last executing test programs: 7m21.904221898s ago: executing program 3 (id=98): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x78}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 7m17.459436409s ago: executing program 3 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @rand_addr=0x64010102, @remote, @multicast2}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 7m16.038520308s ago: executing program 3 (id=115): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7m6.244374473s ago: executing program 3 (id=148): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = open(&(0x7f0000000280)='.\x00', 0x400, 0x0) fcntl$lock(r4, 0x410, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000057000000570000000a000000060000000000000b050000000f0000000200008448a800000400000000000000fffffeff010000000500000003000000030000000200f90e0300000005000000040000"], &(0x7f0000000040)=""/61, 0x7a, 0x3d, 0x1, 0x7, 0x10000, @value=r4}, 0x28) listen(r3, 0x8) r5 = accept4(r3, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0xc841}, 0x4004000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x63b, 0x0) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000000)=0x102) 7m1.63539335s ago: executing program 3 (id=151): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7m1.004249065s ago: executing program 3 (id=158): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x0, 0x0, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x94) 6m44.255736017s ago: executing program 32 (id=158): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x0, 0x0, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x94) 3m55.61327314s ago: executing program 4 (id=723): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r4 = dup2(r2, r3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) close_range(r4, 0xffffffffffffffff, 0x0) chroot(0x0) 3m51.324857949s ago: executing program 4 (id=732): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x2, 0x3, 0x54c, 0x5c4, 0x1, 0x0, "0501"}}, 0x11a) read(r0, &(0x7f00000002c0), 0x100) read(r0, &(0x7f0000000340), 0x100) write(r0, &(0x7f0000000380)="0a00000001000000010000", 0xb) 3m49.395048252s ago: executing program 4 (id=740): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) 3m47.200046907s ago: executing program 4 (id=745): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@grpquota}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2d, 0xfffffffd, 0x20000, 0x2, 0x0, 0x9, 0x7, 0x0, 0x0, 0x8, 0x10001}}, 0x50) fchown(r0, 0x0, 0x0) 3m45.09706354s ago: executing program 4 (id=749): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000100)={'wlan1\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) close(r2) ioprio_get$pid(0x1, 0xffffffffffffffff) 3m44.207242955s ago: executing program 4 (id=750): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f00000025c0)={0x20080522}, &(0x7f0000002600)={0x10001, 0x30001}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_SCAN_REQ(r0, 0x0, 0x4000820) 3m43.130445455s ago: executing program 33 (id=750): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f00000025c0)={0x20080522}, &(0x7f0000002600)={0x10001, 0x30001}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_SCAN_REQ(r0, 0x0, 0x4000820) 3m13.263820937s ago: executing program 6 (id=830): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$kcm(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x80000, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0100fcffffff000000002f000000100003800400040008000200fd7f000018000180140002006d616376746170"], 0x3c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012100, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) 3m6.91704566s ago: executing program 6 (id=839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd6067060000000600000000", 0x1d}, {&(0x7f0000000600)="a1c6757dfaadb021e548300000006a61a823efff3b4653473c82c0", 0x1b}], 0x2) 3m6.223322022s ago: executing program 6 (id=840): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) syz_emit_ethernet(0x36, &(0x7f00000004c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0x3}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x40) 3m5.633103376s ago: executing program 6 (id=843): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@norecovery}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m4.199253933s ago: executing program 6 (id=848): poll(0x0, 0x0, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000480)='./file1\x00', 0x3004050, &(0x7f0000001640)=ANY=[], 0x3, 0x1063e, &(0x7f0000020c80)="$eJzs3L1vW1UbAPDHSdOvt2+JEAMLcCWElEjYqtMPUaYArVokWlV8DAghcGzHcmv7RrGbmi6IgQ0xM7KwMfCxsSL+BxYkFiQGJiQ2pCLfc1M1pUCL24Q0v59089xz7vFzn+N4OffaN4A9az777ddKHI1DETEbEUciiv1KuRWWU3g8Ip6KiJlbtkrZf7Njf0Qcjoijk+QpZ6U89NbPz58//cG5Dz/+5scnV7/49vOdmzWw056JiP5a2r/WTzHvpHi57G9sdIvYP7FRxnSgf6Vs5ylea68UGa41Nsc1ini8k8bna1eHk7jaazQnsdNdLfrXBumEw43OZp7iBZcb60W71V4pYneYF7FzPdU1LuP14SjlaZX53ivSx2i0GVN/e9xO81m7UsTmYFT2p7x5qz2exI0ylqeLZt5rFXWs3OENvDF71+/1f9kr3cHVcbbRXh9280F2slZ/rlY/Va2v5632qH2i2ui3Tp3IFjq9ybDqqN3oL3fyvNNr15p5fzFb6DSb1Xo9WzjTXuk2Blm9XjteO1Y9uVjuPZudu/hG1mtlC5P4YndwddTtDbPVfD1Lr1jMlmrHTy9mT9ez1y5cyi69evbshUuvv3PmzYsvXHj5pXLQn8rKFpaOLS1V68eqB2+fz4FP9tT8l+qL0/3/x5Wt7SduJJvt5enS87Cr7HQBALuP9T+wE6z/p1z/PyQewPo3i4hds/795/m//30auTfW/3BPfH4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPasn+a+Pl/szKf2/8r+/5ddj5btSkTMRMSNO5iN/VtyzpZ55v5i/NxtNXxXiSLD5BwHyu1wRCyX2++PpGMAAADAvfvhq8/eTqv19Gd+pwvi3zp01yOzm3vpos3MkXfvUw2ViJib/+U+ZInyYlM8Nn1VyeTzvS/GU2bZrK24gHVw+qqS4pLbvvuV7a7MbgkHbwmVFGa2tRwAAGBbbF0JbO8qBAAAgO300b0M/jI+fXCV8EDdfk+vuJtZfhe//AL/gRTKG4KHtrQAAACAXchP6gEAAODhV6z///75f+OW5/8BAADA7pae/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB/s3D2O2kAYBuDPgAPkR7GiNNwmJZeIlCOkTJlDcIX0KJTUOUY60uUICCI8E2nNj7S7NkasnkeyBw/w8lmimfFoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK7pT7ma//7543OLiO+H027fTnd3BAAAABzblKt5/aJK129y/7vc9SFfFxExiIhzY/dhvGpkDnNOeeHz5VENvyLqhMNvjPPxOiI+5WP7Pr0HAAAAPN16OVuk0Xo6VbcuiD6lSZvB2y8d5RURUVZ/O0iJPNkUH9tXlRz+36P41jLlf231BNakfVVJPeU26irtUYaNZvKgKVIz6LUcAACgF82RwNlRyLTPegAAALiWr7cugNuon2bmtfh5Af84NfmB4LRxBQAAANyhwjJfAAAAuCvbZ+yPV3/F/n8AAADwsqX9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALimTbmar5ezRduc3f5EVBGnvRd0czcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8Y3/eUSAEwiAM9q7vTOb+h5UGTU1NqkD4+BuDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3vzuL/8npsaZZO61sfQ8kqydGlunxt65cfSH8fVrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICL/XlJgRAGYACa6fx0J73/YSVgzyDCe9CSELooAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMATva6T0euz2irjSPJtm0l+nRv+nRq2JO+GvQ/mjR8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjZuZ/QOKo4DuBvdrPpHxRjjEGiYkVTBTGb3dBCL4IHIXhQD148pummxm6jtjkkJSC5ePPqXW+CRSGX3urRiz0Xgof2WFikQs+V+de8xCRGMbOb9vOBt++3k2HmvVlY9jtvCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA2vXfDqbKupy8jeV0rtt2+vza/W5+6t9QdS1taJ9UO+8h5oeg/un79k/gaJuP9GxMAAACPn3qZ70MIdxobs2lfG8ny/2S5T5r5157O6zLP75X/b3aaY2X+35z48J1HJxrJz9MIISwsdjvTlc1wYNWeit607m7+EV/DnTs/s9+R6ltlkt+hqWcfW+399ed6jeyqJ9/cuvXecFYe+z8nAQD8N1NlXxTl76O0b/VzYAA8toaKFqL8Xx/p75gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqtBbD2+VdRJCmBjaqlO376/N79bf7DTH7i11s7b5642R+JjpIRohhIXFbme6wrkMstdDO+u7v5x+Kb6GO/e7unrt0ly327mi6Ffx8Kv8oxiU8SgOXqRfWwMwjMMoqv7GAgDgKGsULf2BfKexMZtuS0ZDePjd9vz/RlSHffJ/mf3T9uJK73R8rjj/tyqb4WAr8/9G8tNqfA137tdcvvxF8+rqtbcXL89d7FzsLLXOnTl79txMa2a6md1PabqrAgAAQK6xy7bhosX5vzb69/X/k1EdDpj/P/7+5XZ8rvoTm/9P7PmXMv8/f/739n75f2vR71AHCgAA8ER79tSDP5NdtifDw2Flbnn5Sit/ffS+nb/2Yaj/2rGixfn/+Gi/RwUAAABUobeebFv/vxDV4R/W/8dWfsjaja+nvoyPWS9WwhcWu52p+c+7F6qbzsAq1/8ffDrx28HW/w+v6MP0AQAAqMiJosXr/43s+f/aq+U+tRDCm6/ldfFvAPfI/69se/5/sn3mx/hc8fP/MxXOcRDVxvPrUeb/S+e/ndwr/2f7jocwNN6nwQIAAHDkHS9amv/vNjZmP/v55AfDnv8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Iv9uUdNIAjjOPzuJCEJpMs9lnycQQQrwcbKxg8QFvYMHsAL2VjZLl5Er6Cos7WVrMXzNP9fMQwzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABP73T3xEtEFJHaTJEGq+/Da0S8RVo3Te/9msXmuK8/bjna7oaXHE/6X/mWzyge/RUAgE6U7eZYLKv5T97fvH95//OW07qadfloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4swMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m+dRscGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjBQAA///+wog0") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 3m1.595760935s ago: executing program 6 (id=851): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 2m46.15272634s ago: executing program 34 (id=851): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 13.470827027s ago: executing program 1 (id=1234): ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x88bfa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) 12.809705967s ago: executing program 2 (id=1239): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000000c0)={[{@dax_inode}, {@dax}, {@nombcache}]}, 0xff, 0x561, &(0x7f0000001640)="$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") syz_open_dev$usbfs(0x0, 0x76, 0x103901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4004550c, 0x0) 11.670828664s ago: executing program 8 (id=1242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11.128266379s ago: executing program 8 (id=1243): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002680)={[{@fat=@gid}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@utf8}, {@uni_xlateno}, {@numtail}, {@uni_xlateno}, {@utf8}, {@uni_xlateno}, {@utf8no}]}, 0x7c, 0x2c1, &(0x7f0000001240)="$eJzs3c2KI1UUAOBT6Up3WoXOwpUIFujCVTMzvkAHaWEwK6UWutHB6QFJwkAHAv5gelbuBVe+gzsfwAcQxDdw4XLEnbMQS5Kqyl+nezqS7hmG79vUSd17bt17uf1DICefvj7o3X84fPDo69+j1UqicRRH8SSJdjSidhYAwIvkSVHEX0XpaX13l16ljeucFwBwfa7893/nxqYEAFyzDz/6+P1Ot3v8QZa1IgbfjvIkymvZ3nkQn0c/TuJWHMQ/EcVMGb9yt3scaZbVbwaM9iOPGHzyS/W68zhimn87DqK1ml+/o5BNxVuD8SifPHlybcZLSUSnSMoud+IgXo0omlENUl7eu9s9vpOdz498N95+84dq/v+exGEcxG+fxcPox/3pEPP8b25n2bvF939/Va4gj0jGo3xv2m+u8B8QAAAAAAAAAAAAAAAAAAAAAABbc5jNtBfr59TVAA8PV9vTPOLPQZ0/rw90FNP6QFWFn/FCfZ1bWZbVZXxGeTPK+j5pvJZG+qzWDQAAAAAAAAAAAAAAAAAAAM+T4Rdf9u71+yenS8HPxSTYv7TPapAu3Kk/1v/0rPVB78eIzbOuEsRONbV+cu4RSd20wYA/XdC0VwbViGeXj7O/7qHRuGgP036Uk/9u8014Y9MFXj1oz6dan67evSRmO39W7e5yVmv9IVk4dfUxPB0mGxzIYs3W7VyYtbulTdh9+f+m78e6psmKm7PNXM5qrWxmcxL8ur2flBXJ9n7pAAAAAAAAAAAAAAAAAAAAa80/9Bt/nGt89EymBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3bv79/7Mg2qt3VoNxlTy907i8897pcM1j2/HO9Pr4RhcLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAC+u/AAAA///Qo07w") chdir(0x0) rename(&(0x7f0000000240)='my_tracefs\x00', &(0x7f0000000480)='./file1\x00') 10.668138502s ago: executing program 5 (id=1245): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/bus/usb-serial/drivers/sierra/new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1199 0017\x00', 0x9) 10.150487713s ago: executing program 2 (id=1246): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='0\x00', 0x2) 9.684502712s ago: executing program 8 (id=1248): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff000000"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) 9.523365758s ago: executing program 5 (id=1249): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r4 = dup2(r2, r3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) close_range(r4, 0xffffffffffffffff, 0x0) chroot(0x0) 9.050289399s ago: executing program 0 (id=1251): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@norecovery}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 9.029833804s ago: executing program 1 (id=1252): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) 8.900079097s ago: executing program 7 (id=1253): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000003840)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f000000af40)={0x0, 0x0, 0x0, 0x0, &(0x7f000000a4c0)={0x18, 0x0, 0xa4, {0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r1, &(0x7f0000001500)=[{&(0x7f00000021c0)="bc", 0x1}], 0x1) close(r0) 7.956771045s ago: executing program 1 (id=1254): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) 7.823058044s ago: executing program 7 (id=1255): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.73966617s ago: executing program 8 (id=1256): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]}) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, &(0x7f0000000300)={0x0, 0x10f211, 0x4, 0x2006, 0x40001c, 0x0, r0}, &(0x7f00000007c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x14) shutdown(0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x7, 0x3, "ac1a91"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_mount_image$ntfs3(&(0x7f000001f6c0), &(0x7f0000000280)='./file0\x00', 0x3014041, &(0x7f0000000180)={[{@sparse}, {@prealloc}, {@force}, {}, {}, {@sparse}, {@prealloc}, {@acl}, {@nohidden}, {@gid}, {@nohidden}, {@discard}, {@nohidden}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@dmask={'dmask', 0x3d, 0x5}}, {@gid}]}, 0x0, 0x1f27e, &(0x7f000001f700)="$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") getdents64(r2, &(0x7f0000000040)=""/154, 0x9a) 7.639573117s ago: executing program 7 (id=1257): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 6.044530498s ago: executing program 1 (id=1258): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1401, 0x1, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x6}]}, 0x18}, 0x1, 0x0, 0x0, 0x180d1}, 0x49010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r4, 0x701, 0x2070bd24, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40850}, 0x4000) 6.043623622s ago: executing program 2 (id=1259): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r0, 0x0, 0x0) 6.026333577s ago: executing program 8 (id=1260): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x4, 0x61f, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 6.026148938s ago: executing program 5 (id=1261): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/bus/usb-serial/drivers/sierra/new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1199 0017\x00', 0x9) 4.882887796s ago: executing program 7 (id=1262): setns(0xc9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(0xffffffffffffffff, &(0x7f0000000700)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x1, '\vi'}}, 0x9) 4.877939785s ago: executing program 2 (id=1263): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000", @ANYRES32=r1, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4.700189851s ago: executing program 5 (id=1264): ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x88bfa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) 4.699863239s ago: executing program 0 (id=1265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c56196", 0xf}, {&(0x7f0000000600)="a1c6757dfaadb021e548300000006a61a823efff3b4653473c82c035f5340400006cf0c0a85f932dcb69d6ac0bdd8dccb977ee8935", 0x35}], 0x2) 4.318611647s ago: executing program 2 (id=1266): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) 3.124718124s ago: executing program 7 (id=1267): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000003840)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f000000af40)={0x0, 0x0, 0x0, 0x0, &(0x7f000000a4c0)={0x18, 0x0, 0xa4, {0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r1, &(0x7f0000001500)=[{&(0x7f00000021c0)="bc", 0x1}], 0x1) close(r0) 2.18251973s ago: executing program 8 (id=1268): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff000000"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) 2.180727219s ago: executing program 2 (id=1269): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r3 = dup2(r1, r2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) syz_open_dev$sg(0x0, 0x800000000000000, 0x130002) close_range(r3, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 2.095143082s ago: executing program 0 (id=1270): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) 1.708913209s ago: executing program 1 (id=1271): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.458904175s ago: executing program 7 (id=1272): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='0\x00', 0x2) 1.303831152s ago: executing program 0 (id=1273): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="a5ff837826c15008e7cd775b2b54e6144174cd3a7c1f486c1476104426af5638353329b9e869b660303a3a319822e7cead6086497abfac61e7c8b63cb87e29f16dc295a87da5815a4bd19f86b7701413e8e75c4137858bce9c8456cfe8eb7a66c3f1166136", 0x65}, {&(0x7f0000000240)="5417113ff6e3e2300118d37bc0c0707071c9821adc8bc07a06a387", 0x1b}], 0x2) 1.152151331s ago: executing program 0 (id=1274): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 1.112486708s ago: executing program 5 (id=1275): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r0, 0x0, 0x0) 786.490753ms ago: executing program 1 (id=1276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002b40)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000340)=""/128, 0x80, 0x7f) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0xe309b000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a000000020000000000000102000000080000010800000001000084090000000400000001000000480000010061615f5f0000305f"], &(0x7f00000000c0)=""/138, 0x4a, 0x8a, 0x1}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000feff00007a000000", @ANYRES32=0x0, @ANYBLOB="4018000068820100240012800b0001006272696467650000140002800500160002fffd00080004"], 0x44}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r4, @ANYRES32=r5], 0x10) syz_read_part_table(0x5be, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x30) 138.574327ms ago: executing program 0 (id=1277): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/bus/usb-serial/drivers/sierra/new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1199 0017\x00', 0x9) 0s ago: executing program 5 (id=1278): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000", @ANYRES32=r1, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): 4] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.546222][ T5624] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 356.574487][ T5926] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 356.591775][ T5624] EXT4-fs (loop4): I/O error while writing superblock [ 356.692028][ T5926] usb 7-1: Using ep0 maxpacket: 8 [ 356.733019][ T5926] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 356.882213][ T5926] usb 7-1: can't read configurations, error -61 [ 357.078634][ T6456] usb 3-1: USB disconnect, device number 17 [ 357.115399][ T5926] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 357.180653][ T5926] usb 7-1: Using ep0 maxpacket: 8 [ 357.218264][ T5926] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 357.252752][ T5926] usb 7-1: can't read configurations, error -61 [ 357.263773][ T5826] usb 6-1: USB disconnect, device number 15 [ 357.269805][ C1] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 357.294916][ T5926] usb usb7-port1: unable to enumerate USB device [ 357.318774][ T166] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.749261][ T166] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.000568][ T166] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.510739][ T8394] syz.1.747 uses obsolete (PF_INET,SOCK_PACKET) [ 358.816889][ T8402] fuse: Unknown parameter 'user_id00000000000000000000' [ 358.867517][ T166] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.171665][ T5644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.186254][ T5644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.194521][ T8409] loop2: detected capacity change from 0 to 1024 [ 359.207887][ T5644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.224933][ T5644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.246404][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 359.255637][ T8409] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 359.362577][ T8409] System zones: 0-1, 3-12 [ 359.419069][ T8409] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.664491][ T166] bridge_slave_1: left allmulticast mode [ 359.703810][ T166] bridge_slave_1: left promiscuous mode [ 359.735522][ T166] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.845064][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 359.858296][ T166] bridge_slave_0: left allmulticast mode [ 359.883390][ T166] bridge_slave_0: left promiscuous mode [ 359.904560][ T8422] loop6: detected capacity change from 0 to 512 [ 359.947785][ T166] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.958328][ T8422] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 360.346303][ T5926] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 360.809013][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.121365][ T5774] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 361.336130][ T5774] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 361.337381][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.381037][ T5774] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 361.407358][ T50] Bluetooth: hci0: command tx timeout [ 361.421792][ T5926] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 361.431036][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.458769][ T5926] usb 1-1: config 0 descriptor?? [ 361.459499][ T5774] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 361.511448][ T8446] fuse: Unknown parameter 'user_id00000000000000000000' [ 361.550307][ T5774] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 361.610698][ T5774] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 361.639440][ T5774] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 361.709455][ T5774] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 361.732495][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 361.765152][ T5774] usb 2-1: Product: syz [ 361.779324][ T5774] usb 2-1: Manufacturer: syz [ 361.854178][ T8430] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 362.163647][ T5774] cdc_wdm 2-1:1.0: skipping garbage [ 362.237518][ T5926] usbhid 1-1:0.0: can't add hid device: -71 [ 362.251409][ T5774] cdc_wdm 2-1:1.0: skipping garbage [ 362.814431][ T5926] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 362.835787][ T5926] usb 1-1: USB disconnect, device number 14 [ 362.836046][ T5774] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 362.906405][ T5774] cdc_wdm 2-1:1.0: Unknown control protocol [ 362.992234][ T5774] usb 2-1: USB disconnect, device number 19 [ 363.009472][ T166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.121575][ T166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.159404][ T166] bond0 (unregistering): Released all slaves [ 363.474116][ T50] Bluetooth: hci0: command tx timeout [ 364.589520][ T8484] loop2: detected capacity change from 0 to 1024 [ 364.675535][ T8484] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 364.694633][ T8484] System zones: 0-1, 3-12 [ 364.790059][ T8484] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.503539][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5 [ 365.533973][ T50] Bluetooth: hci0: command tx timeout [ 365.546680][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 365.926084][ T8509] fuse: Bad value for 'fd' [ 365.942476][ T166] hsr_slave_0: left promiscuous mode [ 365.976980][ T166] hsr_slave_1: left promiscuous mode [ 365.987666][ T5774] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 365.990444][ T166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.349944][ T5774] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.442156][ T5774] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.541134][ T5774] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 366.677409][ T5774] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.937346][ T166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.966544][ T5774] usb 7-1: config 0 descriptor?? [ 366.976710][ T166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.984143][ T166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.046159][ T166] veth1_macvtap: left promiscuous mode [ 367.054974][ T166] veth0_macvtap: left promiscuous mode [ 367.060693][ T166] veth1_vlan: left promiscuous mode [ 367.066519][ T166] veth0_vlan: left promiscuous mode [ 367.624027][ T50] Bluetooth: hci0: command tx timeout [ 367.708364][ T5774] usbhid 7-1:0.0: can't add hid device: -71 [ 367.732366][ T5774] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 367.763405][ T5774] usb 7-1: USB disconnect, device number 13 [ 367.778201][ T6456] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 367.967686][ T6456] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 368.019226][ T6456] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 368.066996][ T6456] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 368.107698][ T6456] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.135319][ T6456] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 368.193046][ T6456] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 368.263666][ T6456] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 368.309251][ T6456] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 368.342038][ T6456] usb 2-1: Product: syz [ 368.352554][ T6456] usb 2-1: Manufacturer: syz [ 368.405504][ T8519] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 368.446544][ T6456] cdc_wdm 2-1:1.0: skipping garbage [ 368.469493][ T6456] cdc_wdm 2-1:1.0: skipping garbage [ 368.519333][ T6456] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 368.557674][ T6456] cdc_wdm 2-1:1.0: Unknown control protocol [ 368.707371][ C0] wdm_int_callback: 6808 callbacks suppressed [ 368.707412][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 368.720113][ C0] wdm_int_callback: 6808 callbacks suppressed [ 368.720136][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 368.732575][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 368.739170][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 368.746079][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 368.752677][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 368.759069][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 368.765659][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 368.772605][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 368.779213][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 368.785525][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 368.792115][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 368.798397][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 368.805016][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 368.811408][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 368.818002][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 368.824289][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 368.830904][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 368.837180][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 368.843763][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 369.088601][ T166] team0 (unregistering): Port device team_slave_1 removed [ 369.287853][ T166] team0 (unregistering): Port device team_slave_0 removed [ 370.050250][ T8559] fuse: Bad value for 'fd' [ 370.364960][ T9] usb 2-1: USB disconnect, device number 20 [ 371.631482][ T5282] 8021q: adding VLAN 0 to HW filter on device eth7 [ 372.364773][ T8580] loop6: detected capacity change from 0 to 512 [ 372.484331][ T166] IPVS: stop unused estimator thread 0... [ 372.542761][ T8580] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.6.800: corrupted xattr block 95: invalid header [ 372.601230][ T8580] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 372.603798][ T8580] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm syz.6.800: bg 0: block 7: invalid block bitmap [ 372.613047][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 372.613077][ C1] EXT4-fs (loop6): initial error at time 1785308784: ext4_expand_extra_isize_ea:2810: inode 11 [ 372.613131][ C1] EXT4-fs (loop6): last error at time 1785308784: ext4_expand_extra_isize_ea:2810: inode 11 [ 372.684548][ T8580] loop6: lost filesystem error report for type 5 error -117 [ 372.685216][ T8580] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 372.779519][ T8580] loop6: lost filesystem error report for type 5 error -117 [ 372.783689][ T8580] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #11: comm syz.6.800: corrupted xattr block 95: invalid header [ 372.842246][ T8580] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 372.891340][ T8580] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 372.948876][ T8580] EXT4-fs (loop6): 1 orphan inode deleted [ 372.989669][ T8580] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.019833][ T6555] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.474922][ T8612] comedi comedi0: 8255: I/O base address not correctly aligned [ 376.571670][ T8617] fuse: Bad value for 'fd' [ 377.933005][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.007187][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.214728][ T8636] geneve0: entered promiscuous mode [ 378.321296][ T8406] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.362499][ T8406] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.393619][ T8406] bridge_slave_0: entered allmulticast mode [ 378.613718][ T8406] bridge_slave_0: entered promiscuous mode [ 378.632899][ T8406] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.642028][ T8406] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.649732][ T8406] bridge_slave_1: entered allmulticast mode [ 378.660089][ T8406] bridge_slave_1: entered promiscuous mode [ 378.883429][ T5282] 8021q: adding VLAN 0 to HW filter on device eth6 [ 378.931757][ T8406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.021542][ T8406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.342155][ T8406] team0: Port device team_slave_0 added [ 379.370970][ T8406] team0: Port device team_slave_1 added [ 379.701383][ T8406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.726905][ T8406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.830755][ T8406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.894881][ T8406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.935065][ T8406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.042154][ T8406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.377316][ T8406] hsr_slave_0: entered promiscuous mode [ 380.422205][ T8406] hsr_slave_1: entered promiscuous mode [ 380.462489][ T8406] debugfs: 'hsr0' already exists in 'hsr' [ 380.487456][ T8406] Cannot create hsr debugfs directory [ 382.612744][ T8676] loop1: detected capacity change from 0 to 131072 [ 382.646000][ T8676] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 382.655479][ T8676] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 382.668174][ T8676] F2FS-fs (loop1): invalid crc value [ 382.842871][ T8676] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 382.971780][ T8676] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 382.978927][ T8676] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 385.276631][ T8406] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 385.337751][ T8406] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.379204][ T8406] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 385.486823][ T8406] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 385.518573][ T8406] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 385.578308][ T8406] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.647463][ T5282] 8021q: adding VLAN 0 to HW filter on device eth8 [ 385.670564][ T8406] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 385.716386][ T8406] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 387.249776][ T8716] No control pipe specified [ 387.690892][ T8406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.906539][ T8406] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.973859][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.981107][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.097747][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.105005][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.204159][ T5774] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 391.437613][ T5774] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 391.507349][ T5774] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 391.598955][ T5774] usb 3-1: config 0 interface 0 has no altsetting 0 [ 391.680272][ T5774] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 391.751087][ T5774] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 391.822864][ T5774] usb 3-1: Product: syz [ 391.863659][ T5774] usb 3-1: Manufacturer: syz [ 391.902432][ T5774] usb 3-1: SerialNumber: syz [ 391.963322][ T5774] usb 3-1: config 0 descriptor?? [ 392.110362][ T5774] usb 3-1: selecting invalid altsetting 0 [ 392.791665][ T1101] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.848724][ T1101] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.914114][ T1101] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.979411][ T1101] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.037803][ T1101] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.101806][ T57] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.384065][ T57] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.424124][ T57] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.921986][ T8406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.665509][ T8764] loop1: detected capacity change from 0 to 40427 [ 394.950131][ T5637] usb 3-1: USB disconnect, device number 18 [ 395.248864][ T8804] loop9: detected capacity change from 0 to 7 [ 395.313913][ C1] blk_print_req_error: 10 callbacks suppressed [ 395.313942][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 395.329902][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 395.339256][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 395.348957][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 395.425348][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 395.435122][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 395.460026][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 395.469746][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 395.485491][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 395.495216][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 395.518042][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 395.527831][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 395.541349][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 395.551119][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 395.564424][ T8804] ldm_validate_partition_table(): Disk read failed. [ 395.599225][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 395.608976][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 395.626161][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 395.635919][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 395.647506][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 395.657260][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 395.676790][ T8804] Dev loop9: unable to read RDB block 0 [ 395.724980][ T8804] loop9: unable to read partition table [ 395.754658][ T8804] loop9: partition table beyond EOD, truncated [ 395.791524][ T8816] loop6: detected capacity change from 0 to 512 [ 395.795192][ T8804] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 395.873282][ T8816] EXT4-fs: Ignoring removed orlov option [ 395.940063][ T8816] EXT4-fs: Ignoring removed mblk_io_submit option [ 395.981760][ T8816] EXT4-fs error (device loop6): ext4_iget_extra_inode:5179: inode #15: comm syz.6.843: corrupted in-inode xattr: e_value size too large [ 396.016905][ T8816] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 396.019713][ T8816] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.843: couldn't read orphan inode 15 (err -117) [ 396.029022][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 396.029057][ C1] EXT4-fs (loop6): initial error at time 1785308807: ext4_iget_extra_inode:5179: inode 15 [ 396.029113][ C1] EXT4-fs (loop6): last error at time 1785308807: ext4_iget_extra_inode:5179: inode 15 [ 396.081245][ T8816] loop6: lost filesystem error report for type 5 error -117 [ 396.088278][ T8816] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.192991][ T8406] veth0_vlan: entered promiscuous mode [ 396.279495][ T8406] veth1_vlan: entered promiscuous mode [ 396.364271][ T8826] loop1: detected capacity change from 0 to 128 [ 396.514985][ T8826] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 396.567972][ T8826] ext4 filesystem being mounted at /167/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 396.646332][ T8406] veth0_macvtap: entered promiscuous mode [ 396.708168][ T8406] veth1_macvtap: entered promiscuous mode [ 396.802267][ T8406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.881570][ T5626] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 396.906556][ T6555] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.918650][ T8406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.000105][ T166] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.035888][ T166] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.101868][ T166] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.157452][ T166] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.390210][ T8840] loop6: detected capacity change from 0 to 131072 [ 398.409193][ T8840] F2FS-fs (loop6): Segment count (31) mismatch with total segments from devices (0) [ 398.418684][ T8840] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 398.429833][ T8840] F2FS-fs (loop6): invalid crc value [ 398.520187][ T8840] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 398.537315][ T8840] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 398.544423][ T8840] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 399.351043][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.403691][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.175152][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.243856][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.598837][ T8882] loop9: detected capacity change from 0 to 7 [ 402.629206][ C1] blk_print_req_error: 10 callbacks suppressed [ 402.629228][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.645122][ C1] buffer_io_error: 10 callbacks suppressed [ 402.645142][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 402.787647][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.797343][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 402.821250][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.830955][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 402.849067][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.858778][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 402.867829][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.877519][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 