last executing test programs: 2m30.057925155s ago: executing program 1 (id=337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x62}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7e, &(0x7f00000004c0)=ANY=[@ANYBLOB="79ee7c2eea00bbbbbbbbbbfc010000000000000000000000000000ff0200000000000000000000000001000000dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027fd646c098ccc27eb8549d66e700000000000005f9546e551af9e59631718ba0897120a66f61d20ffeed1d580a53b06b643b3db68e34c6f8f83cd808"], 0x0) 2m30.030783756s ago: executing program 1 (id=338): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x812448, 0x0, 0xff, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000006c0), &(0x7f0000000700), 0x0) syz_mount_image$fuse(0x0, 0x0, 0xb90000, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',blksize=0x0000000000001400,\x00'], 0x0, 0x0, &(0x7f00000008c0)="28d44be1f8715559eac35a87cf45067262b204397ebe8eac1c8ef81780b1c94b0a0fb374a60196b66ba7b5b93b9891ee35164655da91478f73b60a7cba38093d9aefe774d77692ca2005d289283df1f0e59b96a5ddbbe7a196b611d38e8f99b2ee20037fbdc361c17b73258672f50b3932a7c0d866d7b3d01f57d6a5954dc0b3427caba51b58a249182680bbe690ef") chdir(0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) 2m29.120773569s ago: executing program 1 (id=340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x62}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x0, @void}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000004c0)=ANY=[@ANYBLOB="79ee7c2eea00bbbbbbbbbbfc010000000000000000000000000000ff0200000000000000000000000001000000dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027fd646c098ccc27eb8549d66e700000000000005f9546e551af9e59631718ba0897120a66f61d20ffeed1d580a53b06b643b3db68e34c6f8f83cd808"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x1, 0x5519, &(0x7f000000b280)="$eJzs3EtvG1UUAOBjp+mbNkIs2HWkCimRaqtOH4JdgVY8RKuqwIIVOLZjubU9Uew4ISsWLBEL/gkCiRVLfgML1uwQCxA7JJBnxqXhIUXEsZvm+6TxmXt9feZcq6p0ZiIHcGwtJb/9UooLcSYiFiLifER2XiqOzK08vBgRlyKi/MRRKuYfT5yMiLMRcWGcPM9ZKt764sro8o2f3/712+9PnTj35Tc/zG/XwLy9FBG9jfx8u5fHtJ3Hh8V8fdTJYu/6qIj5G71HxTjN43ZrLcuwfXGyrp7Fa+18fbqxNRjH9W69MY7tzno2v9HPLzgYtSd5sg88rG9m42ZrLYudQZrF9m5e185u/n/b7mCY52kW+T7O0sdwOIn5fGunle9n41EWG/1hMZ/nTZutnXEcFbG4XDTSbjOrY+0g3/TT7Z1Of2snGbU2B520P5ms1DbTZmvYul6p95o3ryfL7e54WWXYqvdutdO03W1VG2lvJVluNxqVWi1Zvt1a69T7Sa1WvVa9WrmxUpxdSd64937SbSbL4/hap7817HQHyXq6meSfWElWq9deWUku15J3795P7j+4c+fu/fc+vP3BvVfvvvV6sSi5Ua29XK3dfFxWsrx6dXW1UrtaWa2tTHH//7jQU7b/T4uip7h/OJDSvAsAOHr0/8A8HEr/Xx+PNx9E/O/+vxz77P9D/z8VR6r/Pe79/yHsHw5E/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGz9uPjVm9nJUj4+V8w/V0w9X4xLEVGOiD/+xUKc3JNzociz+B/rF/9Ww3elyDKMr3GqOM5GxK3i+P3iYX8LAAAA8Oz6+pNLn+fdev6yNO+CmKX8pk35/EdTyleKiMWln6aUrTx+eWFKybJ/3ydiZ0rZshtYp6eULL/ldmJa2fZlYU84/UQo5aE803IAAICZ2NsJzLYLAQAAYJY+2+/ChcOtgxkrxeRR5uRZcPaX9389EDyzZwQAAAAcQaV5FwAAAAAcuqz/9/t/AAAA8GzLf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4E927uc2cSCKA/CzwQv7T4tWe99W9gZlbAl73GNEAWmCAnIgLaQBaiC3lBBBhMchEHGI5LGtRN8nOZOxzI83CA4zIw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAn9ucdBUIgDMJg7/rOZO5/WGnQ1NSkCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYuZ/XOKo4AOBvZna2tiquUfYQEQUPerHbbW3tTTwowYN/ghDSbY3d+iPNwZYi5uJNcu5F9CgiKPHW/6HnFnqptx72UMGz8mZnutMk4PprZpN8PvDmfXcY5n3fLIR8570EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoTN6exVk89KZxWp678/DGWuzv7uqjW9v3lmOLcdJk0gfDi/UPSb+9RAAAADg6sqq+DyHcz3dWYp/2ivo/r66JNf+3T0/jqp7fXfdXfVX7x/bLzw+efzRQbzpOvOnF9fHo1N5UOv/fLBfbM395Rad48sW7l6z4QtL3tp6b5MXzTL6+ffudbhEeayJbAOCfOFn1ZVD9PhT7YZuJAXBkdGqFd1X/Z712cwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABowmQrPFnFSQhhuTOLo7sPb6zt19/avrdctXM3b26HL2f3jLfIQwgX18ejU43OZrFdvXb98up4PNpoPngphNDW6G+V07/8wRwXh9DK8xH8R0FaftmLks/BCFr8oQQAwKGUly3W9ffznZV4LlkK4Y/vHq//X63FYc76/8GH5+7Ux6rX/8PGZrj4BptXPh1cvXb99fUrq5dGl0Yfv3F6+ObwzPmzZ88PinclA29MAAAA+He6ZavX/+nS3vX/E7U4zFn/f/bN8Iv6WJn6f1+zRb+2MwEAADjann3599+Sfc4n3W74fHVzMwzjcWNYfd44PT22kOrfdqxs9fo/W2o7KwAAAKAJk63ksfX/C7U4zLn+/9T3L/xYv2cWQjherv+fXPtkfKG56Sy0Jv6cuO05AgAA0K7jZauv/+fF/v/00ZaHNITw2ivTuPw3gHPV/9m7X/1QH6u+//9Mc1NcSGl/+jyKvh9Cp992RgAAABxmT5QtFvu/5jsrH/104v2u/f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATfszAAD//+RzO+I=") symlink(0x0, &(0x7f0000000240)='./file0\x00') sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000001e40)='./file1\x00', 0x2203406, &(0x7f0000000100)=ANY=[], 0x0, 0x263, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40000, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x0, 0x0, 0x20, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x84}}, 0x0) fadvise64(r7, 0x5, 0x0, 0x3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m27.770939852s ago: executing program 1 (id=343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x62}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000004c0)=ANY=[@ANYBLOB="79ee7c2eea00bbbbbbbbbbfc010000000000000000000000000000ff0200000000000000000000000001000000dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027fd646c098ccc27eb8549d66e700000000000005f9546e551af9e59631718ba0897120a66f61d20ffeed1d580a53b06b643b3db68e34c6f8f83cd808"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x1, 0x5519, &(0x7f000000b280)="$eJzs3EtvG1UUAOBjp+mbNkIs2HWkCimRaqtOH4JdgVY8RKuqwIIVOLZjubU9Uew4ISsWLBEL/gkCiRVLfgML1uwQCxA7JJBnxqXhIUXEsZvm+6TxmXt9feZcq6p0ZiIHcGwtJb/9UooLcSYiFiLifER2XiqOzK08vBgRlyKi/MRRKuYfT5yMiLMRcWGcPM9ZKt764sro8o2f3/712+9PnTj35Tc/zG/XwLy9FBG9jfx8u5fHtJ3Hh8V8fdTJYu/6qIj5G71HxTjN43ZrLcuwfXGyrp7Fa+18fbqxNRjH9W69MY7tzno2v9HPLzgYtSd5sg88rG9m42ZrLYudQZrF9m5e185u/n/b7mCY52kW+T7O0sdwOIn5fGunle9n41EWG/1hMZ/nTZutnXEcFbG4XDTSbjOrY+0g3/TT7Z1Of2snGbU2B520P5ms1DbTZmvYul6p95o3ryfL7e54WWXYqvdutdO03W1VG2lvJVluNxqVWi1Zvt1a69T7Sa1WvVa9WrmxUpxdSd64937SbSbL4/hap7817HQHyXq6meSfWElWq9deWUku15J3795P7j+4c+fu/fc+vP3BvVfvvvV6sSi5Ua29XK3dfFxWsrx6dXW1UrtaWa2tTHH//7jQU7b/T4uip7h/OJDSvAsAOHr0/8A8HEr/Xx+PNx9E/O/+vxz77P9D/z8VR6r/Pe79/yHsHw5E/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGz9uPjVm9nJUj4+V8w/V0w9X4xLEVGOiD/+xUKc3JNzociz+B/rF/9Ww3elyDKMr3GqOM5GxK3i+P3iYX8LAAAA8Oz6+pNLn+fdev6yNO+CmKX8pk35/EdTyleKiMWln6aUrTx+eWFKybJ/3ydiZ0rZshtYp6eULL/ldmJa2fZlYU84/UQo5aE803IAAICZ2NsJzLYLAQAAYJY+2+/ChcOtgxkrxeRR5uRZcPaX9389EDyzZwQAAAAcQaV5FwAAAAAcuqz/9/t/AAAA8GzLf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4E927uc2cSCKA/CzwQv7T4tWe99W9gZlbAl73GNEAWmCAnIgLaQBaiC3lBBBhMchEHGI5LGtRN8nOZOxzI83CA4zIw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAn9ucdBUIgDMJg7/rOZO5/WGnQ1NSkCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYuZ/XOKo4AOBvZna2tiquUfYQEQUPerHbbW3tTTwowYN/ghDSbY3d+iPNwZYi5uJNcu5F9CgiKPHW/6HnFnqptx72UMGz8mZnutMk4PprZpN8PvDmfXcY5n3fLIR8570EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoTN6exVk89KZxWp678/DGWuzv7uqjW9v3lmOLcdJk0gfDi/UPSb+9RAAAADg6sqq+DyHcz3dWYp/2ivo/r66JNf+3T0/jqp7fXfdXfVX7x/bLzw+efzRQbzpOvOnF9fHo1N5UOv/fLBfbM395Rad48sW7l6z4QtL3tp6b5MXzTL6+ffudbhEeayJbAOCfOFn1ZVD9PhT7YZuJAXBkdGqFd1X/Z712cwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABowmQrPFnFSQhhuTOLo7sPb6zt19/avrdctXM3b26HL2f3jLfIQwgX18ejU43OZrFdvXb98up4PNpoPngphNDW6G+V07/8wRwXh9DK8xH8R0FaftmLks/BCFr8oQQAwKGUly3W9ffznZV4LlkK4Y/vHq//X63FYc76/8GH5+7Ux6rX/8PGZrj4BptXPh1cvXb99fUrq5dGl0Yfv3F6+ObwzPmzZ88PinclA29MAAAA+He6ZavX/+nS3vX/E7U4zFn/f/bN8Iv6WJn6f1+zRb+2MwEAADjann3599+Sfc4n3W74fHVzMwzjcWNYfd44PT22kOrfdqxs9fo/W2o7KwAAAKAJk63ksfX/C7U4zLn+/9T3L/xYv2cWQjherv+fXPtkfKG56Sy0Jv6cuO05AgAA0K7jZauv/+fF/v/00ZaHNITw2ivTuPw3gHPV/9m7X/1QH6u+//9Mc1NcSGl/+jyKvh9Cp992RgAAABxmT5QtFvu/5jsrH/104v2u/f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATfszAAD//+RzO+I=") symlink(0x0, &(0x7f0000000240)='./file0\x00') sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000001e40)='./file1\x00', 0x2203406, &(0x7f0000000100)=ANY=[], 0x0, 