [ 64.091777][ T1473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 64.147572][ T1473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1473 comm=syz.2.274 [ 64.194973][ T634] usb 3-1: USB disconnect, device number 13 [ 64.275884][ T1505] F2FS-fs (loop1): Test dummy encryption mode enabled [ 64.301596][ T1505] F2FS-fs (loop1): Found nat_bits in checkpoint [ 64.330983][ T1505] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 64.439445][ T1523] overlayfs: missing 'lowerdir' [ 64.807183][ T1473] syz.2.274 (1473) used greatest stack depth: 20152 bytes left [ 64.808185][ T1535] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 64.846443][ T1535] F2FS-fs (loop3): invalid crc value [ 64.852815][ T1535] F2FS-fs (loop3): invalid crc value [ 64.858520][ T1535] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 64.871919][ T124] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 64.975764][ T1548] netlink: 36 bytes leftover after parsing attributes in process `syz.2.294'. [ 65.003994][ T1547] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.011105][ T1547] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.018277][ T1547] device bridge_slave_0 entered promiscuous mode [ 65.028426][ T1547] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.035807][ T1547] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.043426][ T1547] device bridge_slave_1 entered promiscuous mode [ 65.086465][ T374] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 65.086469][ T428] device bridge_slave_1 left promiscuous mode [ 65.086525][ T428] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.106753][ T428] device bridge_slave_0 left promiscuous mode [ 65.113011][ T428] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.128487][ T124] usb 5-1: Using ep0 maxpacket: 32 [ 65.188535][ T1547] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.196007][ T1547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.203074][ T1547] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.209888][ T1547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.239243][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.248025][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.255099][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.264976][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.272992][ T634] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.279929][ T634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.289090][ T124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.303044][ T124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.313897][ T124] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 65.327850][ T124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.337087][ T124] usb 5-1: config 0 descriptor?? [ 65.342643][ T1557] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 65.350740][ T1557] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 65.359968][ T1557] EXT4-fs (loop3): 1 truncate cleaned up [ 65.365564][ T1557] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,usrjquota=.errors=continue,noload,data_err=ignore,grpjquota="errors=continue,jqfmt=vfsold,noblock_validity,,errors=continue [ 65.385933][ T374] usb 1-1: device descriptor read/64, error 18 [ 65.393633][ T1557] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.297: Logical block already allocated [ 65.405328][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.405966][ T1557] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.413792][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.429629][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.437975][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.445993][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.454117][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.462619][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.469441][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.476879][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.484907][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.523263][ T23] audit: type=1400 audit(1719618561.725:287): avc: denied { write } for pid=1562 comm="syz.1.296" path="socket:[20310]" dev="sockfs" ino=20310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.525465][ T1563] netlink: 56 bytes leftover after parsing attributes in process `syz.1.296'. [ 65.834085][ T374] usb 1-1: device descriptor read/64, error 18 [ 65.867617][ T124] greenasia 0003:0E8F:0012.000D: item fetching failed at offset 0/3 [ 65.879543][ T1569] EXT4-fs (loop2): Unrecognized mount option "func=POLICY_CHECK" or missing value [ 65.889219][ T124] greenasia 0003:0E8F:0012.000D: parse failed [ 65.895328][ T124] greenasia: probe of 0003:0E8F:0012.000D failed with error -22 [ 66.084206][ T655] usb 5-1: USB disconnect, device number 9 [ 66.122738][ T374] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 66.326164][ T1588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.304'. [ 66.379199][ T1572] F2FS-fs (loop1): Test dummy encryption mode enabled [ 66.411703][ T374] usb 1-1: device descriptor read/64, error 18 [ 66.445412][ T1572] F2FS-fs (loop1): Found nat_bits in checkpoint [ 66.494018][ T1593] IPv6: sit1: Disabled Multicast RS [ 66.514774][ T1572] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 66.785551][ T18] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 66.838995][ T374] usb 1-1: device descriptor read/64, error 18 [ 66.945897][ T124] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 66.978004][ T374] usb usb1-port1: attempt power cycle [ 66.979246][ T1602] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.990275][ T1602] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.997443][ T1602] device bridge_slave_0 entered promiscuous mode [ 67.004833][ T1602] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.011784][ T1602] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.018864][ T1602] device bridge_slave_1 entered promiscuous mode [ 67.042115][ T18] usb 4-1: Using ep0 maxpacket: 32 [ 67.065960][ T1602] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.072799][ T1602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.079954][ T1602] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.086792][ T1602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.142424][ T924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.150346][ T924] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.155767][ T1612] EXT4-fs warning (device sda1): ext4_ioctl:888: Setting inode version is not supported with metadata_csum enabled. [ 67.169406][ T924] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.182588][ T179] device bridge_slave_1 left promiscuous mode [ 67.188533][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.200719][ T179] device bridge_slave_0 left promiscuous mode [ 67.207279][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.268005][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.269052][ T1614] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 67.276489][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.285297][ T1614] ext4 filesystem being mounted at /root/syzkaller.9CbLkG/68/file0 supports timestamps until 2038 (0x7fffffff) [ 67.291460][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.311427][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.319468][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.323755][ T23] audit: type=1400 audit(1719618563.418:288): avc: denied { mount } for pid=1613 comm="syz.2.314" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 67.326328][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.354420][ T23] audit: type=1400 audit(1719618563.447:289): avc: denied { remount } for pid=1613 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 67.376891][ T23] audit: type=1400 audit(1719618563.447:290): avc: denied { unmount } for pid=358 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 67.384440][ T124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 67.396772][ T23] audit: type=1400 audit(1719618563.475:291): avc: denied { unlink } for pid=358 comm="syz-executor" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.426964][ T124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.429363][ T374] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 67.439074][ T18] usb 4-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 67.455118][ T124] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 67.464552][ T18] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.473387][ T18] usb 4-1: Product: syz [ 67.477401][ T124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.485293][ T18] usb 4-1: Manufacturer: syz [ 67.489798][ T18] usb 4-1: SerialNumber: syz [ 67.495263][ T124] usb 5-1: config 0 descriptor?? [ 67.501219][ T18] usb 4-1: config 0 descriptor?? [ 67.511821][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.520162][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.528878][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.537197][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.546617][ T18] usb-storage 4-1:0.0: USB Mass Storage device detected [ 67.559818][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.570253][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.578722][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.586341][ T18] usb-storage 4-1:0.0: This device (04e6,000a,0200 S f2 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 5.4.274-syzkaller-00003-g51e9abf68baf) [ 67.586341][ T18] Please send a copy of this message to and [ 67.640890][ T374] usb 1-1: device descriptor read/8, error -61 [ 67.728991][ T179] ================================================================== [ 67.737334][ T179] BUG: KASAN: null-ptr-deref in tcf_idrinfo_destroy+0xe2/0x280 [ 67.744718][ T179] Read of size 4 at addr 0000000000000010 by task kworker/u4:2/179 [ 67.752513][ T179] [ 67.754706][ T179] CPU: 1 PID: 179 Comm: kworker/u4:2 Not tainted 5.4.274-syzkaller-00003-g51e9abf68baf #0 [ 67.764409][ T179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 67.772973][ T23] audit: type=1400 audit(1719618563.802:292): avc: denied { write } for pid=1635 comm="syz.1.320" name="hwrng" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 67.774316][ T179] Workqueue: netns cleanup_net [ 67.802255][ T179] Call Trace: [ 67.805404][ T179] dump_stack+0x1d8/0x241 [ 67.809558][ T179] ? panic+0x89d/0x89d [ 67.813464][ T179] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 67.819120][ T179] ? idr_get_next_ul+0x32a/0x3f0 [ 67.823875][ T179] ? tcf_idrinfo_destroy+0xe2/0x280 [ 67.828907][ T179] __kasan_report+0xe9/0x120 [ 67.833339][ T179] ? tcf_idrinfo_destroy+0xe2/0x280 [ 67.838366][ T179] kasan_report+0x30/0x60 [ 67.842620][ T179] check_memory_region+0x272/0x280 [ 67.847568][ T179] tcf_idrinfo_destroy+0xe2/0x280 [ 67.852429][ T179] ? tcf_idr_check_alloc+0x370/0x370 [ 67.857642][ T179] ? netdev_refcnt_read+0x1c0/0x1c0 [ 67.862665][ T179] ? gact_exit_net+0xef/0x140 [ 67.867185][ T179] police_exit_net+0xd7/0x140 [ 67.871693][ T179] ? police_init_net+0x1c0/0x1c0 [ 67.876470][ T179] cleanup_net+0x6e2/0xc90 [ 67.880725][ T179] ? ops_init+0x4a0/0x4a0 [ 67.884975][ T179] ? read_word_at_a_time+0xe/0x20 [ 67.889833][ T179] ? strscpy+0x89/0x220 [ 67.893836][ T179] process_one_work+0x765/0xd20 [ 67.898518][ T179] worker_thread+0xaef/0x1470 [ 67.903034][ T179] kthread+0x2da/0x360 [ 67.906934][ T179] ? worker_clr_flags+0x170/0x170 [ 67.911792][ T179] ? kthread_blkcg+0xd0/0xd0 [ 67.916223][ T179] ret_from_fork+0x1f/0x30 [ 67.920472][ T179] ================================================================== [ 67.928365][ T179] Disabling lock debugging due to kernel taint [ 68.036368][ T374] usb 1-1: device descriptor read/8, error -71 [ 68.045194][ T1593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 68.097040][ T179] kasan: CONFIG_KASAN_INLINE enabled [ 68.102321][ T179] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 68.110574][ T179] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 68.111365][ T655] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 68.117315][ T179] CPU: 1 PID: 179 Comm: kworker/u4:2 Tainted: G B 5.4.274-syzkaller-00003-g51e9abf68baf #0 [ 68.117327][ T179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 68.145616][ T179] Workqueue: netns cleanup_net [ 68.150223][ T179] RIP: 0010:tcf_idrinfo_destroy+0xe9/0x280 [ 68.155862][ T179] Code: ee e8 9b 8a b6 00 48 85 c0 0f 84 54 01 00 00 49 89 c6 48 8d 58 20 48 89 df be 04 00 00 00 e8 de 55 00 fe 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 f5 00 00 00 8b 1b 31 ff 89 de e8 3f a0 [ 68.175381][ T179] RSP: 0018:ffff8881e4e0fb60 EFLAGS: 00010202 [ 68.181278][ T179] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffff8881e94cee40 [ 68.189093][ T179] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000ffffffff [ 68.196899][ T179] RBP: ffff8881e4e0fc30 R08: ffffffff813ae8a5 R09: 0000000000000003 [ 68.204712][ T179] R10: ffffffffffffffff R11: dffffc0000000001 R12: 1ffff1103c9c1f78 [ 68.212521][ T179] R13: ffff8881e4e0fbc0 R14: fffffffffffffff0 R15: dffffc0000000000 [ 68.220334][ T179] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 68.229101][ T179] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.235522][ T179] CR2: 00007f4d4d562000 CR3: 00000001e038e000 CR4: 00000000003426a0 [ 68.243338][ T179] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.251142][ T179] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.258958][ T179] Call Trace: [ 68.262094][ T179] ? __die+0xb4/0x100 [ 68.265900][ T179] ? die+0x26/0x50 [ 68.269459][ T179] ? do_general_protection+0x266/0x3c0 [ 68.274758][ T179] ? ___preempt_schedule+0x16/0x20 [ 68.279714][ T179] ? do_trap+0x340/0x340 [ 68.283779][ T179] ? check_panic_on_warn+0x5e/0xa0 [ 68.288725][ T179] ? tcf_idrinfo_destroy+0xe2/0x280 [ 68.293761][ T179] ? general_protection+0x28/0x30 [ 68.298622][ T179] ? check_panic_on_warn+0x55/0xa0 [ 68.303569][ T179] ? tcf_idrinfo_destroy+0xe9/0x280 [ 68.308603][ T179] ? tcf_idr_check_alloc+0x370/0x370 [ 68.313808][ T179] ? netdev_refcnt_read+0x1c0/0x1c0 [ 68.318837][ T179] ? gact_exit_net+0xef/0x140 [ 68.323351][ T179] police_exit_net+0xd7/0x140 [ 68.327875][ T179] ? police_init_net+0x1c0/0x1c0 [ 68.332640][ T179] cleanup_net+0x6e2/0xc90 [ 68.336892][ T179] ? ops_init+0x4a0/0x4a0 [ 68.341057][ T179] ? read_word_at_a_time+0xe/0x20 [ 68.345914][ T179] ? strscpy+0x89/0x220 [ 68.349910][ T179] process_one_work+0x765/0xd20 [ 68.354599][ T179] worker_thread+0xaef/0x1470 [ 68.359110][ T179] kthread+0x2da/0x360 [ 68.363013][ T179] ? worker_clr_flags+0x170/0x170 [ 68.367873][ T179] ? kthread_blkcg+0xd0/0xd0 [ 68.372303][ T179] ret_from_fork+0x1f/0x30 [ 68.376562][ T179] Modules linked in: [ 68.381538][ T121] cfg80211: failed to load regulatory.db [ 68.383461][ T179] ---[ end trace 8802d40b1090a365 ]--- [ 68.393505][ T179] RIP: 0010:tcf_idrinfo_destroy+0xe9/0x280 [ 68.399178][ T179] Code: ee e8 9b 8a b6 00 48 85 c0 0f 84 54 01 00 00 49 89 c6 48 8d 58 20 48 89 df be 04 00 00 00 e8 de 55 00 fe 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 f5 00 00 00 8b 1b 31 ff 89 de e8 3f a0 [ 68.418833][ T179] RSP: 0018:ffff8881e4e0fb60 EFLAGS: 00010202 [ 68.424728][ T179] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffff8881e94cee40 [ 68.432760][ T179] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000ffffffff [ 68.440539][ T179] RBP: ffff8881e4e0fc30 R08: ffffffff813ae8a5 R09: 0000000000000003 [ 68.448543][ T179] R10: ffffffffffffffff R11: dffffc0000000001 R12: 1ffff1103c9c1f78 [ 68.456450][ T179] R13: ffff8881e4e0fbc0 R14: fffffffffffffff0 R15: dffffc0000000000 [ 68.464322][ T179] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 68.473083][ T179] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.474696][ T124] usbhid 5-1:0.0: can't add hid device: -71 [ 68.479670][ T179] CR2: 00007f7b89253000 CR3: 00000001ecdee000 CR4: 00000000003426b0 [ 68.485587][ T124] usbhid: probe of 5-1:0.0 failed with error -71 [ 68.493128][ T179] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.500737][ T124] usb 5-1: USB disconnect, device number 10 [ 68.507270][ T179] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.524522][ T1631] F2FS-fs (loop2): invalid crc value [ 68.529765][ T179] Kernel panic - not syncing: Fatal exception [ 68.535900][ T179] Kernel Offset: disabled [ 68.540025][ T179] Rebooting in 86400 seconds..