402.889218][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.898935][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 402.908131][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.917848][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 402.928751][ T8882] ldm_validate_partition_table(): Disk read failed. [ 402.938599][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.948260][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 402.963688][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.973454][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 402.988865][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.998613][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 403.024517][ T8882] Dev loop9: unable to read RDB block 0 [ 403.071241][ T8882] loop9: unable to read partition table [ 403.095474][ T8882] loop9: partition table beyond EOD, truncated [ 403.161768][ T8892] loop0: detected capacity change from 0 to 128 [ 403.163700][ T8882] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 403.262347][ T8892] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 403.309564][ T8892] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 403.597665][ T5627] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 403.807846][ T8896] loop1: detected capacity change from 0 to 512 [ 403.839908][ T8896] EXT4-fs: Ignoring removed orlov option [ 404.093202][ T8896] EXT4-fs: Ignoring removed mblk_io_submit option [ 404.108694][ T8901] fuse: Bad value for 'rootmode' [ 405.130632][ T8896] EXT4-fs error (device loop1): ext4_iget_extra_inode:5179: inode #15: comm syz.1.859: corrupted in-inode xattr: e_value size too large [ 405.274101][ T8896] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 405.283930][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 405.299643][ C0] EXT4-fs (loop1): initial error at time 1785308817: ext4_iget_extra_inode:5179: inode 15 [ 405.309634][ C0] EXT4-fs (loop1): last error at time 1785308817: ext4_iget_extra_inode:5179: inode 15 [ 405.342982][ T5637] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 405.398571][ T8896] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.859: couldn't read orphan inode 15 (err -117) [ 405.633404][ T8896] loop1: lost filesystem error report for type 5 error -117 [ 406.096659][ T8896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.116816][ T8910] loop5: detected capacity change from 0 to 131072 [ 407.126095][ T5637] usb 1-1: device descriptor read/all, error -71 [ 407.154955][ T8910] F2FS-fs (loop5): Segment count (31) mismatch with total segments from devices (0) [ 407.164542][ T8910] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 407.195765][ T8910] F2FS-fs (loop5): invalid crc value [ 407.280159][ T8910] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 407.296929][ T8910] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 407.304063][ T8910] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 408.072000][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.424977][ T5637] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 408.467106][ T8934] loop1: detected capacity change from 0 to 128 [ 408.592633][ T8934] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 408.644637][ T5637] usb 1-1: Using ep0 maxpacket: 8 [ 408.681010][ T5637] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 408.742314][ T8934] hpfs: filesystem error: improperly stopped [ 408.751991][ T5637] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 408.812843][ T5637] usb 1-1: config 0 has no interface number 0 [ 408.822212][ T8934] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 408.869623][ T5637] usb 1-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 408.894656][ T8934] hpfs: You really don't want any checks? You are crazy... [ 408.901914][ T8934] hpfs: Code page index out of array [ 408.945331][ T8934] hpfs: code page support is disabled [ 408.973807][ T5637] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 408.978735][ T8934] hpfs: hpfs_map_4sectors(): unaligned read [ 409.008955][ T5637] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 409.052010][ T8934] hpfs: hpfs_map_4sectors(): unaligned read [ 409.052317][ T5637] usb 1-1: Product: syz [ 409.069802][ T8934] hpfs: filesystem error: unable to find root dir [ 409.121828][ T5637] usb 1-1: config 0 descriptor?? [ 409.153408][ T8926] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 409.508679][ T8950] loop9: detected capacity change from 0 to 7 [ 409.519598][ T8926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.060948][ C1] blk_print_req_error: 10 callbacks suppressed [ 410.060977][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.076913][ C1] buffer_io_error: 10 callbacks suppressed [ 410.076941][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 410.091098][ T8926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.130494][ T5637] usb 1-1: USB disconnect, device number 17 [ 410.189726][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.199625][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 410.213861][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.223606][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 410.243568][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.253275][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 410.262775][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.272490][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 410.287242][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.296963][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 410.365839][ T8950] ldm_validate_partition_table(): Disk read failed. [ 410.372750][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.382451][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 410.451222][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.461068][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 410.474013][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.483729][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 410.512959][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 410.522725][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 410.531941][ T8950] Dev loop9: unable to read RDB block 0 [ 410.633446][ T8950] loop9: unable to read partition table [ 410.711269][ T8950] loop9: partition table beyond EOD, truncated [ 410.785252][ T8950] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 412.565808][ T8975] fuse: Bad value for 'rootmode' [ 412.668120][ T8960] syz.7.872 (8960): drop_caches: 2 [ 414.843625][ T8992] loop5: detected capacity change from 0 to 512 [ 414.897955][ T8992] EXT4-fs: Ignoring removed orlov option [ 414.925260][ T8992] EXT4-fs: Ignoring removed mblk_io_submit option [ 414.982144][ T8992] EXT4-fs error (device loop5): ext4_iget_extra_inode:5179: inode #15: comm syz.5.881: corrupted in-inode xattr: e_value size too large [ 415.039695][ T8992] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 415.040276][ T8992] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.881: couldn't read orphan inode 15 (err -117) [ 415.049984][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 415.050020][ C1] EXT4-fs (loop5): initial error at time 1785308826: ext4_iget_extra_inode:5179: inode 15 [ 415.050077][ C1] EXT4-fs (loop5): last error at time 1785308826: ext4_iget_extra_inode:5179: inode 15 [ 415.118932][ T8992] loop5: lost filesystem error report for type 5 error -117 [ 415.200617][ T8992] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.862601][ T5628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.095708][ T5644] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 416.117312][ T5644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 416.126123][ T5644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 416.135728][ T5644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 416.143471][ T5644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 416.425310][ T187] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 416.636056][ T187] usb 6-1: Using ep0 maxpacket: 32 [ 416.671839][ T187] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 416.714082][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 416.726035][ T187] usb 6-1: config 0 has no interface number 0 [ 416.750097][ T187] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 416.789599][ T187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.835227][ T187] usb 6-1: Product: syz [ 416.855556][ T187] usb 6-1: Manufacturer: syz [ 416.882317][ T187] usb 6-1: SerialNumber: syz [ 416.926137][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 416.939639][ T187] usb 6-1: config 0 descriptor?? [ 416.964855][ T9] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 417.015583][ T9] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 417.050736][ T9] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 417.094208][ T9] usb 1-1: config 0 has no interface number 0 [ 417.122479][ T9] usb 1-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 417.172484][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 417.210697][ T9] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 417.256805][ T9] usb 1-1: Product: syz [ 417.294838][ T9] usb 1-1: config 0 descriptor?? [ 417.526198][ T9028] loop9: detected capacity change from 0 to 7 [ 417.557993][ C0] blk_print_req_error: 10 callbacks suppressed [ 417.558037][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 417.573995][ C0] buffer_io_error: 10 callbacks suppressed [ 417.574021][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 417.594476][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 417.604220][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 417.614471][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 417.624243][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 417.676052][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 417.685838][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 417.695502][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 417.705200][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 417.721409][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 417.731142][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 417.739987][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 417.749668][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 417.761533][ T9028] ldm_validate_partition_table(): Disk read failed. [ 417.774526][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 417.784225][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 417.795405][ T187] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 417.796587][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 417.807268][ T187] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 417.815953][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 417.829621][ T187] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 417.845119][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 417.854831][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 417.870199][ T9028] Dev loop9: unable to read RDB block 0 [ 417.902484][ T9028] loop9: unable to read partition table [ 417.939246][ T187] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 417.968725][ T9028] loop9: partition table beyond EOD, truncated [ 418.001753][ T9028] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 418.055428][ T187] usb 6-1: USB disconnect, device number 16 [ 418.245015][ T50] Bluetooth: hci1: command tx timeout [ 418.470379][ T1124] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.513799][ T9047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.775870][ T9047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.819853][ T9041] loop7: detected capacity change from 0 to 131072 [ 420.229859][ T9041] F2FS-fs (loop7): Segment count (31) mismatch with total segments from devices (0) [ 420.240888][ T9041] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 420.324303][ T50] Bluetooth: hci1: command tx timeout [ 420.392812][ T9041] F2FS-fs (loop7): invalid crc value [ 420.490534][ T5637] usb 1-1: USB disconnect, device number 18 [ 420.526690][ T9041] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 420.590834][ T9041] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 420.599549][ T9041] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 422.407105][ T50] Bluetooth: hci1: command tx timeout [ 422.537302][ T1124] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.494029][ T50] Bluetooth: hci1: command tx timeout [ 425.268915][ T9089] loop5: detected capacity change from 0 to 131072 [ 425.287510][ T1124] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.311148][ T9089] F2FS-fs (loop5): Segment count (31) mismatch with total segments from devices (0) [ 425.320612][ T9089] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 425.332401][ T9089] F2FS-fs (loop5): invalid crc value [ 425.420117][ T9089] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 425.446603][ T9089] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 425.453688][ T9089] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 425.537424][ T9100] afs: Bad value for 'source' [ 425.667450][ T9103] netlink: 20 bytes leftover after parsing attributes in process `syz.7.896'. [ 426.821697][ T1124] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.176560][ T9117] loop1: detected capacity change from 0 to 1024 [ 428.222115][ T9117] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 428.296703][ T9117] System zones: 0-1, 3-12 [ 428.384792][ T9117] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.887878][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 428.965518][ T36] netdevsim netdevsim6 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.115475][ T1101] netdevsim netdevsim6 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.065420][ T9132] loop7: detected capacity change from 0 to 131072 [ 430.077061][ T9132] F2FS-fs (loop7): Segment count (31) mismatch with total segments from devices (0) [ 430.086586][ T9132] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 430.142540][ T9132] F2FS-fs (loop7): invalid crc value [ 430.248711][ T1101] netdevsim netdevsim6 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.272103][ T9132] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 430.303656][ T9132] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 430.314021][ T9132] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 431.813702][ T1101] netdevsim netdevsim6 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.917524][ T1124] bridge_slave_1: left allmulticast mode [ 431.942073][ T1124] bridge_slave_1: left promiscuous mode [ 431.976451][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.039936][ T1124] bridge_slave_0: left allmulticast mode [ 432.068796][ T1124] bridge_slave_0: left promiscuous mode [ 432.100642][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.395464][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.451498][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.479465][ T1124] bond0 (unregistering): Released all slaves [ 434.396773][ T9010] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.436621][ T9010] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.533464][ T9010] bridge_slave_0: entered allmulticast mode [ 434.542154][ T9010] bridge_slave_0: entered promiscuous mode [ 434.551490][ T9010] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.558806][ T9010] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.570050][ T9010] bridge_slave_1: entered allmulticast mode [ 434.633269][ T9010] bridge_slave_1: entered promiscuous mode [ 435.685215][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 435.995400][ T187] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 436.169021][ T9010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.177734][ T187] usb 8-1: Using ep0 maxpacket: 8 [ 437.098647][ T9201] loop1: detected capacity change from 0 to 131072 [ 437.145681][ T9201] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 437.155588][ T9201] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 437.163310][ T187] usb 8-1: config 0 has no interfaces? [ 437.186982][ T9201] F2FS-fs (loop1): invalid crc value [ 437.231582][ T1124] hsr_slave_0: left promiscuous mode [ 437.238494][ T187] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 437.309792][ T9201] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 437.328523][ T9201] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 437.336781][ T9201] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 437.354080][ T1124] hsr_slave_1: left promiscuous mode [ 437.381179][ T187] usb 8-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 437.439824][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.855493][ T187] usb 8-1: Product: syz [ 437.860549][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.870534][ T187] usb 8-1: config 0 descriptor?? [ 437.876644][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.905795][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.996163][ T1124] veth1_macvtap: left promiscuous mode [ 438.029827][ T1124] veth0_macvtap: left promiscuous mode [ 438.055350][ T1124] veth1_vlan: left promiscuous mode [ 438.082832][ T1124] veth0_vlan: left promiscuous mode [ 438.299191][ T9197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.316747][ T9197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.395123][ T5774] usb 8-1: USB disconnect, device number 2 [ 438.917549][ T29] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 439.631688][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.652657][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.879824][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 439.909345][ T29] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 439.943398][ T29] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 439.975213][ T29] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 440.021044][ T29] usb 1-1: config 0 has no interface number 0 [ 440.039625][ T29] usb 1-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.053372][ T29] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 442.308136][ T29] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 442.316259][ T29] usb 1-1: Product: syz [ 442.410017][ T29] usb 1-1: config 0 descriptor?? [ 442.516710][ T29] usb 1-1: can't set config #0, error -71 [ 442.545789][ T29] usb 1-1: USB disconnect, device number 19 [ 442.880707][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 442.949725][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 443.554454][ T9010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.799080][ T9010] team0: Port device team_slave_0 added [ 443.877703][ T9010] team0: Port device team_slave_1 added [ 445.018533][ T9247] loop5: detected capacity change from 0 to 512 [ 445.184695][ T9010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.217401][ T9010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.330996][ T9010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.437302][ T9010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.474100][ T9010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.577579][ T9010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.436503][ T9010] hsr_slave_0: entered promiscuous mode [ 446.479052][ T9010] hsr_slave_1: entered promiscuous mode [ 446.514614][ T9010] debugfs: 'hsr0' already exists in 'hsr' [ 446.575442][ T9010] Cannot create hsr debugfs directory [ 446.654686][ T9256] loop5: detected capacity change from 0 to 131072 [ 446.667716][ T9256] F2FS-fs (loop5): Segment count (31) mismatch with total segments from devices (0) [ 446.677374][ T9256] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 446.689658][ T9256] F2FS-fs (loop5): invalid crc value [ 446.770099][ T9256] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 446.791087][ T9256] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 446.800224][ T9256] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 447.913770][ T9283] loop0: detected capacity change from 0 to 512 [ 447.976755][ T9283] EXT4-fs: Ignoring removed orlov option [ 448.019486][ T9283] EXT4-fs: Ignoring removed mblk_io_submit option [ 448.145302][ T9283] EXT4-fs error (device loop0): ext4_iget_extra_inode:5179: inode #15: comm syz.0.935: corrupted in-inode xattr: e_value size too large [ 448.274077][ T9283] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 448.283571][ T9283] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.935: couldn't read orphan inode 15 (err -117) [ 448.293191][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 448.293223][ C0] EXT4-fs (loop0): initial error at time 1785308860: ext4_iget_extra_inode:5179: inode 15 [ 448.293281][ C0] EXT4-fs (loop0): last error at time 1785308860: ext4_iget_extra_inode:5179: inode 15 [ 448.422616][ T9283] loop0: lost filesystem error report for type 5 error -117 [ 448.428058][ T9283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.850501][ T6456] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 449.218047][ T9010] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 449.290079][ T9010] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.351179][ T9010] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 449.423898][ T9010] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.503106][ T9010] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 449.522390][ T5627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.554541][ T6456] usb 2-1: Using ep0 maxpacket: 8 [ 449.568579][ T6456] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 449.613449][ T6456] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 449.640948][ T9010] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.652851][ T6456] usb 2-1: config 0 has no interface number 0 [ 449.677190][ T6456] usb 2-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 449.700809][ T9010] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 449.746813][ T6456] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 449.761287][ T9010] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 449.791278][ T6456] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 449.832280][ T9285] loop7: detected capacity change from 0 to 32768 [ 449.835691][ T6456] usb 2-1: Product: syz [ 449.893751][ T6456] usb 2-1: config 0 descriptor?? [ 449.906127][ T9285] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.934 (9285) [ 450.096081][ T9285] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 450.151567][ T9285] BTRFS info (device loop7): using crc32c checksum algorithm [ 450.339925][ T9285] BTRFS info (device loop7): enabling ssd optimizations [ 450.369764][ T9010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.404130][ T9285] BTRFS info (device loop7): turning on flush-on-commit [ 450.444168][ T9285] BTRFS info (device loop7): enabling free space tree [ 450.461227][ T9285] BTRFS info (device loop7): enabling auto defrag [ 450.468086][ T9285] BTRFS info (device loop7): use lzo compression, level 1 [ 450.499948][ T9285] BTRFS info (device loop7): max_inline set to 4096 [ 450.519803][ T9010] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.608764][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.616011][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.740511][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.747880][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.001409][ T5774] usb 2-1: USB disconnect, device number 21 [ 453.172135][ T9358] loop2: detected capacity change from 0 to 512 [ 453.238142][ T9358] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.2.947: corrupted xattr block 95: invalid header [ 453.327962][ T9358] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 453.333925][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 453.349657][ C0] EXT4-fs (loop2): initial error at time 1785308865: ext4_expand_extra_isize_ea:2810: inode 11 [ 453.360140][ C0] EXT4-fs (loop2): last error at time 1785308865: ext4_expand_extra_isize_ea:2810: inode 11 [ 453.391540][ T9358] EXT4-fs error (device loop2): ext4_validate_block_bitmap:431: comm syz.2.947: bg 0: block 7: invalid block bitmap [ 453.407351][ T9358] loop2: lost filesystem error report for type 5 error -117 [ 453.409578][ T9358] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 453.464044][ T9358] loop2: lost filesystem error report for type 5 error -117 [ 453.465178][ T9358] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #11: comm syz.2.947: corrupted xattr block 95: invalid header [ 453.518904][ T9358] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 453.519473][ T9358] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 453.540583][ T9358] EXT4-fs (loop2): 1 orphan inode deleted [ 453.548819][ T9358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.580654][ T8406] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 456.944673][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.929377][ T9395] overlayfs: overlapping lowerdir path [ 458.000204][ T9396] random: crng reseeded on system resumption [ 459.347563][ T187] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 459.455629][ T9010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.564773][ T187] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 459.587461][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.624129][ T187] usb 1-1: Product: syz [ 459.637785][ T187] usb 1-1: Manufacturer: syz [ 459.659295][ T187] usb 1-1: SerialNumber: syz [ 459.696338][ T187] ums-karma 1-1:1.0: USB Mass Storage device detected [ 459.757888][ T187] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 459.757888][ T187] Please send a copy of this message to and [ 460.025996][ T187] ums-karma 1-1:1.0: probe with driver ums-karma failed with error -5 [ 460.103214][ T187] usb 1-1: USB disconnect, device number 20 [ 460.595666][ T5282] 8021q: adding VLAN 0 to HW filter on device eth9 [ 460.655426][ T9406] loop1: detected capacity change from 0 to 32768 [ 461.024350][ T30] audit: type=1800 audit(1785308872.768:27): pid=9406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.956" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 461.044484][ T6456] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 461.152825][ T9010] veth0_vlan: entered promiscuous mode [ 461.218749][ T9010] veth1_vlan: entered promiscuous mode [ 461.236665][ T6456] usb 1-1: Using ep0 maxpacket: 8 [ 461.255105][ T6456] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 461.300835][ T6456] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 461.329298][ T6456] usb 1-1: config 0 has no interface number 0 [ 461.357443][ T6456] usb 1-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 461.372940][ T9010] veth0_macvtap: entered promiscuous mode [ 461.399175][ T9010] veth1_macvtap: entered promiscuous mode [ 461.420234][ T6456] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 461.441469][ T6456] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 461.496859][ T6456] usb 1-1: Product: syz [ 461.513139][ T9010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.546992][ T6456] usb 1-1: config 0 descriptor?? [ 461.598350][ T9010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.680915][ T6167] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.716216][ T6167] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.777121][ T6167] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.833179][ T1124] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.129706][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.165702][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.305477][ T9435] loop2: detected capacity change from 0 to 32768 [ 462.312009][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.348463][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.356081][ T9435] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.958 (9435) [ 462.451576][ T9435] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 462.491626][ T9435] BTRFS info (device loop2): using crc32c checksum algorithm [ 462.933052][ T9466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.908749][ T9466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.211450][ T9435] BTRFS error (device loop2): open_ctree failed: -4 [ 464.336147][ T5353] usb 1-1: USB disconnect, device number 21 [ 466.427666][ T9495] loop0: detected capacity change from 0 to 512 [ 466.481759][ T9495] EXT4-fs: Ignoring removed orlov option [ 466.504916][ T9495] EXT4-fs: Ignoring removed mblk_io_submit option [ 466.587312][ T9495] EXT4-fs error (device loop0): ext4_iget_extra_inode:5179: inode #15: comm syz.0.968: corrupted in-inode xattr: e_value size too large [ 466.752275][ T5282] 8021q: adding VLAN 0 to HW filter on device eth10 [ 466.778808][ T9495] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 466.779928][ T9495] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.968: couldn't read orphan inode 15 (err -117) [ 466.789201][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 466.789246][ C0] EXT4-fs (loop0): initial error at time 1785308878: ext4_iget_extra_inode:5179: inode 15 [ 466.789292][ C0] EXT4-fs (loop0): last error at time 1785308878: ext4_iget_extra_inode:5179: inode 15 [ 466.869358][ T9495] loop0: lost filesystem error report for type 5 error -117 [ 467.229451][ T9495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.418611][ T9502] fuse: Bad value for 'fd' [ 468.375933][ T5627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.156136][ T9518] loop2: detected capacity change from 0 to 256 [ 469.198395][ T9522] loop0: detected capacity change from 0 to 256 [ 469.321226][ T30] audit: type=1804 audit(1785308881.068:28): pid=9518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.975" name="/newroot/172/file0/bus" dev="loop2" ino=1049136 res=1 errno=0 [ 472.066752][ T5637] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 472.138121][ T9551] loop2: detected capacity change from 0 to 128 [ 472.195450][ T9551] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 472.229274][ T5637] usb 9-1: device descriptor read/64, error -71 [ 472.244161][ T9551] hpfs: filesystem error: improperly stopped [ 472.280497][ T9551] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 472.338359][ T9551] hpfs: You really don't want any checks? You are crazy... [ 472.382484][ T9551] hpfs: Code page index out of array [ 472.413816][ T9551] hpfs: code page support is disabled [ 472.452067][ T9551] hpfs: hpfs_map_4sectors(): unaligned read [ 472.479847][ T9551] hpfs: hpfs_map_4sectors(): unaligned read [ 472.485634][ T5637] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 472.495454][ T9551] hpfs: filesystem error: unable to find root dir [ 472.766141][ T5637] usb 9-1: device descriptor read/64, error -71 [ 473.062277][ T5637] usb usb9-port1: attempt power cycle [ 473.935903][ T5637] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 473.966333][ T5637] usb 9-1: device descriptor read/8, error -71 [ 474.825368][ T5637] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 474.915820][ T5637] usb 9-1: device descriptor read/8, error -71 [ 475.217407][ T5637] usb usb9-port1: unable to enumerate USB device [ 477.320937][ T9606] loop0: detected capacity change from 0 to 128 [ 477.360324][ T9606] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 477.403996][ T5746] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 477.412396][ T9606] hpfs: filesystem error: improperly stopped [ 477.468633][ T9606] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 477.518807][ T9606] hpfs: You really don't want any checks? You are crazy... [ 477.562527][ T9606] hpfs: Code page index out of array [ 477.612960][ T9606] hpfs: code page support is disabled [ 477.620032][ T5746] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.646014][ T9606] hpfs: hpfs_map_4sectors(): unaligned read [ 477.659117][ T5746] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 477.671983][ T9606] hpfs: hpfs_map_4sectors(): unaligned read [ 477.686414][ T5746] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.704299][ T9606] hpfs: filesystem error: unable to find root dir [ 477.759767][ T5746] usb 8-1: config 0 descriptor?? [ 477.796423][ T5282] 8021q: adding VLAN 0 to HW filter on device eth11 [ 478.093177][ T5746] usbhid 8-1:0.0: can't add hid device: -71 [ 478.146151][ T5746] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 478.252205][ T5746] usb 8-1: USB disconnect, device number 3 [ 478.581504][ T9625] loop0: detected capacity change from 0 to 512 [ 478.627033][ T6456] playstation 0003:054C:05C4.0008: hidraw0: USB HID v0.01 Device [syz1] on syz1 [ 478.654127][ T9625] EXT4-fs: Ignoring removed orlov option [ 478.715718][ T5746] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 478.738756][ T9625] EXT4-fs: Ignoring removed mblk_io_submit option [ 478.751522][ T6456] playstation 0003:054C:05C4.0008: Failed to retrieve feature with reportID 18: -5 [ 478.819031][ T9615] loop1: detected capacity change from 0 to 131072 [ 478.831762][ T9615] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 478.837542][ T6456] playstation 0003:054C:05C4.0008: Failed to retrieve DualShock4 pairing info: -5 [ 478.875521][ T9615] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 478.889341][ T9615] F2FS-fs (loop1): invalid crc value [ 478.901392][ T9625] EXT4-fs error (device loop0): ext4_iget_extra_inode:5179: inode #15: comm syz.0.1006: corrupted in-inode xattr: e_value size too large [ 478.916956][ T6456] playstation 0003:054C:05C4.0008: Failed to get MAC address from DualShock4 [ 478.927609][ T6456] playstation 0003:054C:05C4.0008: Failed to create dualshock4. [ 478.945129][ T6456] playstation 0003:054C:05C4.0008: probe with driver playstation failed with error -5 [ 478.967821][ T5746] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 478.979282][ T5746] usb 8-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 478.996511][ T5746] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.017708][ T5746] usb 8-1: config 0 descriptor?? [ 479.021738][ T9615] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 479.050900][ T9615] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 479.058566][ T9625] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 479.060142][ T9615] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 479.064856][ T9625] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1006: couldn't read orphan inode 15 (err -117) [ 479.076873][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 479.076905][ C0] EXT4-fs (loop0): initial error at time 1785308890: ext4_iget_extra_inode:5179: inode 15 [ 479.076962][ C0] EXT4-fs (loop0): last error at time 1785308890: ext4_iget_extra_inode:5179: inode 15 [ 479.089091][ T9629] fido_id[9629]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 479.169224][ T9625] loop0: lost filesystem error report for type 5 error -117 [ 479.373473][ T9625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.480651][ T5746] hid_parser_main: 4 callbacks suppressed [ 479.480684][ T5746] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 479.565823][ T5746] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 479.615894][ T5627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.629985][ T5746] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 479.635792][ T5353] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 479.685033][ T5746] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 479.742874][ T5746] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 479.793967][ T5353] usb 9-1: device descriptor read/64, error -71 [ 479.800275][ T5746] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 479.800384][ T5746] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 479.894876][ T5746] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 479.937620][ T5746] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 480.147494][ T5353] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 480.155599][ T5826] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 480.189625][ T5746] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 480.223319][ T5746] logitech-djreceiver 0003:046D:C71F.0009: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.7-1/input0 [ 480.486639][ T5353] usb 9-1: device descriptor read/64, error -71 [ 480.497269][ T5826] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 480.537743][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.564974][ T5746] usb 8-1: USB disconnect, device number 4 [ 480.634640][ T5353] usb usb9-port1: attempt power cycle [ 480.660410][ T5826] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 480.708028][ T5826] usb 6-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 480.723790][ T9664] loop9: detected capacity change from 0 to 7 [ 480.799725][ T5826] usb 6-1: Falling back to sysfs fallback for: emi26/loader.fw [ 480.810127][ C1] blk_print_req_error: 10 callbacks suppressed [ 480.810153][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3 [ 480.826128][ C1] buffer_io_error: 10 callbacks suppressed [ 480.826157][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 480.851729][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3 [ 480.861546][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 480.879157][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3 [ 480.889007][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 480.917426][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3 [ 480.927225][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 480.936588][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3 [ 480.946476][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 480.958284][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3 [ 480.968006][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 480.981679][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3 [ 480.991439][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.018609][ T9664] ldm_validate_partition_table(): Disk read failed. [ 481.133098][ T5353] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 481.270548][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3 [ 481.280344][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.405102][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3 [ 481.414924][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.450029][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3 [ 481.459800][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.500125][ T5353] usb 9-1: device descriptor read/8, error -71 [ 481.506561][ T9664] Dev