0x263, &(0x7f0000000800)="$eJzsmTFrFEEUx/8zt7e5i1Gx0MLmmoARzd3uRiWNaOwDQiJq50E2IbpJ5HJI7kAw2Nj4Ae6LWKSyEBs7CysLFQQLUwqK6MjMzuzO7c4lpyl9P8jcf96+mXlvZvctbEAQxH/Lp4/fPjy/Mb98EcAUpjGh7V8qxsMDt/zfDypVLV9tnni8V5yPARAi73tA1bWucfEBvFw4CeMmhD0amNZzLoMrLbkFjvNa3wZD08T6+lc2OgbDXW2+b+mtOn6kM8pOsrK6nsSBbELZRKva7YkVP/Z3GVYA1HR8nhXfdq//oJ0AnVQksRFVHUhuGVNwFC2u/RuKb4HjqtlXIYQ8rzvPnu7KflPbA2v/QnCEWs+BYUnreUyg2Ww2dDcOrfzPevn8lfTYUMnyz8NlJYstaofmPzCLO3zq+trYG3pq9q93vyCuHZhOSUw4I/wtkvi7OEoYSvDCtvhDt+BRM4078qE4zMc8XsVL0qYtMqxRw6XbvXw4b2SjMh+/ZCmK+vg3gFswLa4D0DetFtLnzP7em/Koz0OWd4ujlmAjc7eEOble35SSf0mn6n4cLmhzblGFy3W4byeTZNG5xGkt6lmhcYVh8nBGmNcn5gHnrPrkIa+gre7Gw9Z2rz+7vtFei9fizSiauxJcCoLLUUvV5rQ9oP4JVZ8mrfmdL5zjgM987LS73U64A3Q7YdaP0taquEsvtr6qYVzVP46ZnyJFv7OyF6VhMKV+mP7j6vcYgJlKKRZ/ZDoEQRAEQRAEQRAEQRAEQRAF0v/QpZ8kG2AQQn0IZahBfQ0VJbzoJh7VgT8BAAD//5wPN8g=") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) 2m26.383687858s ago: executing program 1 (id=346): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = timerfd_create(0x1, 0x80800) timerfd_gettime(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x42) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 2m23.044244544s ago: executing program 1 (id=355): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x62}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, 0x0, 0x25, 0x0, @void}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000004c0)=ANY=[@ANYBLOB="79ee7c2eea00bbbbbbbbbbfc010000000000000000000000000000ff0200000000000000000000000001000000dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027fd646c098ccc27eb8549d66e700000000000005f9546e551af9e59631718ba0897120a66f61d20ffeed1d580a53b06b643b3db68e34c6f8f83cd808"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x1, 0x5519, &(0x7f000000b280)="$eJzs3EtvG1UUAOBjp+mbNkIs2HWkCimRaqtOH4JdgVY8RKuqwIIVOLZjubU9Uew4ISsWLBEL/gkCiRVLfgML1uwQCxA7JJBnxqXhIUXEsZvm+6TxmXt9feZcq6p0ZiIHcGwtJb/9UooLcSYiFiLifER2XiqOzK08vBgRlyKi/MRRKuYfT5yMiLMRcWGcPM9ZKt764sro8o2f3/712+9PnTj35Tc/zG/XwLy9FBG9jfx8u5fHtJ3Hh8V8fdTJYu/6qIj5G71HxTjN43ZrLcuwfXGyrp7Fa+18fbqxNRjH9W69MY7tzno2v9HPLzgYtSd5sg88rG9m42ZrLYudQZrF9m5e185u/n/b7mCY52kW+T7O0sdwOIn5fGunle9n41EWG/1hMZ/nTZutnXEcFbG4XDTSbjOrY+0g3/TT7Z1Of2snGbU2B520P5ms1DbTZmvYul6p95o3ryfL7e54WWXYqvdutdO03W1VG2lvJVluNxqVWi1Zvt1a69T7Sa1WvVa9WrmxUpxdSd64937SbSbL4/hap7817HQHyXq6meSfWElWq9deWUku15J3795P7j+4c+fu/fc+vP3BvVfvvvV6sSi5Ua29XK3dfFxWsrx6dXW1UrtaWa2tTHH//7jQU7b/T4uip7h/OJDSvAsAOHr0/8A8HEr/Xx+PNx9E/O/+vxz77P9D/z8VR6r/Pe79/yHsHw5E/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGz9uPjVm9nJUj4+V8w/V0w9X4xLEVGOiD/+xUKc3JNzociz+B/rF/9Ww3elyDKMr3GqOM5GxK3i+P3iYX8LAAAA8Oz6+pNLn+fdev6yNO+CmKX8pk35/EdTyleKiMWln6aUrTx+eWFKybJ/3ydiZ0rZshtYp6eULL/ldmJa2fZlYU84/UQo5aE803IAAICZ2NsJzLYLAQAAYJY+2+/ChcOtgxkrxeRR5uRZcPaX9389EDyzZwQAAAAcQaV5FwAAAAAcuqz/9/t/AAAA8GzLf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4E927uc2cSCKA/CzwQv7T4tWe99W9gZlbAl73GNEAWmCAnIgLaQBaiC3lBBBhMchEHGI5LGtRN8nOZOxzI83CA4zIw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAn9ucdBUIgDMJg7/rOZO5/WGnQ1NSkCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYuZ/XOKo4AOBvZna2tiquUfYQEQUPerHbbW3tTTwowYN/ghDSbY3d+iPNwZYi5uJNcu5F9CgiKPHW/6HnFnqptx72UMGz8mZnutMk4PprZpN8PvDmfXcY5n3fLIR8570EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoTN6exVk89KZxWp678/DGWuzv7uqjW9v3lmOLcdJk0gfDi/UPSb+9RAAAADg6sqq+DyHcz3dWYp/2ivo/r66JNf+3T0/jqp7fXfdXfVX7x/bLzw+efzRQbzpOvOnF9fHo1N5UOv/fLBfbM395Rad48sW7l6z4QtL3tp6b5MXzTL6+ffudbhEeayJbAOCfOFn1ZVD9PhT7YZuJAXBkdGqFd1X/Z712cwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABowmQrPFnFSQhhuTOLo7sPb6zt19/avrdctXM3b26HL2f3jLfIQwgX18ejU43OZrFdvXb98up4PNpoPngphNDW6G+V07/8wRwXh9DK8xH8R0FaftmLks/BCFr8oQQAwKGUly3W9ffznZV4LlkK4Y/vHq//X63FYc76/8GH5+7Ux6rX/8PGZrj4BptXPh1cvXb99fUrq5dGl0Yfv3F6+ObwzPmzZ88PinclA29MAAAA+He6ZavX/+nS3vX/E7U4zFn/f/bN8Iv6WJn6f1+zRb+2MwEAADjann3599+Sfc4n3W74fHVzMwzjcWNYfd44PT22kOrfdqxs9fo/W2o7KwAAAKAJk63ksfX/C7U4zLn+/9T3L/xYv2cWQjherv+fXPtkfKG56Sy0Jv6cuO05AgAA0K7jZauv/+fF/v/00ZaHNITw2ivTuPw3gHPV/9m7X/1QH6u+//9Mc1NcSGl/+jyKvh9Cp992RgAAABxmT5QtFvu/5jsrH/104v2u/f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATfszAAD//+RzO+I=") symlink(0x0, &(0x7f0000000240)='./file0\x00') sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40000, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x0, 0x0, 0x20, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x84}}, 0x0) fadvise64(r4, 0x5, 0x0, 0x3) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m5.040017571s ago: executing program 32 (id=355): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x62}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, 0x0, 0x25, 0x0, @void}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000004c0)=ANY=[@ANYBLOB="79ee7c2eea00bbbbbbbbbbfc010000000000000000000000000000ff0200000000000000000000000001000000dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027fd646c098ccc27eb8549d66e700000000000005f9546e551af9e59631718ba0897120a66f61d20ffeed1d580a53b06b643b3db68e34c6f8f83cd808"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x1, 0x5519, &(0x7f000000b280)="$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") symlink(0x0, &(0x7f0000000240)='./file0\x00') sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40000, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x0, 0x0, 0x20, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x84}}, 0x0) fadvise64(r4, 0x5, 0x0, 0x3) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12.691456083s ago: executing program 2 (id=1378): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004086800000000000000001090222000101008032090400000103000000092111010001224c0007058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00224c00000005200973a10185010a190315002505750025057508950a5304150025057518950181020a5404150025057508950181020a000000008000000095018102c0"], 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000640)={0x40, 0xb, 0x1, "e2"}, 0x0, 0x0, 0x0, 0x0}) 10.952147385s ago: executing program 2 (id=1380): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 9.967941261s ago: executing program 4 (id=1382): syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_connect(0x0, 0x2b, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) 9.961942032s ago: executing program 0 (id=1383): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffd, 0xa, 0x11, 0x47}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x2, 0x5, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x0, 0x30, 0xcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x0, 0xf, 0x4, 0x10}}}}}}}}]}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000940)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.779792577s ago: executing program 4 (id=1387): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf0300000009058202"], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f00000007c0)={0x0, 0x0, 0x1, "a5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x82, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xc7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x2, 0x1, 0x85, 0x50, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "af"}, {0x5, 0x24, 0x0, 0xc16}, {0xd, 0x24, 0xf, 0x1, 0xb, 0xf, 0x8, 0x5b}, {0x6, 0x24, 0x1a, 0x40, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x8000, 0x222a, 0xfb, 0x0, 0x94c, 0xe}, @dmm={0x7, 0x24, 0x14, 0x400, 0xa5}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0xe, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0xa7, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x69, 0x2, 0x4}}}}}}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[], 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000001740)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000004d00)={0x34, &(0x7f0000004b00)={0x0, 0xe, 0x1, "a2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000900)={0x44, 0x0, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x3}, 0x0, &(0x7f00000007c0)={0x20, 0x81, 0x1, "03"}, &(0x7f0000000800)={0x20, 0x82, 0x1, "c9"}, &(0x7f0000000980)=ANY=[@ANYBLOB], &(0x7f0000000880)={0x20, 0x84, 0x3, "6f68c0"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "bccb54"}}) 7.908280728s ago: executing program 2 (id=1388): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x104, 0xaa180) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000040)=0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) read$hiddev(r1, &(0x7f0000003b00)=""/4072, 0xfe8) 7.65476144s ago: executing program 3 (id=1389): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) symlink(0x0, 0x0) symlink(0x0, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r3 = add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r3, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) symlink(0x0, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 7.635223261s ago: executing program 3 (id=1390): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @ramp={0x7, 0xff21, {0x81, 0xf5c, 0x7f, 0x8}}}) 7.058716448s ago: executing program 4 (id=1393): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001340)="06b02b6c752a9a17fd38", 0xa) 6.946607673s ago: executing program 0 (id=1394): syz_usb_connect(0x0, 0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109026800030100c0000904000000010100000904000101010200000b2402010203180144ac00070501010002010904010000010100000904010101010200000b2402010203180144ac0007058201000201090402"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) 6.135138452s ago: executing program 3 (id=1395): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) 5.770583358s ago: executing program 5 (id=1396): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000580)={0x20, 0x16, 0x7c, "6be9acf60c26d3f48b945f1923a9a38274e845ea4bc175d52af22c66a61cd58509c2dd011fe012603a7d51c79eebc8e0ff755fb780910f851df793657656cf56a6ee7e4fea3bee7077e32470f1c08a7dd6e7aa34caed5142448b068f87e517aaabaab08d764af4c450ceb9576ee6943a12134dff36eda3da8c701f2a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x82, 0xfffffcc6, &(0x7f0000000400)="16688a4a3f1cd2db03000007000000000d7c36e51e67f08f961d2fc0c37d7c8c2136536697a794f470c5f44c560dedb1b190fa63c35a3c256fb8b4e2542f15f331") syz_open_dev$evdev(0x0, 0x9, 0x80000) 5.273253952s ago: executing program 3 (id=1397): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000005080)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="40011e0000004d61501d0100000000000000000000000000800700000000000038"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 4.843972142s ago: executing program 2 (id=1398): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000030000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b0001000000010904010001faf48d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0) 4.065126489s ago: executing program 4 (id=1399): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xfc, 0x2f, 0x62, 0x40, 0x9c4, 0x11, 0x638, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0xf0, 0xe8, 0x2, 0xb5, 0x1c, 0x80, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x81}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$lan78xx(r0, &(0x7f00000005c0)={0x14, &(0x7f0000000340)={0x20, 0x3, 0x47, {0x47, 0x5, "e4462330d89e4a905d5837f10d4ed101933a2e849d9161b4c4aa55afc36922c2e76f2e7ac9781e4c8904d6366f55e889a5503ca76b10172fea9cc109ff64881cb5ffeee972"}}, &(0x7f0000000580)=ANY=[@ANYBLOB="000304000c0c0000"]}, &(0x7f0000000840)={0x34, &(0x7f0000000600)={0x40, 0x14}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000780)={0xc0, 0xa1, 0x4, 0x8000}, &(0x7f00000007c0)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000800)={0xc0, 0xa2, 0x2f, "e25485b3aeff2ef3656d263c08ef59e69d2acbe29bd82bc77f1f2d1f9587880a90d6f240720256e090defff03476e0"}}) syz_usb_connect$uac1(0x2, 0xaf, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x582, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0xfd, 0xd0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x3d}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x100, 0x1, 0x4, 0x8}, @processing_unit={0x8, 0x24, 0x7, 0x2, 0x0, 0x40, "f0"}, @extension_unit={0xc, 0x24, 0x8, 0x4, 0x8, 0x6, "5ad5155f2f"}, @selector_unit={0x9, 0x24, 0x5, 0x3, 0x4, "004afc1b"}, @extension_unit={0xd, 0x24, 0x8, 0x5, 0x5, 0x9, "6cd62cdcced7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2, 0x5, 0xc0, {0x7, 0x25, 0x1, 0x4, 0xe, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0x4, 0x1, "9ee2"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x10, 0x3, {0x7, 0x25, 0x1, 0x4, 0x5, 0xc}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x7, 0xbf, 0x9, 0xff, 0xf}, 0xc6, &(0x7f0000000240)={0x5, 0xf, 0xc6, 0x4, [@generic={0x97, 0x10, 0xa, "0be7e81de68511138450181e6bc075bf3e05c1acaf8f485841fb81ae22867305f666c2d1de4d53f3f5069e2fc8b11ae1e8adc7f498c167dff8b5c8325f4b5b8424d2a08ef635231c2361c9764664021274d9416061f1db073cb05a7f1c3ae38f4d024937e6600a40bf8d1490e1e8f132d5a8c402f0c6eac362d9a716b6418f1446c3e571954ae77cc22fbf61731504c7af1ed072"}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc, 0xc, 0xd6, 0x1, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x49, 0x17, 0x7ff, 0xc7}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "ab3315ef134cfc98d8d217033dec426f"}]}, 0x3, [{0x99, &(0x7f0000000400)=@string={0x99, 0x3, "3517dfa1eedc184678df92cc8d2ed2e893c43671f0edf85b4dd828d8a0d75eee183eadfaeeaed63f49433499f56e3a3c722184f44d0ee57760384fc0f5a8dad54aa39b6e153912d28b04e125d050a1252392ace205f9350acb6337c049fe32766d4aeea08f177a133def6f206f06e7db6705553e0e47f207f5580ba5dbed4b1638c14f598aea734ede5cdaf113d1cd61e8f13fd00185e2"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x80c}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.933536015s ago: executing program 0 (id=1400): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) symlink(0x0, 0x0) symlink(0x0, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r3 = add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r3, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) symlink(0x0, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 3.920273015s ago: executing program 0 (id=1401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/202, 0xca}], 0x1) 3.628048949s ago: executing program 5 (id=1402): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004086800000000000000001090222000101008032090400000103000000092111010001224c0007058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00224c00000005200973a10185010a190315002505750025057508950a5304150025057518950181020a5404150025057508950181020a000000008000000095018102c0"], 0x0}, 0x0) 3.571143722s ago: executing program 2 (id=1403): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203fe"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000280)='L', 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 3.059900286s ago: executing program 0 (id=1404): r0 = syz_usb_connect(0x3, 0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="120118005520f010402038b1420100000001090238000100000000090400000371055900090582eb10000000010200090502f3"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x19, &(0x7f0000000000)) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x184, &(0x7f0000000740)={[{0x170, 0x4e00, "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"}, {0x6, 0x4e00, "6ea288cffa13"}, {}]}) 2.207997016s ago: executing program 3 (id=1405): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xf, 0xbe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x21, 0x4d, {0x28, 0x1, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.12586487s ago: executing program 2 (id=1406): syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x1c, 0x0, &(0x7f0000000240)={0xa1, 0x1, 0x400, "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"}, 0x0}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb8, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500200000010820514014000010203010902a60003010110020904000000010100000a2401020029000201020b240402062974f2ee440a092407030100742f590b240606010201000900030904010000010200000904010101010200000b240201d80109027960340924020101010dcbdc0a240201030407"], 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.057238503s ago: executing program 5 (id=1407): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) socket(0x11, 0x1, 0x0) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') 2.045349694s ago: executing program 5 (id=1408): syz_usb_connect(0x5, 0x2e, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x76, 0x2b, 0x45, 0x8, 0x421, 0x445, 0xf7bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x7, 