loop9: unable to read RDB block 0 [ 481.557721][ T9647] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 481.600801][ T9664] loop9: unable to read partition table [ 481.642369][ T9664] loop9: partition table beyond EOD, truncated [ 481.673063][ T9664] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 481.778173][ T5826] usb 6-1: emi26_load_firmware - request_firmware() failed [ 481.815340][ T5353] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 481.827069][ T5826] usb 6-1: emi26_load_firmware - error loading firmware: error = -2 [ 481.880512][ T5826] emi26 - firmware loader 6-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 481.898740][ T5353] usb 9-1: device descriptor read/8, error -71 [ 481.996193][ T5826] usb 6-1: USB disconnect, device number 17 [ 482.034444][ T5353] usb usb9-port1: unable to enumerate USB device [ 482.194778][ T5353] playstation 0003:054C:05C4.000A: hidraw0: USB HID v0.01 Device [syz1] on syz1 [ 482.234579][ T5282] 8021q: adding VLAN 0 to HW filter on device eth12 [ 482.283398][ T5353] playstation 0003:054C:05C4.000A: Failed to retrieve feature with reportID 18: -5 [ 482.425086][ T9656] Bluetooth: hci0: command 0x0406 tx timeout [ 482.479473][ T5353] playstation 0003:054C:05C4.000A: Failed to retrieve DualShock4 pairing info: -5 [ 482.500302][ T5353] playstation 0003:054C:05C4.000A: Failed to get MAC address from DualShock4 [ 482.513978][ T5353] playstation 0003:054C:05C4.000A: Failed to create dualshock4. [ 482.573157][ T5353] playstation 0003:054C:05C4.000A: probe with driver playstation failed with error -5 [ 483.754929][ T9689] fido_id[9689]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 483.848405][ T9690] loop0: detected capacity change from 0 to 131072 [ 483.857487][ T9690] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0) [ 483.867929][ T9690] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 483.878655][ T9690] F2FS-fs (loop0): invalid crc value [ 484.056684][ T9690] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 484.078711][ T9690] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 484.085873][ T9690] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 485.071135][ T9715] loop9: detected capacity change from 0 to 7 [ 485.153023][ T9715] ldm_validate_partition_table(): Disk read failed. [ 485.228124][ T9715] Dev loop9: unable to read RDB block 0 [ 485.293825][ T9715] loop9: unable to read partition table [ 485.324541][ T9715] loop9: partition table beyond EOD, truncated [ 485.330757][ T9715] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 485.404256][ T5353] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 485.800528][ T5353] usb 6-1: Using ep0 maxpacket: 8 [ 486.298755][ T5353] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 486.351969][ T5353] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 486.395734][ T5353] usb 6-1: config 0 has no interface number 0 [ 486.435721][ T5353] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 486.492127][ T5353] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59219, setting to 1024 [ 486.569860][ T9731] loop7: detected capacity change from 0 to 512 [ 486.611731][ T5353] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 486.642440][ T9731] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.7.1036: corrupted xattr block 95: invalid header [ 486.663790][ T5353] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 486.765500][ T5353] usb 6-1: Product: syz [ 486.788678][ T9731] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 486.789935][ T9731] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz.7.1036: bg 0: block 7: invalid block bitmap [ 486.800057][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 486.800089][ C0] EXT4-fs (loop7): initial error at time 1785308898: ext4_expand_extra_isize_ea:2810: inode 11 [ 486.800149][ C0] EXT4-fs (loop7): last error at time 1785308898: ext4_expand_extra_isize_ea:2810: inode 11 [ 486.846703][ T5746] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 486.870294][ T9731] loop7: lost filesystem error report for type 5 error -117 [ 486.904014][ T5353] usb 6-1: config 0 descriptor?? [ 486.934688][ T9731] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 486.964286][ T9719] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 486.983147][ T9731] loop7: lost filesystem error report for type 5 error -117 [ 486.986034][ T9731] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2972: inode #11: comm syz.7.1036: corrupted xattr block 95: invalid header [ 487.024632][ T5746] usb 2-1: device descriptor read/64, error -71 [ 487.208521][ T9731] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 487.287087][ T9731] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -117) [ 487.316302][ T9731] EXT4-fs (loop7): 1 orphan inode deleted [ 488.135641][ T5746] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 488.170437][ T9731] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.514891][ T5746] usb 2-1: device descriptor read/64, error -71 [ 489.001639][ T5746] usb usb2-port1: attempt power cycle [ 489.364078][ T5746] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 489.373950][ T8406] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.411313][ T5746] usb 2-1: device descriptor read/8, error -71 [ 489.448031][ T5353] usb 6-1: USB disconnect, device number 18 [ 489.714533][ T5746] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 490.041130][ T5746] usb 2-1: device not accepting address 25, error -71 [ 490.150297][ T5746] usb usb2-port1: unable to enumerate USB device [ 490.644188][ T9760] loop0: detected capacity change from 0 to 131072 [ 490.665445][ T9760] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0) [ 490.678407][ T9760] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 490.691331][ T9760] F2FS-fs (loop0): invalid crc value [ 490.817629][ T9760] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 490.840098][ T9760] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 490.847236][ T9760] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 494.524585][ T187] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 494.714591][ T5774] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 494.749336][ T187] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 494.789869][ T187] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 494.824765][ T187] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 494.853578][ T187] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 494.887918][ T187] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 494.912746][ T5774] usb 8-1: Using ep0 maxpacket: 8 [ 494.933940][ T5774] usb 8-1: config index 0 descriptor too short (expected 6427, got 27) [ 494.947221][ T187] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 494.965097][ T5774] usb 8-1: config 0 has an invalid interface number: 21 but max is 0 [ 494.986547][ T5774] usb 8-1: config 0 has no interface number 0 [ 495.001246][ T5774] usb 8-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 495.016802][ T187] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 495.034419][ T187] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 495.053419][ T5774] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59219, setting to 1024 [ 495.096291][ T187] usb 2-1: Product: syz [ 495.114832][ T187] usb 2-1: Manufacturer: syz [ 495.121451][ T5774] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 495.160402][ T5774] usb 8-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 495.175492][ T9801] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 495.218764][ T5774] usb 8-1: Product: syz [ 495.231719][ T187] cdc_wdm 2-1:1.0: skipping garbage [ 495.267633][ T187] cdc_wdm 2-1:1.0: skipping garbage [ 495.279287][ T5774] usb 8-1: config 0 descriptor?? [ 495.302893][ T9807] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 495.318141][ T187] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 495.354600][ T187] cdc_wdm 2-1:1.0: Unknown control protocol [ 495.521944][ T187] usb 2-1: USB disconnect, device number 26 [ 496.008540][ T5774] input: syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.21/input/input18 [ 496.200480][ T9815] loop8: detected capacity change from 0 to 131072 [ 496.208945][ T5353] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 496.222593][ T9815] F2FS-fs (loop8): Segment count (31) mismatch with total segments from devices (0) [ 496.232122][ T9815] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 496.288217][ T5774] usb 8-1: USB disconnect, device number 5 [ 496.294289][ C0] keyspan_remote 8-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 496.327128][ T9815] F2FS-fs (loop8): invalid crc value [ 496.374515][ T5353] usb 3-1: device descriptor read/64, error -71 [ 496.703991][ T5353] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 496.720737][ T9815] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 498.316166][ T5353] usb 3-1: device descriptor read/64, error -71 [ 498.373989][ T9815] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 498.381141][ T9815] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 499.368965][ T5353] usb usb3-port1: attempt power cycle [ 500.426320][ T9848] loop0: detected capacity change from 0 to 512 [ 500.814500][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.933522][ T5353] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 500.947734][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.762453][ T5353] usb 3-1: device descriptor read/8, error -71 [ 503.690873][ T9872] syz.1.1075 (9872): drop_caches: 2 [ 504.019227][ T9883] loop0: detected capacity change from 0 to 512 [ 505.149134][ T9883] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.0.1079: corrupted xattr block 95: invalid header [ 505.474436][ T9883] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 505.483935][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 505.499557][ C1] EXT4-fs (loop0): initial error at time 1785308917: ext4_expand_extra_isize_ea:2810: inode 11 [ 505.509958][ C1] EXT4-fs (loop0): last error at time 1785308917: ext4_expand_extra_isize_ea:2810: inode 11 [ 505.555619][ T9883] EXT4-fs error (device loop0): ext4_validate_block_bitmap:431: comm syz.0.1079: bg 0: block 7: invalid block bitmap [ 505.689746][ T9883] loop0: lost filesystem error report for type 5 error -117 [ 505.700871][ T9883] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 505.849928][ T9883] loop0: lost filesystem error report for type 5 error -117 [ 506.104255][ T9883] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #11: comm syz.0.1079: corrupted xattr block 95: invalid header [ 506.326588][ T9883] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 506.328339][ T9895] loop2: detected capacity change from 0 to 2048 [ 506.344552][ T9883] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 506.500778][ T9883] EXT4-fs (loop0): 1 orphan inode deleted [ 506.558050][ T9895] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 506.602814][ T9883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.800304][ T9893] loop7: detected capacity change from 0 to 131072 [ 506.815752][ T9893] F2FS-fs (loop7): Segment count (31) mismatch with total segments from devices (0) [ 506.825198][ T9893] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 506.842260][ T9893] F2FS-fs (loop7): invalid crc value [ 507.071370][ T9893] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 507.782213][ T9893] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 507.794077][ T9893] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 508.690652][ T5926] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 509.223973][ T5926] usb 6-1: device descriptor read/64, error -71 [ 509.504992][ T5926] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 509.667417][ T9927] syz.1.1090 (9927): drop_caches: 2 [ 509.736621][ T5627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.749315][ T5926] usb 6-1: device descriptor read/64, error -71 [ 509.887354][ T5926] usb usb6-port1: attempt power cycle [ 510.274650][ T5926] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 510.458309][ T5926] usb 6-1: device descriptor read/8, error -71 [ 510.794998][ T5926] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 510.855829][ T5926] usb 6-1: device descriptor read/8, error -71 [ 511.099157][ T5926] usb usb6-port1: unable to enumerate USB device [ 512.205440][ T9956] loop1: detected capacity change from 0 to 512 [ 512.213119][ T9956] EXT4-fs: Ignoring removed orlov option [ 512.233236][ T9956] EXT4-fs: Ignoring removed mblk_io_submit option [ 512.298438][ T9956] EXT4-fs error (device loop1): ext4_iget_extra_inode:5179: inode #15: comm syz.1.1097: corrupted in-inode xattr: e_value size too large [ 512.348808][ T9956] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 512.351461][ T9956] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1097: couldn't read orphan inode 15 (err -117) [ 512.360706][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 512.360738][ C1] EXT4-fs (loop1): initial error at time 1785308924: ext4_iget_extra_inode:5179: inode 15 [ 512.360793][ C1] EXT4-fs (loop1): last error at time 1785308924: ext4_iget_extra_inode:5179: inode 15 [ 512.492631][ T9956] loop1: lost filesystem error report for type 5 error -117 [ 512.557798][ T9956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.566539][ T30] audit: type=1326 audit(1785308924.318:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9963 comm="syz.0.1099" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f2d9de99 code=0x7ffc0000 [ 513.005842][ T30] audit: type=1326 audit(1785308924.318:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9963 comm="syz.0.1099" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f2d9de99 code=0x7ffc0000 [ 513.118843][ T30] audit: type=1326 audit(1785308924.318:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9963 comm="syz.0.1099" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f2d9de99 code=0x7ffc0000 [ 513.563322][ T30] audit: type=1326 audit(1785308924.368:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9963 comm="syz.0.1099" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fd7f2d9de99 code=0x7ffc0000 [ 513.589405][ T30] audit: type=1326 audit(1785308924.388:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9963 comm="syz.0.1099" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f2d9de99 code=0x7ffc0000 [ 513.605668][ T9979] loop5: detected capacity change from 0 to 512 [ 513.635470][ T30] audit: type=1326 audit(1785308924.408:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9963 comm="syz.0.1099" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f2d9de99 code=0x7ffc0000 [ 514.298728][ T9979] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.1103: corrupted xattr block 95: invalid header [ 514.403068][ T30] audit: type=1326 audit(1785308924.418:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9963 comm="syz.0.1099" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f2d9de99 code=0x7ffc0000 [ 514.451422][ T9979] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 514.451709][ T30] audit: type=1326 audit(1785308924.508:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9963 comm="syz.0.1099" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7f2d5e6ce code=0x7ffc0000 [ 514.461033][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 514.461069][ C0] EXT4-fs (loop5): initial error at time 1785308926: ext4_expand_extra_isize_ea:2810: inode 11 [ 514.461121][ C0] EXT4-fs (loop5): last error at time 1785308926: ext4_expand_extra_isize_ea:2810: inode 11 [ 514.527212][ T9979] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz.5.1103: bg 0: block 7: invalid block bitmap [ 514.545551][ T9979] loop5: lost filesystem error report for type 5 error -117 [ 514.550662][ T30] audit: type=1326 audit(1785308924.538:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9963 comm="syz.0.1099" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7f2d5e6ce code=0x7ffc0000 [ 514.553176][ T9979] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 514.558832][ T30] audit: type=1326 audit(1785308924.548:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9963 comm="syz.0.1099" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7f2d5e6ce code=0x7ffc0000 [ 514.625831][ T9979] loop5: lost filesystem error report for type 5 error -117 [ 514.628582][ T9979] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.1103: corrupted xattr block 95: invalid header [ 514.661980][ T9979] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 514.670740][ T9979] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 514.758743][ T9979] EXT4-fs (loop5): 1 orphan inode deleted [ 514.800639][ T9979] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.956716][T10000] loop0: detected capacity change from 0 to 256 [ 517.002927][ T5628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.333103][T10023] loop2: detected capacity change from 0 to 1024 [ 519.573790][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 519.573815][ T30] audit: type=1800 audit(1785308931.318:102): pid=10023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1114" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 519.616413][ T187] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 519.695576][ T6456] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 519.794044][ T187] usb 6-1: device descriptor read/64, error -71 [ 519.865265][ T6456] usb 1-1: Using ep0 maxpacket: 8 [ 520.147271][ T6456] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 520.344813][ T6456] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 520.392737][ T187] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 520.403311][ T6456] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 520.439906][ T6456] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 520.474956][ T6456] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.518634][ T6456] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 520.533051][ T6456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.564639][ T187] usb 6-1: device descriptor read/64, error -71 [ 520.686032][ T187] usb usb6-port1: attempt power cycle [ 521.073351][ T6456] usb 1-1: GET_CAPABILITIES returned 0 [ 521.180766][ T6456] usbtmc 1-1:16.0: can't read capabilities [ 521.226115][ T187] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 521.246414][T10039] loop8: detected capacity change from 0 to 4096 [ 521.353924][T10039] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 521.490874][ T187] usb 6-1: device descriptor read/8, error -71 [ 521.589390][T10027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.894140][ T187] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 521.945060][T10027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.392254][T10039] ntfs3(loop8): ino=19, mi_enum_attr [ 522.413225][ T6456] usb 1-1: USB disconnect, device number 22 [ 522.444669][T10039] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 522.701722][T10039] ntfs3(loop8): failed to convert "c46c" to cp936 [ 522.779330][T10039] ntfs3(loop8): ino=20, mi_enum_attr [ 524.023313][ T187] usb 6-1: device descriptor read/8, error -71 [ 524.072542][T10043] syz.7.1119 (10043): drop_caches: 2 [ 524.134251][ T187] usb usb6-port1: unable to