0x2, 0x10, 0x1, "", [{{0x9, 0x4, 0x4a, 0x0, 0x0, 0x2, 0x2, 0xff, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0xa}}]}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) 996.009493ms ago: executing program 4 (id=1409): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000000)={0x1, 0x8}) 995.778433ms ago: executing program 4 (id=1410): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) 787.730483ms ago: executing program 5 (id=1411): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) symlink(0x0, 0x0) symlink(0x0, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r3 = add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r3, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) symlink(0x0, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 766.532744ms ago: executing program 5 (id=1412): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="40011e0000004d61501d0100000000000000000000000000800700000000000038"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000840)=ANY=[@ANYBLOB="200e3e00000058"], 0x0, 0x0, 0x0, 0x0, 0x0}) 237.156399ms ago: executing program 3 (id=1413): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000d80)={0xffffffffffffff9e, &(0x7f00000000c0)={0x20, 0x6, 0xc8, "66e17a25405c6599698e1bc155776bf3fa877592cbbc86a1bd2a06c296eded37434e5689d2726909da63951bf4b0fbab4cad7b7f0243b4cdeed441186e0a678f269a66a6f76c96d90657040517f1352ad613ac5975eba7719303bd5268355df5c4adc8023dd70b21bf3fa839ed2b5808e7b29ad83ca14b65ff5952cceea828914c76f3d251fd1e9a6acecab96393ae386a755287ab7c3fa5537f8026a55958f1f77698f8f1756f5a2caf902d37fb1e94eba0cc2cc6163037d4b783812a8465260124f750b9bc9731"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x5, 0x2a, &(0x7f00000037c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x18, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_open_dev$evdev(0x0, 0x80000000002, 0x30004) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) 0s ago: executing program 0 (id=1414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/202, 0xca}], 0x1) kernel console output (not intermixed with test programs): ): avc: denied { shutdown } for pid=3552 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 255.984876][ T640] usb 5-1: USB disconnect, device number 17 [ 256.015615][ T3562] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 256.045186][ T28] audit: type=1400 audit(1794949369.434:297): avc: denied { read } for pid=3563 comm="syz.3.836" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 256.508949][ T28] audit: type=1400 audit(1794949369.894:298): avc: denied { mounton } for pid=3569 comm="syz.4.838" path="/165/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 256.549724][ T3572] loop4: detected capacity change from 0 to 512 [ 256.556998][ T460] usbhid 6-1:0.52: can't add hid device: -71 [ 256.564981][ T460] usbhid: probe of 6-1:0.52 failed with error -71 [ 256.572674][ T460] usb 6-1: USB disconnect, device number 9 [ 256.584598][ T3572] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 256.593754][ T3572] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.613518][ T288] EXT4-fs (loop4): unmounting filesystem. [ 256.632190][ T3577] loop4: detected capacity change from 0 to 1024 [ 256.639335][ T3577] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 256.651029][ T3577] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 256.662669][ T3577] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 256.670891][ T3577] System zones: 0-1, 3-36 [ 256.676882][ T3577] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 256.688442][ T28] audit: type=1400 audit(1794949370.084:299): avc: denied { remove_name } for pid=3576 comm="syz.4.840" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.711139][ T28] audit: type=1400 audit(1794949370.084:300): avc: denied { rename } for pid=3576 comm="syz.4.840" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 256.720547][ T288] EXT4-fs (loop4): unmounting filesystem. [ 256.752468][ T3580] syz.2.841 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 256.767002][ T28] audit: type=1400 audit(1794949370.084:301): avc: denied { unlink } for pid=3576 comm="syz.4.840" name="file3" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 256.792814][ T3582] loop4: detected capacity change from 0 to 16 [ 256.819247][ T3582] erofs: (device loop4): mounted with root inode @ nid 36. [ 257.307704][ T3605] loop5: detected capacity change from 0 to 128 [ 257.349023][ T3605] FAT-fs (loop5): Directory bread(block 32) failed [ 257.360086][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 257.402199][ T3605] FAT-fs (loop5): Directory bread(block 33) failed [ 257.411325][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 257.421832][ T3605] FAT-fs (loop5): Directory bread(block 34) failed [ 257.434522][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.451253][ T3605] FAT-fs (loop5): Directory bread(block 35) failed [ 257.465999][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 257.478357][ T3605] FAT-fs (loop5): Directory bread(block 36) failed [ 257.496247][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.511307][ T3605] FAT-fs (loop5): Directory bread(block 37) failed [ 257.530997][ T3605] FAT-fs (loop5): Directory bread(block 38) failed [ 257.540086][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.561984][ T3605] FAT-fs (loop5): Directory bread(block 39) failed [ 257.611750][ T3605] FAT-fs (loop5): Directory bread(block 40) failed [ 257.622021][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.630097][ T3605] FAT-fs (loop5): Directory bread(block 41) failed [ 257.662061][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.720134][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.825903][ T3612] loop4: detected capacity change from 0 to 1024 [ 257.843404][ T3612] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 257.864963][ T3614] EXT4-fs: Ignoring removed bh option [ 257.888393][ T3612] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 257.911976][ T28] audit: type=1400 audit(1794949371.304:302): avc: denied { rmdir } for pid=3611 comm="syz.4.853" name="file1" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.938616][ T3614] FAULT_INJECTION: forcing a failure. [ 257.938616][ T3614] name failslab, interval 1, probability 0, space 0, times 0 [ 257.957045][ T288] EXT4-fs (loop4): unmounting filesystem. [ 257.963930][ T3614] CPU: 1 PID: 3614 Comm: syz.5.854 Not tainted syzkaller #0 [ 257.971271][ T3614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.981362][ T3614] Call Trace: [ 257.984680][ T3614] [ 257.987648][ T3614] __dump_stack+0x21/0x24 [ 257.992038][ T3614] dump_stack_lvl+0x110/0x170 [ 257.996763][ T3614] ? __cfi_dump_stack_lvl+0x8/0x8 [ 258.001824][ T3614] ? futex_wait+0x5f1/0x900 [ 258.006364][ T3614] dump_stack+0x15/0x24 [ 258.010566][ T3614] should_fail_ex+0x3bf/0x510 [ 258.015313][ T3614] ? do_timer_create+0x1d5/0x13c0 [ 258.020374][ T3614] __should_failslab+0xac/0xf0 [ 258.025185][ T3614] should_failslab+0x9/0x20 [ 258.029732][ T3614] kmem_cache_alloc+0x3b/0x320 [ 258.034547][ T3614] do_timer_create+0x1d5/0x13c0 [ 258.039456][ T3614] ? __cfi_do_futex+0x10/0x10 [ 258.044261][ T3614] ? mutex_unlock+0x8f/0x230 [ 258.049021][ T3614] ? __ia32_sys_clock_nanosleep_time32+0xb0/0xb0 [ 258.055406][ T3614] ? __se_sys_futex+0x136/0x310 [ 258.060294][ T3614] __x64_sys_timer_create+0x149/0x1c0 [ 258.065714][ T3614] ? __this_cpu_preempt_check+0x13/0x20 [ 258.071307][ T3614] ? xfd_validate_state+0x70/0x150 [ 258.076465][ T3614] ? __cfi___x64_sys_timer_create+0x10/0x10 [ 258.082398][ T3614] ? __kasan_check_write+0x14/0x20 [ 258.087550][ T3614] ? fpregs_restore_userregs+0x128/0x260 [ 258.093229][ T3614] ? switch_fpu_return+0xe/0x10 [ 258.098114][ T3614] x64_sys_call+0x31c/0x9a0 [ 258.102658][ T3614] do_syscall_64+0x4c/0xa0 [ 258.107114][ T3614] ? clear_bhb_loop+0x30/0x80 [ 258.111828][ T3614] ? clear_bhb_loop+0x30/0x80 [ 258.116542][ T3614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.122475][ T3614] RIP: 0033:0x7f20b539e159 [ 258.126920][ T3614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.146569][ T3614] RSP: 002b:00007f20b61fa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 258.155002][ T3614] RAX: ffffffffffffffda RBX: 00007f20b5625fa0 RCX: 00007f20b539e159 [ 258.162995][ T3614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 98e63d26ce15b27f [ 258.170987][ T3614] RBP: 00007f20b543503b R08: 0000000000000000 R09: 0000000000000000 [ 258.178971][ T3614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.186980][ T3614] R13: 00007f20b5626038 R14: 00007f20b5625fa0 R15: 00007fffde8e15f8 [ 258.194975][ T3614] [ 258.249300][ T3622] erofs: (device loop4): mounted with root inode @ nid 36. [ 258.273372][ T3626] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 258.291908][ T3626] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.320950][ T2202] EXT4-fs (loop5): unmounting filesystem. [ 258.350819][ T3633] exfat: Bad value for 'uid' [ 258.373987][ T3636] netlink: 44 bytes leftover after parsing attributes in process `syz.5.861'. [ 258.396916][ T3636] netlink: 43 bytes leftover after parsing attributes in process `syz.5.861'. [ 258.406044][ T3636] netlink: 'syz.5.861': attribute type 5 has an invalid length. [ 258.413933][ T3636] netlink: 43 bytes leftover after parsing attributes in process `syz.5.861'. [ 259.246664][ T19] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 259.473020][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.495022][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.521722][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.535579][ T19] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.545261][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.559054][ T19] usb 5-1: config 0 descriptor?? [ 259.977517][ T19] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 260.384805][ T19] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 260.518548][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 260.518614][ T28] audit: type=1400 audit(1794949373.904:304): avc: denied { create } for pid=3671 comm="syz.2.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 260.582400][ T28] audit: type=1400 audit(1794949373.934:305): avc: denied { mounton } for pid=3671 comm="syz.2.876" path="/165/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 260.621750][ T19] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 260.801669][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 260.808879][ T19] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.820718][ T19] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.834222][ T19] usb 4-1: config 0 interface 0 has no altsetting 0 [ 260.840935][ T19] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 260.850910][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.870241][ T19] usb 4-1: config 0 descriptor?? [ 260.999379][ T6] usb 5-1: USB disconnect, device number 18 [ 261.086314][ T19] usbhid 4-1:0.0: can't add hid device: -71 [ 261.092727][ T19] usbhid: probe of 4-1:0.0 failed with error -71 [ 261.103510][ T19] usb 4-1: USB disconnect, device number 18 [ 261.341750][ T28] audit: type=1400 audit(1794949374.724:306): avc: denied { bind } for pid=3686 comm="syz.0.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 261.379195][ T28] audit: type=1400 audit(1794949374.724:307): avc: denied { name_bind } for pid=3686 comm="syz.0.880" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 261.400519][ T28] audit: type=1400 audit(1794949374.724:308): avc: denied { node_bind } for pid=3686 comm="syz.0.880" saddr=ff01::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 261.451965][ T3693] set_capacity_and_notify: 4 callbacks suppressed [ 261.451978][ T3693] loop2: detected capacity change from 0 to 16 [ 261.466177][ T3693] erofs: (device loop2): mounted with root inode @ nid 36. [ 261.493827][ T3695] device batadv_slave_1 entered promiscuous mode [ 261.500620][ T3695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 261.513764][ T3695] device batadv_slave_1 left promiscuous mode [ 261.576924][ T3702] loop2: detected capacity change from 0 to 512 [ 261.671613][ T28] audit: type=1326 audit(1794949375.054:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.3.888" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e3f99e159 code=0x0 [ 261.787111][ T28] audit: type=1400 audit(1794949375.174:310): avc: denied { watch } for pid=3711 comm="syz.5.891" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 261.913067][ T28] audit: type=1400 audit(1794949375.304:311): avc: denied { accept } for pid=3716 comm="syz.5.892" path="socket:[28532]" dev="sockfs" ino=28532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 262.414377][ T460] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 262.459773][ T3732] loop2: detected capacity change from 0 to 256 [ 262.466970][ T3732] FAT-fs (loop2): bogus logical sector size 0 [ 262.473123][ T3732] FAT-fs (loop2): Can't find a valid FAT filesystem [ 262.517819][ T28] audit: type=1400 audit(1794949375.904:312): avc: denied { setattr } for pid=3734 comm="syz.3.899" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 262.566821][ T28] audit: type=1400 audit(1794949375.954:313): avc: denied { create } for pid=3738 comm="syz.2.901" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 262.616908][ T3745] loop3: detected capacity change from 0 to 512 [ 262.624260][ T460] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 262.632982][ T460] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 262.643247][ T460] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 262.653126][ T460] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 262.664468][ T460] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 262.667330][ T404] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 262.679774][ T460] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 262.711033][ T3747] loop2: detected capacity change from 0 to 1024 [ 262.737358][ T3747] journal_path: Lookup failure for './cgroup' [ 262.750365][ T3747] EXT4-fs: error: could not find journal device path [ 262.765395][ T460] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 262.784718][ T460] usb 6-1: Product: syz [ 262.789004][ T460] usb 6-1: Manufacturer: syz [ 262.809118][ T460] cdc_wdm 6-1:1.0: skipping garbage [ 262.814760][ T460] cdc_wdm 6-1:1.0: skipping garbage [ 262.826079][ T460] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 262.838184][ T3749] binder: 3744:3749 ioctl 4018620d 0 returned -22 [ 262.847328][ T3749] binder: 3744:3749 ioctl c0306201 0 returned -14 [ 263.926635][ T3776] loop4: detected capacity change from 0 to 2048 [ 263.943624][ T3776] EXT4-fs error (device loop4): ext4_quota_enable:7036: inode #4: comm syz.4.911: iget: checksum invalid [ 263.955563][ T3776] EXT4-fs error (device loop4): ext4_quota_enable:7039: comm syz.4.911: Bad quota inode: 4, type: 1 [ 263.966685][ T19] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 263.975340][ T566] usb 6-1: USB disconnect, device number 10 [ 263.984507][ T3776] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 263.999759][ T3776] EXT4-fs (loop4): mount failed [ 264.181707][ T19] usb 4-1: device descriptor read/64, error -71 [ 264.495571][ T3797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 265.527450][ T19] usb 4-1: device descriptor read/64, error -71 [ 266.201448][ T3813] loop5: detected capacity change from 0 to 1024 [ 266.234635][ T3815] loop0: detected capacity change from 0 to 1024 [ 266.272235][ T19] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 266.282826][ T3808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.925'. [ 266.291707][ T3808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.925'. [ 266.369919][ T3815] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 266.392195][ T3815] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 266.409129][ T3815] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 266.429689][ T291] EXT4-fs (loop0): unmounting filesystem. [ 266.491825][ T19] usb 4-1: device descriptor read/64, error -71 [ 266.579342][ T3838] loop5: detected capacity change from 0 to 1024 [ 266.586211][ T3838] journal_path: Lookup failure for './cgroup' [ 266.592490][ T3838] EXT4-fs: error: could not find journal device path [ 266.611675][ T640] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 266.761716][ T19] usb 4-1: device descriptor read/64, error -71 [ 266.778176][ T3859] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 266.802648][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 266.802663][ T28] audit: type=1400 audit(1794949380.184:316): avc: denied { relabelto } for pid=3858 comm="syz.3.945" name="210" dev="tmpfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 266.833858][ T28] audit: type=1400 audit(1794949380.184:317): avc: denied { associate } for pid=3858 comm="syz.3.945" name="210" dev="tmpfs" ino=1150 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 266.859709][ T28] audit: type=1400 audit(1794949380.184:318): avc: denied { write } for pid=290 comm="syz-executor" name="210" dev="tmpfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 266.882012][ T19] usb usb4-port1: attempt power cycle [ 266.886181][ T28] audit: type=1400 audit(1794949380.184:319): avc: denied { remove_name } for pid=290 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 266.915473][ T640] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 266.923765][ T6] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 266.923783][ T28] audit: type=1400 audit(1794949380.184:320): avc: denied { rmdir } for pid=290 comm="syz-executor" name="210" dev="tmpfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 266.956030][ T640] usb 5-1: config 0 has no interface number 0 [ 266.962285][ T640] usb 5-1: config 0 interface 128 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.963010][ T28] audit: type=1400 audit(1794949380.254:321): avc: denied { getopt } for pid=3861 comm="syz.3.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 266.998095][ T640] usb 5-1: config 0 interface 128 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.009781][ T640] usb 5-1: config 0 interface 128 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.023573][ T640] usb 5-1: config 0 interface 128 has no altsetting 0 [ 267.030562][ T640] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 267.040535][ T640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.052119][ T640] usb 5-1: config 0 descriptor?? [ 267.135473][ T6] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 267.146186][ T6] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 267.155564][ T6] usb 3-1: Product: syz [ 267.159906][ T6] usb 3-1: Manufacturer: syz [ 267.165222][ T6] usb 3-1: SerialNumber: syz [ 267.180562][ T6] usb 3-1: config 0 descriptor?? [ 267.358209][ T28] audit: type=1400 audit(1794949380.744:322): avc: denied { write } for pid=3871 comm="syz.0.948" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 267.401567][ T460] usb 3-1: USB disconnect, device number 14 [ 267.473248][ T640] hid-multitouch 0003:0EEF:72C4.0003: unknown main item tag 0x0 [ 267.487571][ T640] hid-multitouch 0003:0EEF:72C4.0003: unknown main item tag 0x0 [ 267.497092][ T640] hid-multitouch 0003:0EEF:72C4.0003: unknown main item tag 0x0 [ 267.508432][ T640] hid-multitouch 0003:0EEF:72C4.0003: unknown main item tag 0x0 [ 267.516683][ T640] hid-multitouch 0003:0EEF:72C4.0003: unknown main item tag 0x0 [ 267.526687][ T640] hid-multitouch 0003:0EEF:72C4.0003: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input128 [ 267.695378][ T28] audit: type=1400 audit(1794949381.084:323): avc: denied { mount } for pid=3875 comm="syz.0.950" name="/" dev="ramfs" ino=29054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 267.813252][ T460] usb 5-1: USB disconnect, device number 19 [ 268.088756][ T3879] fido_id[3879]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 268.382180][ T3895] loop0: detected capacity change from 0 to 256 [ 268.402361][ T3895] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 268.433573][ T460] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 268.453942][ T3904] loop0: detected capacity change from 0 to 1024 [ 268.463430][ T3904] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 268.478291][ T3904] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 2: comm syz.0.961: lblock 2 mapped to illegal pblock 2 (length 1) [ 268.492420][ T3904] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 268.500605][ T3904] EXT4-fs error (device loop0): __ext4_get_inode_loc:4522: comm syz.0.961: Invalid inode table block 1 in block_group 0 [ 268.513644][ T3904] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 268.523434][ T3904] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.961: mark_inode_dirty error [ 268.534876][ T3904] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 268.543738][ T3904] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.961: Failed to acquire dquot type 0 [ 268.555228][ T3904] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 268.565169][ T3904] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #11: comm syz.0.961: mark_inode_dirty error [ 268.577095][ T3904] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 268.587818][ T3904] EXT4-fs (loop0): 1 orphan inode deleted [ 268.593846][ T3904] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 268.602738][ T43] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 268.612723][ T3907] loop4: detected capacity change from 0 to 2048 [ 268.632352][ T43] EXT4-fs error (device loop0): ext4_release_dquot:6864: comm kworker/u4:2: Failed to release dquot type 0 [ 268.645126][ T460] usb 6-1: unable to get BOS descriptor or descriptor too short [ 268.653489][ T460] usb 6-1: not running at top speed; connect to a high speed hub [ 268.664517][ T3904] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 268.666590][ T3907] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 268.683410][ T3907] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.687423][ T3904] EXT4-fs: Cannot change quota options when quota turned on [ 268.702161][ T460] usb 6-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 268.711241][ T460] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.723650][ T291] EXT4-fs (loop0): unmounting filesystem. [ 268.729650][ T291] EXT4-fs error (device loop0): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 268.740822][ T460] usb 6-1: Product: syz [ 268.746700][ T460] usb 6-1: Manufacturer: syz [ 268.751317][ T460] usb 6-1: SerialNumber: syz [ 268.756371][ T291] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 268.760604][ T3907] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.962: bg 0: block 345: padding at end of block bitmap is not set [ 268.780390][ T291] EXT4-fs error (device loop0): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 268.783735][ T3907] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 117 [ 268.804198][ T3907] EXT4-fs (loop4): This should not happen!! Data will be lost [ 268.804198][ T3907] [ 268.829287][ T326] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 268.843672][ T326] EXT4-fs (loop4): This should not happen!! Data will be lost [ 268.843672][ T326] [ 268.853846][ T326] EXT4-fs (loop4): Total free blocks count 0 [ 268.859907][ T326] EXT4-fs (loop4): Free/Dirty block details [ 268.866200][ T326] EXT4-fs (loop4): free_blocks=0 [ 268.870669][ T3913] loop2: detected capacity change from 0 to 1024 [ 268.871303][ T326] EXT4-fs (loop4): dirty_blocks=16 [ 268.882825][ T326] EXT4-fs (loop4): Block reservation details [ 268.891452][ T3913] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 268.910060][ T3913] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 268.919544][ T3913] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6055c01c, mo2=0002] [ 268.929552][ T3913] System zones: 0-1, 3-36 [ 268.937543][ T3913] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 268.983794][ T460] usb 6-1: MIDIStreaming interface descriptor not found [ 269.008648][ T460] usb 6-1: USB disconnect, device