enumerate USB device [ 524.296648][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.562618][T10050] loop5: detected capacity change from 0 to 512 [ 525.759666][T10050] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.1122: corrupted xattr block 95: invalid header [ 525.818788][T10050] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 525.823923][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 525.839570][ C0] EXT4-fs (loop5): initial error at time 1785308937: ext4_expand_extra_isize_ea:2810: inode 11 [ 525.849966][ C0] EXT4-fs (loop5): last error at time 1785308937: ext4_expand_extra_isize_ea:2810: inode 11 [ 525.858119][T10050] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz.5.1122: bg 0: block 7: invalid block bitmap [ 525.934652][T10050] loop5: lost filesystem error report for type 5 error -117 [ 525.943327][T10050] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 526.066473][T10050] loop5: lost filesystem error report for type 5 error -117 [ 526.067784][T10050] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.1122: corrupted xattr block 95: invalid header [ 526.091476][T10066] loop8: detected capacity change from 0 to 256 [ 526.229677][T10070] loop2: detected capacity change from 0 to 256 [ 526.290732][T10050] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 526.292506][T10050] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 526.334937][T10070] exfat: Deprecated parameter 'namecase' [ 526.361621][T10070] exfat: Deprecated parameter 'namecase' [ 526.372267][T10050] EXT4-fs (loop5): 1 orphan inode deleted [ 526.508802][T10070] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 526.515875][T10050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.581466][T10079] loop0: detected capacity change from 0 to 512 [ 526.683222][T10079] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 526.775449][T10079] EXT4-fs (loop0): DAX unsupported by block device. [ 531.301244][ T5628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.837144][T10102] loop0: detected capacity change from 0 to 512 [ 531.863515][T10102] EXT4-fs: Ignoring removed orlov option [ 531.897818][T10102] EXT4-fs: Ignoring removed mblk_io_submit option [ 532.004272][ T5826] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 533.027943][T10102] EXT4-fs error (device loop0): ext4_iget_extra_inode:5179: inode #15: comm syz.0.1137: corrupted in-inode xattr: e_value size too large [ 533.047286][ T5826] usb 8-1: Using ep0 maxpacket: 8 [ 533.055222][T10102] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 533.056191][T10102] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1137: couldn't read orphan inode 15 (err -117) [ 533.065419][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 533.065453][ C0] EXT4-fs (loop0): initial error at time 1785308944: ext4_iget_extra_inode:5179: inode 15 [ 533.065509][ C0] EXT4-fs (loop0): last error at time 1785308944: ext4_iget_extra_inode:5179: inode 15 [ 533.087503][ T5826] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 533.152091][T10102] loop0: lost filesystem error report for type 5 error -117 [ 533.163607][T10102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.295222][ T5826] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 533.365018][ T5826] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 533.400935][ T5826] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 533.634458][ T5826] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.716822][ T5826] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 533.914363][ T5826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.218751][ T5826] usb 8-1: GET_CAPABILITIES returned 0 [ 534.241926][ T5826] usbtmc 8-1:16.0: can't read capabilities [ 534.381786][T10137] loop1: detected capacity change from 0 to 512 [ 534.479165][T10137] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.1.1146: corrupted xattr block 95: invalid header [ 534.518721][T10100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.627406][T10100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.670025][T10137] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 534.673969][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 534.689739][ C1] EXT4-fs (loop1): initial error at time 1785308946: ext4_expand_extra_isize_ea:2810: inode 11 [ 534.700163][ C1] EXT4-fs (loop1): last error at time 1785308946: ext4_expand_extra_isize_ea:2810: inode 11 [ 534.897275][T10137] EXT4-fs error (device loop1): ext4_validate_block_bitmap:431: comm syz.1.1146: bg 0: block 7: invalid block bitmap [ 535.069856][ T5826] usb 8-1: USB disconnect, device number 6 [ 535.182147][T10137] loop1: lost filesystem error report for type 5 error -117 [ 535.307871][T10137] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 535.494463][T10137] loop1: lost filesystem error report for type 5 error -117 [ 535.496919][T10137] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #11: comm syz.1.1146: corrupted xattr block 95: invalid header [ 535.519731][T10137] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 535.523825][T10137] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 535.542416][T10137] EXT4-fs (loop1): 1 orphan inode deleted [ 535.559276][T10137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.667159][T10150] loop5: detected capacity change from 0 to 256 [ 536.838351][ T30] audit: type=1804 audit(1785308948.588:103): pid=10158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1149" name="/newroot/199/file0/bus" dev="loop5" ino=1049312 res=1 errno=0 [ 538.732926][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 538.806733][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.355687][T10180] mmap: syz.1.1154 (10180) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 541.011543][T10169] loop8: detected capacity change from 0 to 131072 [ 541.026031][T10169] F2FS-fs (loop8): Segment count (31) mismatch with total segments from devices (0) [ 541.036742][T10169] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 541.075385][T10169] F2FS-fs (loop8): invalid crc value [ 541.102569][ T5627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.170295][T10169] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 541.193639][T10169] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 541.200767][T10169] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 542.875505][T10199] loop5: detected capacity change from 0 to 512 [ 542.988722][T10199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.074458][T10199] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.214006][ T5826] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 543.302908][T10210] loop8: detected capacity change from 0 to 256 [ 543.336953][ T30] audit: type=1804 audit(1785308955.088:104): pid=10210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1163" name="/newroot/31/file0/bus" dev="loop8" ino=1049313 res=1 errno=0 [ 543.370257][ T187] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 543.414148][ T5826] usb 8-1: Using ep0 maxpacket: 8 [ 543.439309][ T5826] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 543.459240][ T5826] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 543.497368][ T5826] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 543.535524][ T5826] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 543.536889][ T187] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 543.560993][ T5826] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.616573][ T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.619029][ T5826] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 543.674461][ T5826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.691250][ T187] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 543.748661][ T187] usb 1-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 543.776963][ T187] usb 1-1: Falling back to sysfs fallback for: emi26/loader.fw [ 543.850869][ T5628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.894027][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 543.929898][ T5826] usb 8-1: GET_CAPABILITIES returned 0 [ 543.939572][ T5826] usbtmc 8-1:16.0: can't read capabilities [ 544.066474][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.094266][ T9] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 544.121519][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 544.143736][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.161034][ T9] usb 9-1: Product: syz [ 544.162213][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 544.169845][ T9] usb 9-1: Manufacturer: syz [ 544.191279][ T9] usb 9-1: SerialNumber: syz [ 544.193674][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 544.205014][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 544.214109][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 544.218637][ T9] cdc_mbim 9-1:1.0: skipping garbage [ 544.223196][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 544.241818][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 544.250951][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 544.260027][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 544.269101][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 544.292427][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 544.301566][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 544.310663][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 544.332787][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 544.341910][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 544.351031][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 544.360135][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 544.425000][T10204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.439713][T10215] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 544.453093][T10204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.465897][ T5826] usb 8-1: USB disconnect, device number 7 [ 545.126541][T10215] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 545.382153][ T9] cdc_mbim 9-1:1.0: setting tx_max = 16384 [ 545.426242][T10229] loop1: detected capacity change from 0 to 4096 [ 545.455653][T10229] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 545.900200][ T9] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 545.969707][T10229] ntfs3(loop1): ino=19, mi_enum_attr [ 545.991325][T10229] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 546.872882][ T9] wwan wwan0: port wwan0mbim0 attached [ 547.790613][ T9] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, ea:4d:85:48:c1:b8 [ 548.522441][ T9] usb 9-1: USB disconnect, device number 10 [ 548.580162][T10247] loop7: detected capacity change from 0 to 256 [ 548.605510][ T9] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 548.727586][ T30] audit: type=1804 audit(1785308960.478:105): pid=10247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1178" name="/newroot/53/file0/bus" dev="loop7" ino=1049314 res=1 errno=0 [ 549.367674][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 549.727839][T10264] loop8: detected capacity change from 0 to 512 [ 549.766289][T10264] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 549.787219][T10264] EXT4-fs (loop8): DAX unsupported by block device. [ 549.869432][T10267] syz.2.1183 (10267): drop_caches: 2 [ 550.211790][T10269] loop5: detected capacity change from 0 to 4096 [ 550.632235][T10269] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 551.205618][ T29] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 551.316549][T10269] ntfs3(loop5): ino=19, mi_enum_attr [ 551.369030][T10269] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 551.434707][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 551.472352][ T29] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 551.562917][ T29] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 551.590364][T10269] ntfs3(loop5): failed to convert "c46c" to cp936 [ 551.648393][T10269] ntfs3(loop5): ino=20, mi_enum_attr [ 551.663361][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 551.727625][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 551.789348][ T29] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.886354][ T29] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 551.967252][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.298582][ T29] usb 3-1: GET_CAPABILITIES returned 0 [ 552.359620][ T29] usbtmc 3-1:16.0: can't read capabilities [ 552.535997][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.545134][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.554234][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.563334][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.582212][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.591334][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.597039][T10294] loop8: detected capacity change from 0 to 512 [ 552.618231][T10294] EXT4-fs: Ignoring removed orlov option [ 552.635987][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.645108][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.654201][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.664236][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 552.676400][T10295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.697984][T10294] EXT4-fs: Ignoring removed mblk_io_submit option [ 552.731143][T10295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.757235][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.768369][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.777474][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.786586][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.805916][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.815020][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.820204][T10294] EXT4-fs error (device loop8): ext4_iget_extra_inode:5179: inode #15: comm syz.8.1190: corrupted in-inode xattr: e_value size too large [ 552.824137][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.856277][T10294] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 552.861607][T10294] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.1190: couldn't read orphan inode 15 (err -117) [ 552.870883][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 552.870920][ C1] EXT4-fs (loop8): initial error at time 1785308964: ext4_iget_extra_inode:5179: inode 15 [ 552.870977][ C1] EXT4-fs (loop8): last error at time 1785308964: ext4_iget_extra_inode:5179: inode 15 [ 552.911764][ T24] usb 2-1: device descriptor read/64, error -71 [ 552.926488][T10294] loop8: lost filesystem error report for type 5 error -117 [ 552.935274][T10294] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.939270][ T29] usb 3-1: USB disconnect, device number 23 [ 553.185556][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 553.536891][ T24] usb 2-1: device descriptor read/64, error -71 [ 553.725178][ T24] usb usb2-port1: attempt power cycle [ 554.184052][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 554.353836][ T24] usb 2-1: device descriptor read/8, error -71 [ 554.466849][ T9656] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 554.525731][T10311] loop0: detected capacity change from 0 to 256 [ 554.615194][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 554.633360][ T30] audit: type=1804 audit(1785308966.378:106): pid=10311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1194" name="/newroot/193/file0/bus" dev="loop0" ino=1049315 res=1 errno=0 [ 554.684868][ T24] usb 2-1: device descriptor read/8, error -71 [ 554.808445][ T24] usb usb2-port1: unable to enumerate USB device [ 555.704445][ T9010] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.827042][T10329] loop2: detected capacity change from 0 to 2048 [ 555.868570][T10329] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 555.930311][ T30] audit: type=1800 audit(1785308967.678:107): pid=10329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1198" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 556.059926][T10332] input: syz0 as /devices/virtual/input/input19 [ 556.917059][T10340] loop8: detected capacity change from 0 to 4096 [ 556.948051][T10340] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 557.067132][ T30] audit: type=1326 audit(1785308968.818:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.7.1203" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405419de99 code=0x7ffc0000 [ 557.128275][T10340] ntfs3(loop8): ino=19, mi_enum_attr [ 557.145126][ T30] audit: type=1326 audit(1785308968.848:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.7.1203" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405419de99 code=0x7ffc0000 [ 557.147665][T10340] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 557.170536][ T30] audit: type=1326 audit(1785308968.848:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.7.1203" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405419de99 code=0x7ffc0000 [ 557.194477][ T6456] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 557.210978][ T30] audit: type=1326 audit(1785308968.858:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.7.1203" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f405419de99 code=0x7ffc0000 [ 557.300705][ T30] audit: type=1326 audit(1785308968.858:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.7.1203" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405419de99 code=0x7ffc0000 [ 557.446813][ T6456] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 557.512992][ T30] audit: type=1326 audit(1785308968.858:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.7.1203" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405419de99 code=0x7ffc0000 [ 558.126477][T10340] ntfs3(loop8): failed to convert "c46c" to cp936 [ 558.303823][ T6456] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.315530][ T30] audit: type=1326 audit(1785308968.858:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.7.1203" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405419de99 code=0x7ffc0000 [ 558.342659][ T30] audit: type=1326 audit(1785308968.858:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.7.1203" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f405419de99 code=0x7ffc0000 [ 558.370706][ T6456] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 558.388335][T10340] ntfs3(loop8): ino=20, mi_enum_attr [ 558.499157][ T9656] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 559.340131][ T5826] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 559.534185][ T5826] usb 2-1: device descriptor read/64, error -71 [ 559.628224][T10375] random: crng reseeded on system resumption [ 559.721178][T10378] loop2: detected capacity change from 0 to 512 [ 559.745013][T10378] EXT4-fs: Ignoring removed orlov option [ 559.777608][T10378] EXT4-fs: Ignoring removed mblk_io_submit option [ 559.814099][ T5826] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 559.830387][T10378] EXT4-fs error (device loop2): ext4_iget_extra_inode:5179: inode #15: comm syz.2.1212: corrupted in-inode xattr: e_value size too large [ 559.884798][T10378] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 559.889460][T10378] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1212: couldn't read orphan inode 15 (err -117) [ 559.898737][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 559.898769][ C1] EXT4-fs (loop2): initial error at time 1785308971: ext4_iget_extra_inode:5179: inode 15 [ 559.898826][ C1] EXT4-fs (loop2): last error at time 1785308971: ext4_iget_extra_inode:5179: inode 15 [ 559.960569][T10378] loop2: lost filesystem error report for type 5 error -117 [ 559.978269][T10378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.993974][ T5826] usb 2-1: device descriptor read/64, error -71 [ 560.074157][ T5746] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 560.260855][ T5826] usb usb2-port1: attempt power cycle [ 560.360264][ T5746] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.401088][ T5746] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 560.432141][ T5746] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 560.441829][ T5746] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.464161][ T5746] usb 8-1: Product: syz [ 560.468647][ T5746] usb 8-1: Manufacturer: syz [ 560.479310][ T5746] usb 8-1: SerialNumber: syz [ 560.542315][ T5746] cdc_mbim 8-1:1.0: skipping garbage [ 560.604477][ T5826] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 560.635231][ T5826] usb 2-1: device descriptor read/8, error -71 [ 560.745407][T10384] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 560.934590][ T5826] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 561.072741][ T5826] usb 2-1: device descriptor read/8, error -71 [ 561.111037][T10399] loop5: detected capacity change from 0 to 4096 [ 561.140097][T10399] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 561.311062][T10397] loop0: detected capacity change from 0 to 2048 [ 561.326186][ T5826] usb usb2-port1: unable to enumerate USB device [ 561.580478][T10399] ntfs3(loop5): ino=19, mi_enum_attr [ 561.627505][T10399] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 561.797190][T10384] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 561.918917][ T5746] cdc_mbim 8-1:1.0: setting tx_max = 48 [ 561.976408][T10397] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 561.987904][ T5746] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 562.067691][ T5746] wwan wwan0: port wwan0mbim0 attached [ 562.074105][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 562.074128][ T30] audit: type=1800 audit(1785308973.818:117): pid=10397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1218" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 562.266760][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.280721][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.315473][ T5746] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, c6:02:c2:6e:e1:1c [ 563.246395][T10407] loop1: detected capacity change from 0 to 512 [ 563.299212][T10407] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 563.366852][T10407] EXT4-fs (loop1): DAX unsupported by block device. [ 563.381208][ T5826] usb 8-1: USB disconnect, device number 8 [ 563.393863][ T5826] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM [ 563.651651][ T9656] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 563.667343][ T5826] wwan wwan0: port wwan0mbim0 disconnected [ 565.054113][T10421] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1224'. [ 567.989794][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.047639][ T9656] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 568.125882][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 568.151834][T10462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1236'. [ 568.300650][T10466] loop2: detected capacity change from 0 to 512 [ 568.326050][T10466] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 568.337247][T10466] EXT4-fs (loop2): DAX unsupported by block device. [ 568.348876][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.364146][ T9] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 568.377466][ T9] usb 8-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 568.408875][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.437247][ T9] usb 8-1: Product: syz [ 568.452513][ T9] usb 8-1: Manufacturer: syz [ 568.628852][ T9] usb 8-1: SerialNumber: syz [ 569.256958][ T9] usb 8-1: USB disconnect, device number 9 [ 570.281263][T10477] loop8: detected capacity change from 0 to 256 [ 571.674046][ T5353] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 571.834035][ T5759] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 571.855758][ T5353] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 571.890809][ T5353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.932487][ T5353] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 571.972254][ T9656] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 572.035982][ T5759] usb 9-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 572.054737][ T5759] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.091217][ T5759] emi26 - firmware loader 9-1:1.0: emi26_probe start [ 572.306786][T10502] loop0: detected capacity change from 0 to 512 [ 572.455406][T10502] EXT4-fs: Ignoring removed orlov option [ 572.571481][T10502] EXT4-fs: Ignoring removed mblk_io_submit option [ 573.041317][T10502] EXT4-fs error (device loop0): ext4_iget_extra_inode:5179: inode #15: comm syz.0.1251: corrupted in-inode xattr: e_value size too large [ 573.117624][T10502] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 573.118181][T10502] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1251: couldn't read orphan inode 15 (err -117) [ 573.128981][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 573.129010][ C1] EXT4-fs (loop0): initial error at time 1785308984: ext4_iget_extra_inode:5179: inode 15 [ 573.129063][ C1] EXT4-fs (loop0): last error at time 1785308984: ext4_iget_extra_inode:5179: inode 15 [ 573.187110][T10502] loop0: lost filesystem error report for type 5 error -117 [ 573.253645][T10502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.842888][T10519] loop8: detected capacity change from 0 to 4096 [ 573.881800][T10519] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 574.376029][T10519] ntfs3(loop8): ino=19, mi_enum_attr [ 574.429600][T10519] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 574.527045][T10519] ntfs3(loop8): failed to convert "c46c" to cp936 [ 574.549922][T10519] ntfs3(loop8): ino=20, mi_enum_attr [ 576.188327][T10530] loop8: detected capacity change from 0 to 1024 [ 576.220270][T10530] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 576.358667][ T5627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.422045][T10530] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 2: comm syz.8.1260: lblock 2 mapped to illegal pblock 2 (length 1) [ 576.552738][T10530] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 576.563916][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 576.579542][ C1] EXT4-fs (loop8): initial error at time 1785308988: ext4_map_blocks:791: inode 3: block 2 [ 576.589649][ C1] EXT4-fs (loop8): last error at time 1785308988: ext4_map_blocks:791: inode 3: block 2 [ 576.612319][T10530] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 576.667969][T10530] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 48: comm syz.8.1260: lblock 0 mapped to illegal pblock 48 (length 1) [ 576.717378][T10530] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 576.718379][T10530] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 576.797227][T10530] EXT4-fs error (device loop8): ext4_acquire_dquot:7039: comm syz.8.1260: Failed to acquire dquot type 0 [ 576.895800][T10530] loop8: lost filesystem error report for type 5 error -117 [ 576.896382][T10530] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 576.925352][T10530] loop8: lost filesystem error report for type 5 error -117 [ 576.926344][T10530] EXT4-fs error (device loop8): ext4_evict_inode:267: inode #11: comm syz.8.1260: mark_inode_dirty error [ 577.227150][T10530] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 577.414816][T10530] EXT4-fs warning (device loop8): ext4_evict_inode:269: couldn't mark inode dirty (err -117) [ 577.802030][T10530] EXT4-fs (loop8): 1 orphan inode deleted [ 577.847555][T10530] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.857083][ T47] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 578.193315][ T47] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 578.202183][ T47] EXT4-fs error (device loop8): ext4_release_dquot:7075: comm kworker/u8:3: Failed to release dquot type 0 [ 578.925108][ T9010] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.976695][ T9010] EXT4-fs error (device loop8): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 579.032440][ T9010] loop8: lost filesystem error report for type 5 error -117 [ 579.047520][ T9010] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 579.101523][ T9010] loop8: lost filesystem error report for type 5 error -117 [ 579.103207][ T9010] EXT4-fs error (device loop8): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 579.147794][ T9010] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 580.161657][ T5826] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 580.483827][ T5826] usb 8-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 580.602410][ T5826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.174559][ T5826] emi26 - firmware loader 8-1:1.0: emi26_probe start [ 581.202809][ T6456] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 581.214951][ T6456] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 581.223360][ T6456] CPU: 0 UID: 0 PID: 6456 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 581.232829][ T6456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 581.242902][ T6456] Workqueue: usb_hub_wq hub_event [ 581.247993][ T6456] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 581.255133][ T6456] Code: 48 89 04 24 e8 c3 1a b8 00 4c 39 24 24 0f 82 94 00 00 00 e8 b4 1a b8 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 581.274764][ T6456] RSP: 0018:ffffc90008946ec8 EFLAGS: 00010202 [ 581.280846][ T6456] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffc9001d768000 [ 581.288825][ T6456] RDX: 0000000000100000 RSI: 0000000000000004 RDI: 0000000000000004 [ 581.297073][ T6456] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 581.305229][ T6456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 581.313362][ T6456] R13: ffff88807604c980 R14: ffffc90008946fe8 R15: dffffc0000000000 [ 581.321330][ T6456] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 581.330250][ T6456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 581.336823][ T6456] CR2: 0000200000001000 CR3: 000000008223a000 CR4: 0000000000350ef0 [ 581.344806][ T6456] Call Trace: [ 581.348069][ T6456] [ 581.351014][ T6456] ? __pfx_request_ihex_firmware.constprop.0+0x10/0x10 [ 581.357895][ T6456] ? emi26_probe+0x114/0xe30 [ 581.362495][ T6456] emi26_probe+0x13c/0xe30 [ 581.366917][ T6456] ? _raw_spin_lock_irqsave+0x52/0x60 [ 581.372308][ T6456] ? find_held_lock+0x2b/0x80 [ 581.376996][ T6456] ? __pfx_emi26_probe+0x10/0x10 [ 581.381957][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.387601][ T6456] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 581.393431][ T6456] ? lockdep_hardirqs_on+0x78/0x100 [ 581.398634][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.404273][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.409909][ T6456] ? __pm_runtime_set_status+0x13c/0x970 [ 581.415573][ T6456] usb_probe_interface+0x303/0x8f0 [ 581.420703][ T6456] ? __pfx_usb_probe_interface+0x10/0x10 [ 581.426447][ T6456] really_probe+0x241/0xa60 [ 581.431060][ T6456] __driver_probe_device+0x20e/0x450 [ 581.436352][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.441990][ T6456] driver_probe_device+0x4a/0x140 [ 581.447121][ T6456] __device_attach_driver+0x1df/0x320 [ 581.452589][ T6456] ? __pfx___device_attach_driver+0x10/0x10 [ 581.458507][ T6456] bus_for_each_drv+0x159/0x1e0 [ 581.463358][ T6456] ? __pfx_bus_for_each_drv+0x10/0x10 [ 581.468756][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.474439][ T6456] ? lockdep_hardirqs_on+0x78/0x100 [ 581.479655][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.485313][ T6456] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 581.491122][ T6456] __device_attach+0x1e4/0x4d0 [ 581.495933][ T6456] ? __pfx___device_attach+0x10/0x10 [ 581.501235][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.506974][ T6456] ? do_raw_spin_unlock+0x145/0x1e0 [ 581.512179][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.517820][ T6456] device_initial_probe+0xaf/0xd0 [ 581.522872][ T6456] bus_probe_device+0x64/0x160 [ 581.527651][ T6456] device_add+0x121d/0x1970 [ 581.532166][ T6456] ? __pfx_device_add+0x10/0x10 [ 581.537023][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.542650][ T6456] ? mark_held_locks+0x40/0x70 [ 581.547410][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.553051][ T6456] usb_set_configuration+0xd97/0x1c60 [ 581.558439][ T6456] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 581.564516][ T6456] usb_generic_driver_probe+0xa1/0xe0 [ 581.569890][ T6456] usb_probe_device+0xef/0x400 [ 581.574659][ T6456] ? __pfx_usb_probe_device+0x10/0x10 [ 581.580055][ T6456] really_probe+0x241/0xa60 [ 581.584579][ T6456] __driver_probe_device+0x20e/0x450 [ 581.589868][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.595527][ T6456] driver_probe_device+0x4a/0x140 [ 581.600643][ T6456] __device_attach_driver+0x1df/0x320 [ 581.606040][ T6456] ? __pfx___device_attach_driver+0x10/0x10 [ 581.611938][ T6456] bus_for_each_drv+0x159/0x1e0 [ 581.616792][ T6456] ? __pfx_bus_for_each_drv+0x10/0x10 [ 581.622175][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.627818][ T6456] ? lockdep_hardirqs_on+0x78/0x100 [ 581.633027][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.638755][ T6456] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 581.644561][ T6456] __device_attach+0x1e4/0x4d0 [ 581.649332][ T6456] ? __pfx___device_attach+0x10/0x10 [ 581.654619][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.660254][ T6456] ? do_raw_spin_unlock+0x145/0x1e0 [ 581.665452][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.671084][ T6456] device_initial_probe+0xaf/0xd0 [ 581.676112][ T6456] bus_probe_device+0x64/0x160 [ 581.680874][ T6456] device_add+0x121d/0x1970 [ 581.685390][ T6456] ? __pfx_device_add+0x10/0x10 [ 581.690260][ T6456] ? usb_detect_static_quirks+0x335/0x3e0 [ 581.695994][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.701722][ T6456] usb_new_device.cold+0x685/0x115c [ 581.706927][ T6456] ? _mutex_trylock_nest_lock+0x241/0x310 [ 581.712739][ T6456] ? do_raw_spin_lock+0x128/0x260 [ 581.717767][ T6456] ? __pfx_usb_new_device+0x10/0x10 [ 581.722967][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.728597][ T6456] ? mark_held_locks+0x40/0x70 [ 581.733366][ T6456] hub_event+0x30a3/0x4a60 [ 581.737803][ T6456] ? __pfx_hub_event+0x10/0x10 [ 581.742566][ T6456] ? debug_object_deactivate+0x2e4/0x3b0 [ 581.748204][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.753835][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.759552][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.765181][ T6456] ? rcu_is_watching+0x12/0xc0 [ 581.770022][ T6456] process_one_work+0xa23/0x1940 [ 581.774960][ T6456] ? __pfx_process_one_work+0x10/0x10 [ 581.780418][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.786054][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.791686][ T6456] worker_thread+0x5ef/0xe50 [ 581.796283][ T6456] ? __pfx_worker_thread+0x10/0x10 [ 581.801386][ T6456] ? kthread+0x13a/0x450 [ 581.805639][ T6456] ? __pfx_worker_thread+0x10/0x10 [ 581.810753][ T6456] kthread+0x370/0x450 [ 581.814845][ T6456] ? __pfx_kthread+0x10/0x10 [ 581.819463][ T6456] ret_from_fork+0x72b/0xd50 [ 581.824078][ T6456] ? __pfx_ret_from_fork+0x10/0x10 [ 581.829208][ T6456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.834862][ T6456] ? __switch_to+0x800/0x10f0 [ 581.839557][ T6456] ? __switch_to_asm+0x39/0x70 [ 581.844325][ T6456] ? __pfx_kthread+0x10/0x10 [ 581.849020][ T6456] ret_from_fork_asm+0x1a/0x30 [ 581.853804][ T6456] [ 581.856815][ T6456] Modules linked in: [ 581.860745][ T5353] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#2] SMP KASAN NOPTI [ 581.861745][ T6456] ---[ end trace 0000000000000000 ]--- [ 581.872823][ T5353] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 581.872860][ T5353] CPU: 1 UID: 0 PID: 5353 Comm: kworker/1:3 Tainted: G D syzkaller #0 PREEMPT(full) [ 581.872913][ T5353] Tainted: [D]=DIE [ 581.872925][ T5353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 581.872953][ T5353] Workqueue: usb_hub_wq hub_event [ 581.873007][ T5353] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 581.873064][ T5353] Code: 48 89 04 24 e8 c3 1a b8 00 4c 39 24 24 0f 82 94 00 00 00 e8 b4 1a b8 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 581.873102][ T5353] RSP: 0018:ffffc90002fceec8 EFLAGS: 00010202 [ 581.873132][ T5353] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffc9001e76a000 [ 581.873158][ T5353] RDX: 0000000000100000 RSI: 0000000000000004 RDI: 0000000000000004 [ 581.873182][ T5353] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 581.873206][ T5353] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 581.873229][ T5353] R13: ffff8880919a0b40 R14: ffffc90002fcefe8 R15: dffffc0000000000 [ 581.873258][ T5353] FS: 0000000000000000(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 581.873295][ T5353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 581.873323][ T5353] CR2: 000000110c3662b5 CR3: 00000000897da000 CR4: 0000000000350ef0 [ 581.873348][ T5353] Call Trace: [ 581.873359][ T5353] [ 581.873377][ T5353] ? __pfx_request_ihex_firmware.constprop.0+0x10/0x10 [ 581.873438][ T5353] ? emi26_probe+0x114/0xe30 [ 581.873486][ T5353] emi26_probe+0x13c/0xe30 [ 581.873532][ T5353] ? _raw_spin_lock_irqsave+0x52/0x60 [ 581.873573][ T5353] ? find_held_lock+0x2b/0x80 [ 581.873628][ T5353] ? __pfx_emi26_probe+0x10/0x10 [ 581.873671][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.873719][ T5353] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 581.873760][ T5353] ? lockdep_hardirqs_on+0x78/0x100 [ 581.873804][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.873849][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.873896][ T5353] ? __pm_runtime_set_status+0x13c/0x970 [ 581.873957][ T5353] usb_probe_interface+0x303/0x8f0 [ 581.874019][ T5353] ? __pfx_usb_probe_interface+0x10/0x10 [ 581.874079][ T5353] really_probe+0x241/0xa60 [ 581.874131][ T5353] __driver_probe_device+0x20e/0x450 [ 581.874182][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.874228][ T5353] driver_probe_device+0x4a/0x140 [ 581.874278][ T5353] __device_attach_driver+0x1df/0x320 [ 581.874330][ T5353] ? __pfx___device_attach_driver+0x10/0x10 [ 581.874388][ T5353] bus_for_each_drv+0x159/0x1e0 [ 581.874436][ T5353] ? __pfx_bus_for_each_drv+0x10/0x10 [ 581.874477][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.874522][ T5353] ? lockdep_hardirqs_on+0x78/0x100 [ 581.874566][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.874611][ T5353] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 581.874654][ T5353] __device_attach+0x1e4/0x4d0 [ 581.874704][ T5353] ? __pfx___device_attach+0x10/0x10 [ 581.874756][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.874801][ T5353] ? do_raw_spin_unlock+0x145/0x1e0 [ 581.874852][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.874902][ T5353] device_initial_probe+0xaf/0xd0 [ 581.874954][ T5353] bus_probe_device+0x64/0x160 [ 581.875000][ T5353] device_add+0x121d/0x1970 [ 581.875060][ T5353] ? __pfx_device_add+0x10/0x10 [ 581.875117][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.875162][ T5353] ? mark_held_locks+0x40/0x70 [ 581.875203][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.875254][ T5353] usb_set_configuration+0xd97/0x1c60 [ 581.875319][ T5353] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 581.875362][ T5353] usb_generic_driver_probe+0xa1/0xe0 [ 581.875404][ T5353] usb_probe_device+0xef/0x400 [ 581.875460][ T5353] ? __pfx_usb_probe_device+0x10/0x10 [ 581.875513][ T5353] really_probe+0x241/0xa60 [ 581.875565][ T5353] __driver_probe_device+0x20e/0x450 [ 581.875614][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.875662][ T5353] driver_probe_device+0x4a/0x140 [ 581.875714][ T5353] __device_attach_driver+0x1df/0x320 [ 581.875767][ T5353] ? __pfx___device_attach_driver+0x10/0x10 [ 581.875819][ T5353] bus_for_each_drv+0x159/0x1e0 [ 581.875859][ T5353] ? __pfx_bus_for_each_drv+0x10/0x10 [ 581.875900][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.875945][ T5353] ? lockdep_hardirqs_on+0x78/0x100 [ 582.301673][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.307313][ T5353] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 582.313150][ T5353] __device_attach+0x1e4/0x4d0 [ 582.317925][ T5353] ? __pfx___device_attach+0x10/0x10 [ 582.323220][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.328942][ T5353] ? do_raw_spin_unlock+0x145/0x1e0 [ 582.334142][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.339793][ T5353] device_initial_probe+0xaf/0xd0 [ 582.344839][ T5353] bus_probe_device+0x64/0x160 [ 582.349619][ T5353] device_add+0x121d/0x1970 [ 582.354309][ T5353] ? __pfx_device_add+0x10/0x10 [ 582.359168][ T5353] ? usb_detect_static_quirks+0x335/0x3e0 [ 582.364906][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.370544][ T5353] usb_new_device.cold+0x685/0x115c [ 582.375742][ T5353] ? _mutex_trylock_nest_lock+0x241/0x310 [ 582.381652][ T5353] ? do_raw_spin_lock+0x128/0x260 [ 582.386678][ T5353] ? __pfx_usb_new_device+0x10/0x10 [ 582.391876][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.397509][ T5353] ? mark_held_locks+0x40/0x70 [ 582.402270][ T5353] hub_event+0x30a3/0x4a60 [ 582.406702][ T5353] ? __pfx_hub_event+0x10/0x10 [ 582.411463][ T5353] ? debug_object_deactivate+0x2e4/0x3b0 [ 582.417189][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.422819][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.428450][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.434081][ T5353] ? rcu_is_watching+0x12/0xc0 [ 582.438851][ T5353] process_one_work+0xa23/0x1940 [ 582.443810][ T5353] ? __pfx_process_one_work+0x10/0x10 [ 582.449176][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.454839][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.460646][ T5353] worker_thread+0x5ef/0xe50 [ 582.465237][ T5353] ? __pfx_worker_thread+0x10/0x10 [ 582.470338][ T5353] ? kthread+0x13a/0x450 [ 582.474590][ T5353] ? __pfx_worker_thread+0x10/0x10 [ 582.479693][ T5353] kthread+0x370/0x450 [ 582.483793][ T5353] ? __pfx_kthread+0x10/0x10 [ 582.488510][ T5353] ret_from_fork+0x72b/0xd50 [ 582.493110][ T5353] ? __pfx_ret_from_fork+0x10/0x10 [ 582.498225][ T5353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.503856][ T5353] ? __switch_to+0x800/0x10f0 [ 582.508545][ T5353] ? __switch_to_asm+0x39/0x70 [ 582.513314][ T5353] ? __pfx_kthread+0x10/0x10 [ 582.517916][ T5353] ret_from_fork_asm+0x1a/0x30 [ 582.522695][ T5353] [ 582.525697][ T5353] Modules linked in: [ 582.529645][ T5759] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#3] SMP KASAN NOPTI [ 582.533095][ T5353] ---[ end trace 0000000000000000 ]--- [ 582.541991][ T5759] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 582.542041][ T5759] CPU: 0 UID: 0 PID: 5759 Comm: kworker/0:4 Tainted: G D syzkaller #0 PREEMPT(full) [ 582.542094][ T5759] Tainted: [D]=DIE [ 582.542107][ T5759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 582.542133][ T5759] Workqueue: usb_hub_wq hub_event [ 582.542190][ T5759] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 582.542245][ T5759] Code: 48 89 04 24 e8 c3 1a b8 00 4c 39 24 24 0f 82 94 00 00 00 e8 b4 1a b8 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 582.542281][ T5759] RSP: 0018:ffffc9000478eec8 EFLAGS: 00010202 [ 582.542310][ T5759] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffc9001df69000 [ 582.542334][ T5759] RDX: 0000000000100000 RSI: 0000000000000004 RDI: 0000000000000004 [ 582.542357][ T5759] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 582.542380][ T5759] R10: 0000000000000000 R11: ffffffff81d5f05c R12: 0000000000000000 [ 582.542428][ T5759] R13: ffff88807c6834c0 R14: ffffc9000478efe8 R15: dffffc0000000000 [ 582.542457][ T5759] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 582.542489][ T5759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 582.542515][ T5759] CR2: 0000200000001000 CR3: 0000000084088000 CR4: 0000000000350ef0 [ 582.542540][ T5759] Call Trace: [ 582.542552][ T5759] [ 582.542569][ T5759] ? __pfx_request_ihex_firmware.constprop.0+0x10/0x10 [ 582.542624][ T5759] ? emi26_probe+0x114/0xe30 [ 582.542672][ T5759] emi26_probe+0x13c/0xe30 [ 582.542717][ T5759] ? _raw_spin_lock_irqsave+0x52/0x60 [ 582.542757][ T5759] ? find_held_lock+0x2b/0x80 [ 582.542815][ T5759] ? __pfx_emi26_probe+0x10/0x10 [ 582.542858][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.542907][ T5759] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 582.542940][ T5759] ? lockdep_hardirqs_on+0x78/0x100 [ 582.542984][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.543030][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.747240][ T5759] ? __pm_runtime_set_status+0x13c/0x970 [ 582.752906][ T5759] usb_probe_interface+0x303/0x8f0 [ 582.758032][ T5759] ? __pfx_usb_probe_interface+0x10/0x10 [ 582.763681][ T5759] really_probe+0x241/0xa60 [ 582.768190][ T5759] __driver_probe_device+0x20e/0x450 [ 582.773478][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.779114][ T5759] driver_probe_device+0x4a/0x140 [ 582.784145][ T5759] __device_attach_driver+0x1df/0x320 [ 582.789524][ T5759] ? __pfx___device_attach_driver+0x10/0x10 [ 582.795425][ T5759] bus_for_each_drv+0x159/0x1e0 [ 582.800294][ T5759] ? __pfx_bus_for_each_drv+0x10/0x10 [ 582.805686][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.811333][ T5759] ? lockdep_hardirqs_on+0x78/0x100 [ 582.816538][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.822173][ T5759] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 582.827996][ T5759] __device_attach+0x1e4/0x4d0 [ 582.832784][ T5759] ? __pfx___device_attach+0x10/0x10 [ 582.838077][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.843721][ T5759] ? do_raw_spin_unlock+0x145/0x1e0 [ 582.849015][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.854648][ T5759] device_initial_probe+0xaf/0xd0 [ 582.859704][ T5759] bus_probe_device+0x64/0x160 [ 582.864475][ T5759] device_add+0x121d/0x1970 [ 582.868995][ T5759] ? __pfx_device_add+0x10/0x10 [ 582.873854][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.879503][ T5759] ? mark_held_locks+0x40/0x70 [ 582.884285][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.889942][ T5759] usb_set_configuration+0xd97/0x1c60 [ 582.895331][ T5759] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 582.901409][ T5759] usb_generic_driver_probe+0xa1/0xe0 [ 582.906780][ T5759] usb_probe_device+0xef/0x400 [ 582.911550][ T5759] ? __pfx_usb_probe_device+0x10/0x10 [ 582.917029][ T5759] really_probe+0x241/0xa60 [ 582.921538][ T5759] __driver_probe_device+0x20e/0x450 [ 582.926849][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.932502][ T5759] driver_probe_device+0x4a/0x140 [ 582.937528][ T5759] __device_attach_driver+0x1df/0x320 [ 582.942934][ T5759] ? __pfx___device_attach_driver+0x10/0x10 [ 582.948828][ T5759] bus_for_each_drv+0x159/0x1e0 [ 582.953688][ T5759] ? __pfx_bus_for_each_drv+0x10/0x10 [ 582.959054][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.964684][ T5759] ? lockdep_hardirqs_on+0x78/0x100 [ 582.969923][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.975570][ T5759] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 582.981408][ T5759] __device_attach+0x1e4/0x4d0 [ 582.986182][ T5759] ? __pfx___device_attach+0x10/0x10 [ 582.991484][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.997161][ T5759] ? do_raw_spin_unlock+0x145/0x1e0 [ 583.002385][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.008064][ T5759] device_initial_probe+0xaf/0xd0 [ 583.013099][ T5759] bus_probe_device+0x64/0x160 [ 583.017960][ T5759] device_add+0x121d/0x1970 [ 583.022478][ T5759] ? __pfx_device_add+0x10/0x10 [ 583.027346][ T5759] ? usb_detect_static_quirks+0x335/0x3e0 [ 583.033078][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.038821][ T5759] usb_new_device.cold+0x685/0x115c [ 583.044030][ T5759] ? _mutex_trylock_nest_lock+0x241/0x310 [ 583.049771][ T5759] ? do_raw_spin_lock+0x128/0x260 [ 583.054800][ T5759] ? __pfx_usb_new_device+0x10/0x10 [ 583.060002][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.065648][ T5759] ? mark_held_locks+0x40/0x70 [ 583.070422][ T5759] hub_event+0x30a3/0x4a60 [ 583.074858][ T5759] ? __pfx_hub_event+0x10/0x10 [ 583.079653][ T5759] ? debug_object_deactivate+0x2e4/0x3b0 [ 583.085297][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.090962][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.096595][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.102239][ T5759] ? rcu_is_watching+0x12/0xc0 [ 583.107026][ T5759] process_one_work+0xa23/0x1940 [ 583.111977][ T5759] ? __pfx_process_one_work+0x10/0x10 [ 583.117358][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.123016][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.128650][ T5759] worker_thread+0x5ef/0xe50 [ 583.133327][ T5759] ? __pfx_worker_thread+0x10/0x10 [ 583.138433][ T5759] ? kthread+0x13a/0x450 [ 583.142684][ T5759] ? __pfx_worker_thread+0x10/0x10 [ 583.147813][ T5759] kthread+0x370/0x450 [ 583.151988][ T5759] ? __pfx_kthread+0x10/0x10 [ 583.156588][ T5759] ret_from_fork+0x72b/0xd50 [ 583.161182][ T5759] ? __pfx_ret_from_fork+0x10/0x10 [ 583.166294][ T5759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.171922][ T5759] ? __switch_to+0x800/0x10f0 [ 583.176606][ T5759] ? __switch_to_asm+0x39/0x70 [ 583.181371][ T5759] ? __pfx_kthread+0x10/0x10 [ 583.185975][ T5759] ret_from_fork_asm+0x1a/0x30 [ 583.190752][ T5759] [ 583.193756][ T5759] Modules linked in: [ 583.197698][ T5826] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#4] SMP KASAN NOPTI [ 583.199811][ T5759] ---[ end trace 0000000000000000 ]--- [ 583.209948][ T5826] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 583.209984][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: kworker/1:6 Tainted: G D syzkaller #0 PREEMPT(full) [ 583.210038][ T5826] Tainted: [D]=DIE [ 583.210051][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 583.210077][ T5826] Workqueue: usb_hub_wq hub_event [ 583.210129][ T5826] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 583.210184][ T5826] Code: 48 89 04 24 e8 c3 1a b8 00 4c 39 24 24 0f 82 94 00 00 00 e8 b4 1a b8 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 583.210222][ T5826] RSP: 0018:ffffc90004dfeec8 EFLAGS: 00010202 [ 583.210257][ T5826] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffc90019b5f000 [ 583.210282][ T5826] RDX: 0000000000100000 RSI: 0000000000000004 RDI: 0000000000000004 [ 583.210307][ T5826] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 583.210330][ T5826] R10: 0000000000000000 R11: ffffffff81d5f05c R12: 0000000000000000 [ 583.210355][ T5826] R13: ffff888079ab5780 R14: ffffc90004dfefe8 R15: dffffc0000000000 [ 583.210386][ T5826] FS: 0000000000000000(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 583.210425][ T5826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 583.210456][ T5826] CR2: 000000110c3662b5 CR3: 0000000084088000 CR4: 0000000000350ef0 [ 583.210482][ T5826] Call Trace: [ 583.210493][ T5826] [ 583.210510][ T5826] ? __pfx_request_ihex_firmware.constprop.0+0x10/0x10 [ 583.210564][ T5826] ? emi26_probe+0x114/0xe30 [ 583.210614][ T5826] emi26_probe+0x13c/0xe30 [ 583.210659][ T5826] ? _raw_spin_lock_irqsave+0x52/0x60 [ 583.210699][ T5826] ? find_held_lock+0x2b/0x80 [ 583.382445][ T5826] ? __pfx_emi26_probe+0x10/0x10 [ 583.387418][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.393079][ T5826] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 583.398908][ T5826] ? lockdep_hardirqs_on+0x78/0x100 [ 583.404126][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.409783][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.415436][ T5826] ? __pm_runtime_set_status+0x13c/0x970 [ 583.421112][ T5826] usb_probe_interface+0x303/0x8f0 [ 583.426268][ T5826] ? __pfx_usb_probe_interface+0x10/0x10 [ 583.431939][ T5826] really_probe+0x241/0xa60 [ 583.436474][ T5826] __driver_probe_device+0x20e/0x450 [ 583.441827][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.447574][ T5826] driver_probe_device+0x4a/0x140 [ 583.452715][ T5826] __device_attach_driver+0x1df/0x320 [ 583.458201][ T5826] ? __pfx___device_attach_driver+0x10/0x10 [ 583.464121][ T5826] bus_for_each_drv+0x159/0x1e0 [ 583.468991][ T5826] ? __pfx_bus_for_each_drv+0x10/0x10 [ 583.474416][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.480073][ T5826] ? lockdep_hardirqs_on+0x78/0x100 [ 583.485383][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.491043][ T5826] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 583.496880][ T5826] __device_attach+0x1e4/0x4d0 [ 583.501686][ T5826] ? __pfx___device_attach+0x10/0x10 [ 583.507043][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.512788][ T5826] ? do_raw_spin_unlock+0x145/0x1e0 [ 583.518023][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.523718][ T5826] device_initial_probe+0xaf/0xd0 [ 583.528775][ T5826] bus_probe_device+0x64/0x160 [ 583.533563][ T5826] device_add+0x121d/0x1970 [ 583.538104][ T5826] ? __pfx_device_add+0x10/0x10 [ 583.542988][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.548641][ T5826] ? mark_held_locks+0x40/0x70 [ 583.553424][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.559083][ T5826] usb_set_configuration+0xd97/0x1c60 [ 583.564498][ T5826] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 583.570672][ T5826] usb_generic_driver_probe+0xa1/0xe0 [ 583.576066][ T5826] usb_probe_device+0xef/0x400 [ 583.580856][ T5826] ? __pfx_usb_probe_device+0x10/0x10 [ 583.586259][ T5826] really_probe+0x241/0xa60 [ 583.590820][ T5826] __driver_probe_device+0x20e/0x450 [ 583.596140][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.601894][ T5826] driver_probe_device+0x4a/0x140 [ 583.606951][ T5826] __device_attach_driver+0x1df/0x320 [ 583.612701][ T5826] ? __pfx___device_attach_driver+0x10/0x10 [ 583.618622][ T5826] bus_for_each_drv+0x159/0x1e0 [ 583.623756][ T5826] ? __pfx_bus_for_each_drv+0x10/0x10 [ 583.629144][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.634802][ T5826] ? lockdep_hardirqs_on+0x78/0x100 [ 583.640200][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.645902][ T5826] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 583.651734][ T5826] __device_attach+0x1e4/0x4d0 [ 583.656557][ T5826] ? __pfx___device_attach+0x10/0x10 [ 583.661875][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.667558][ T5826] ? do_raw_spin_unlock+0x145/0x1e0 [ 583.672784][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.678447][ T5826] device_initial_probe+0xaf/0xd0 [ 583.683502][ T5826] bus_probe_device+0x64/0x160 [ 583.688288][ T5826] device_add+0x121d/0x1970 [ 583.692839][ T5826] ? __pfx_device_add+0x10/0x10 [ 583.697739][ T5826] usb_new_device.cold+0x685/0x115c [ 583.702971][ T5826] ? _mutex_trylock_nest_lock+0x241/0x310 [ 583.708717][ T5826] ? __pfx_usb_new_device+0x10/0x10 [ 583.713944][ T5826] ? preempt_schedule_thunk+0x16/0x40 [ 583.719359][ T5826] hub_event+0x30a3/0x4a60 [ 583.723825][ T5826] ? __pfx_hub_event+0x10/0x10 [ 583.728626][ T5826] ? debug_object_deactivate+0x2e4/0x3b0 [ 583.734292][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.739947][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.745600][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.751252][ T5826] ? rcu_is_watching+0x12/0xc0 [ 583.756050][ T5826] process_one_work+0xa23/0x1940 [ 583.761011][ T5826] ? __pfx_process_one_work+0x10/0x10 [ 583.766401][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.772236][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.777895][ T5826] worker_thread+0x5ef/0xe50 [ 583.782501][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 583.787626][ T5826] ? kthread+0x13a/0x450 [ 583.791900][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 583.797031][ T5826] kthread+0x370/0x450 [ 583.801349][ T5826] ? __pfx_kthread+0x10/0x10 [ 583.805985][ T5826] ret_from_fork+0x72b/0xd50 [ 583.810610][ T5826] ? __pfx_ret_from_fork+0x10/0x10 [ 583.815757][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.821412][ T5826] ? __switch_to+0x800/0x10f0 [ 583.826220][ T5826] ? __switch_to_asm+0x39/0x70 [ 583.831013][ T5826] ? __pfx_kthread+0x10/0x10 [ 583.835640][ T5826] ret_from_fork_asm+0x1a/0x30 [ 583.840448][ T5826] [ 583.843462][ T5826] Modules linked in: [ 583.850233][ T5826] ---[ end trace 0000000000000000 ]--- [ 584.164518][T10587] loop1: detected capacity change from 0 to 2048 [ 584.178444][ T187] usb 1-1: emi26_load_firmware - request_firmware() failed [ 584.201093][ T5826] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 584.208613][ T5826] Code: 48 89 04 24 e8 c3 1a b8 00 4c 39 24 24 0f 82 94 00 00 00 e8 b4 1a b8 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 584.210125][ T187] usb 1-1: emi26_load_firmware - error loading firmware: error = -12 [ 584.230040][ T5826] RSP: 0018:ffffc90008946ec8 EFLAGS: 00010202 [ 584.303166][ T187] emi26 - firmware loader 1-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 584.845613][ T187] usb 1-1: USB disconnect, device number 23 [ 584.852658][ T6456] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 584.859842][ T6456] Code: 48 89 04 24 e8 c3 1a b8 00 4c 39 24 24 0f 82 94 00 00 00 e8 b4 1a b8 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 584.879540][ T6456] RSP: 0018:ffffc90008946ec8 EFLAGS: 00010202 [ 584.885644][ T6456] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffc9001d768000 [ 584.893614][ T6456] RDX: 0000000000100000 RSI: 0000000000000004 RDI: 0000000000000004 [ 584.901597][ T6456] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 584.909683][ T6456] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 584.917699][ T6456] R13: ffff88807604c980 R14: ffffc90008946fe8 R15: dffffc0000000000 [ 584.925704][ T6456] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 584.935115][ T6456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 584.941972][ T6456] CR2: 0000200001000000 CR3: 0000000084088000 CR4: 0000000000350ef0 [ 584.949989][ T6456] Kernel panic - not syncing: Fatal exception [ 584.956302][ T6456] Kernel Offset: disabled [ 584.960637][ T6456] Rebooting in 86400 seconds..