number 11 [ 269.462671][ T287] EXT4-fs (loop2): unmounting filesystem. [ 269.501846][ T3937] loop5: detected capacity change from 0 to 4096 [ 269.508722][ T3937] EXT4-fs: Ignoring removed mblk_io_submit option [ 269.515769][ T3937] EXT4-fs: Ignoring removed orlov option [ 269.522393][ T3937] EXT4-fs (loop5): Test dummy encryption mode enabled [ 269.530537][ T3937] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 269.553928][ T2202] EXT4-fs (loop5): unmounting filesystem. [ 269.741684][ T2130] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 269.827412][ T3959] loop0: detected capacity change from 0 to 128 [ 269.836907][ T3959] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 269.936429][ T2130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.950078][ T2130] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 269.965424][ T2130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.973622][ T3963] loop4: detected capacity change from 0 to 512 [ 269.981135][ T2130] usb 3-1: config 0 descriptor?? [ 270.008893][ T3963] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 270.043241][ T3967] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 270.051868][ T3967] FAT-fs (loop0): Filesystem has been set read-only [ 270.123565][ T3963] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 270.171143][ T3963] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 270.192450][ T288] EXT4-fs (loop4): unmounting filesystem. [ 270.197742][ T2130] usbhid 3-1:0.0: can't add hid device: -71 [ 270.204993][ T2130] usbhid: probe of 3-1:0.0 failed with error -71 [ 270.212994][ T2130] usb 3-1: USB disconnect, device number 16 [ 270.360955][ T3978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.989'. [ 270.688672][ T291] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 270.791708][ T2130] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 270.820143][ T4002] binder_alloc: 4001: binder_alloc_buf, no vma [ 270.839946][ T4004] loop0: detected capacity change from 0 to 512 [ 270.849471][ T4004] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 270.862714][ T4004] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 270.874717][ T4004] EXT4-fs (loop0): 1 truncate cleaned up [ 270.880486][ T4004] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 270.950850][ T291] EXT4-fs (loop0): unmounting filesystem. [ 271.001751][ T2130] usb 3-1: Using ep0 maxpacket: 8 [ 271.008302][ T2130] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 271.016523][ T2130] usb 3-1: config 0 has no interface number 0 [ 271.022780][ T2130] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.033816][ T2130] usb 3-1: config 0 interface 52 has no altsetting 0 [ 271.040557][ T2130] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 271.049648][ T2130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.058538][ T2130] usb 3-1: config 0 descriptor?? [ 271.661709][ T460] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 271.842924][ T460] usb 6-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 271.857246][ T460] usb 6-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 271.866368][ T460] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.874538][ T460] usb 6-1: Product: syz [ 271.878872][ T460] usb 6-1: Manufacturer: syz [ 271.883614][ T460] usb 6-1: SerialNumber: syz [ 271.888282][ T2130] usbhid 3-1:0.52: can't add hid device: -71 [ 271.894805][ T2130] usbhid: probe of 3-1:0.52 failed with error -71 [ 271.903231][ T2130] usb 3-1: USB disconnect, device number 17 [ 272.105975][ T460] scsi host1: uas [ 272.112230][ T2130] scsi 1:0:0:0: tag#0 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 272.121783][ T2130] scsi 1:0:0:0: tag#0 CDB: opcode=0x12 12 00 00 00 24 00 [ 272.188036][ T4028] loop4: detected capacity change from 0 to 512 [ 272.194460][ T41] scsi 1:0:0:0: tag#0 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 272.203970][ T41] scsi 1:0:0:0: tag#0 CDB: opcode=0x12 12 00 00 00 24 00 [ 272.205498][ T4028] EXT4-fs: Ignoring removed orlov option [ 272.217662][ T4028] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 272.233840][ T4028] EXT4-fs error (device loop4): ext4_quota_enable:7036: comm syz.4.1010: inode #1073741824: comm syz.4.1010: iget: illegal inode # [ 272.247705][ T4028] EXT4-fs error (device loop4): ext4_quota_enable:7039: comm syz.4.1010: Bad quota inode: 1073741824, type: 2 [ 272.259607][ T4028] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-117, ino=1073741824). Please run e2fsck to fix. [ 272.261855][ T41] scsi 1:0:0:0: tag#0 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 272.277010][ T4028] EXT4-fs (loop4): mount failed [ 272.284573][ T41] scsi 1:0:0:0: tag#0 CDB: opcode=0x12 12 00 00 00 24 00 [ 272.308173][ T19] usb 6-1: USB disconnect, device number 12 [ 272.401582][ T4041] loop2: detected capacity change from 0 to 1024 [ 272.410276][ T4041] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 272.422644][ T4041] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 272.432792][ T4041] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 272.441062][ T4041] System zones: 0-1, 3-36 [ 272.446674][ T4041] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 272.661723][ T2130] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 272.841693][ T2130] usb 5-1: Using ep0 maxpacket: 8 [ 272.853607][ T2130] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 272.864915][ T2130] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.878132][ T2130] usb 5-1: config 0 interface 0 has no altsetting 0 [ 272.884832][ T2130] usb 5-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00 [ 272.894032][ T2130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.903167][ T2130] usb 5-1: config 0 descriptor?? [ 273.298885][ T287] EXT4-fs (loop2): unmounting filesystem. [ 273.313392][ T2130] input: HID 0518:0002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0518:0002.0004/input/input9 [ 273.404783][ T2130] ezkey 0003:0518:0002.0004: input,hiddev96,hidraw0: USB HID v0.01 Device [HID 0518:0002] on usb-dummy_hcd.4-1/input0 [ 273.855138][ T4062] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1020'. [ 273.866202][ T4064] loop5: detected capacity change from 0 to 1024 [ 273.886553][ T4064] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 273.900082][ T19] usb 5-1: USB disconnect, device number 20 [ 273.924486][ T4064] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 273.935341][ T4064] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 273.951011][ T4064] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 273.969979][ T310] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 273.982289][ T310] EXT4-fs (loop5): This should not happen!! Data will be lost [ 273.982289][ T310] [ 273.992219][ T310] EXT4-fs (loop5): Total free blocks count 0 [ 273.998315][ T310] EXT4-fs (loop5): Free/Dirty block details [ 274.004506][ T310] EXT4-fs (loop5): free_blocks=20480 [ 274.009916][ T310] EXT4-fs (loop5): dirty_blocks=48 [ 274.015601][ T310] EXT4-fs (loop5): Block reservation details [ 274.021830][ T310] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 274.028474][ T310] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 2 with error 28 [ 274.043950][ T4075] loop0: detected capacity change from 0 to 256 [ 274.081979][ T4075] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 274.096764][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 274.096779][ T28] audit: type=1400 audit(1794949387.484:349): avc: denied { checkpoint_restore } for pid=4078 comm="syz.5.1029" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 274.097005][ T4075] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 274.134196][ T4083] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 274.230440][ T4092] loop3: detected capacity change from 0 to 256 [ 274.240201][ T4092] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 274.312863][ T4098] loop5: detected capacity change from 0 to 2048 [ 274.335038][ T4100] loop3: detected capacity change from 0 to 2048 [ 274.346842][ T4098] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 274.361131][ T28] audit: type=1400 audit(1794949387.744:350): avc: denied { lock } for pid=4097 comm="syz.5.1035" path="/136/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 274.385657][ T4100] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 274.395217][ T4098] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 274.398538][ T4100] ext4 filesystem being mounted at /225/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 274.410690][ T4098] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 60 with error 28 [ 274.453678][ T4098] EXT4-fs (loop5): This should not happen!! Data will be lost [ 274.453678][ T4098] [ 274.463393][ T4098] EXT4-fs (loop5): Total free blocks count 0 [ 274.469513][ T4098] EXT4-fs (loop5): Free/Dirty block details [ 274.475691][ T4098] EXT4-fs (loop5): free_blocks=4096 [ 274.480988][ T4098] EXT4-fs (loop5): dirty_blocks=64 [ 274.486198][ T4098] EXT4-fs (loop5): Block reservation details [ 274.492320][ T4098] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 274.503278][ T4100] fs-verity: sha512 using implementation "sha512-avx2" [ 274.553648][ T290] EXT4-fs (loop3): unmounting filesystem. [ 274.618429][ T4097] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 274.964382][ T4134] loop4: detected capacity change from 0 to 128 [ 275.029605][ T28] audit: type=1400 audit(1794949388.414:351): avc: denied { create } for pid=4137 comm="syz.4.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 275.179518][ T4144] loop0: detected capacity change from 0 to 256 [ 275.192433][ T4144] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 275.654095][ T4166] loop5: detected capacity change from 0 to 512 [ 275.681060][ T4166] EXT4-fs: Ignoring removed oldalloc option [ 275.714033][ T4166] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 275.725724][ T4166] EXT4-fs (loop5): 1 truncate cleaned up [ 275.731539][ T4166] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 275.791674][ T6] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 275.846828][ T28] audit: type=1400 audit(1794949389.234:352): avc: denied { getopt } for pid=4175 comm="syz.0.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 275.879653][ T4176] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 275.947838][ T28] audit: type=1400 audit(1794949389.334:353): avc: denied { read write } for pid=4185 comm="syz.0.1069" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 275.973874][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.987698][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.005476][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.018487][ T28] audit: type=1400 audit(1794949389.334:354): avc: denied { open } for pid=4185 comm="syz.0.1069" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 276.030024][ T6] usb 4-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.00 [ 276.051018][ T19] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 276.061729][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.070943][ T6] usb 4-1: config 0 descriptor?? [ 276.242843][ T19] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.254066][ T19] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.267179][ T19] usb 6-1: config 0 interface 0 has no altsetting 0 [ 276.274001][ T19] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 276.283365][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.306819][ T19] usb 6-1: config 0 descriptor?? [ 276.409573][ T4209] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 276.419692][ T4213] netlink: 'syz.4.1080': attribute type 4 has an invalid length. [ 276.431783][ T4209] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.484126][ T287] EXT4-fs (loop2): unmounting filesystem. [ 276.494359][ T6] wacom 0003:056A:0101.0005: unknown main item tag 0x0 [ 276.501315][ T6] wacom 0003:056A:0101.0005: unknown main item tag 0x0 [ 276.524002][ T6] wacom 0003:056A:0101.0005: unknown main item tag 0x0 [ 276.531059][ T6] wacom 0003:056A:0101.0005: unknown main item tag 0x0 [ 276.538773][ T6] wacom 0003:056A:0101.0005: unknown main item tag 0x0 [ 276.546421][ T6] wacom 0003:056A:0101.0005: unknown main item tag 0x0 [ 276.554060][ T6] wacom 0003:056A:0101.0005: unknown main item tag 0x0 [ 276.561127][ T6] wacom 0003:056A:0101.0005: unknown main item tag 0x0 [ 276.568280][ T6] wacom 0003:056A:0101.0005: unknown main item tag 0x0 [ 276.575434][ T6] wacom 0003:056A:0101.0005: unknown main item tag 0x0 [ 276.591703][ T6] wacom 0003:056A:0101.0005: unknown main item tag 0x0 [ 276.601886][ T6] wacom 0003:056A:0101.0005: unknown main item tag 0x0 [ 276.614203][ T6] wacom 0003:056A:0101.0005: hidraw0: USB HID v0.00 Device [HID 056a:0101] on usb-dummy_hcd.3-1/input0 [ 276.702372][ T2130] usb 4-1: USB disconnect, device number 22 [ 276.717943][ T19] hid-multitouch 0003:0EEF:72C4.0006: unknown main item tag 0x0 [ 276.731914][ T19] hid-multitouch 0003:0EEF:72C4.0006: unknown main item tag 0x0 [ 276.739633][ T19] hid-multitouch 0003:0EEF:72C4.0006: unbalanced collection at end of report description [ 276.759833][ T19] hid-multitouch: probe of 0003:0EEF:72C4.0006 failed with error -22 [ 276.801676][ T640] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 276.924912][ T2186] usb 6-1: USB disconnect, device number 13 [ 277.032950][ T640] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.057639][ T640] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.070262][ T640] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.099003][ T640] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.128972][ T640] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.173051][ T640] usb 3-1: config 0 descriptor?? [ 277.459399][ T2202] EXT4-fs (loop5): unmounting filesystem. [ 277.563891][ T28] audit: type=1400 audit(1794949390.894:355): avc: denied { listen } for pid=4242 comm="syz.5.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 277.634809][ T28] audit: type=1400 audit(1794949390.894:356): avc: denied { shutdown } for pid=4242 comm="syz.5.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 277.683100][ T640] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 277.693993][ T640] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 277.933518][ T19] usb 3-1: USB disconnect, device number 18 [ 277.981717][ T6] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 278.161662][ T6] usb 6-1: Using ep0 maxpacket: 8 [ 278.168452][ T6] usb 6-1: unable to get BOS descriptor or descriptor too short [ 278.178957][ T6] usb 6-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 278.188363][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.196612][ T6] usb 6-1: Product: syz [ 278.200956][ T6] usb 6-1: Manufacturer: syz [ 278.205765][ T6] usb 6-1: SerialNumber: syz [ 278.628061][ T4261] set_capacity_and_notify: 3 callbacks suppressed [ 278.628083][ T4261] loop3: detected capacity change from 0 to 512 [ 278.645114][ T4262] loop4: detected capacity change from 0 to 128 [ 279.401340][ T4262] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 279.429697][ T4262] ext4 filesystem being mounted at /239/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 283.107678][ T6] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 283.114807][ T6] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 283.128362][ T6] usb 6-1: USB disconnect, device number 14 [ 283.239646][ T288] EXT4-fs (loop4): unmounting filesystem. [ 283.539960][ T4291] loop0: detected capacity change from 0 to 512 [ 283.632466][ T4291] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.1109: iget: bad i_size value: 38620345925642 [ 283.653756][ T4291] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1109: couldn't read orphan inode 15 (err -117) [ 283.711354][ T4291] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 283.743663][ T4291] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1109: bg 0: block 5: invalid block bitmap [ 283.758408][ T4297] loop3: detected capacity change from 0 to 128 [ 283.771526][ T4295] loop4: detected capacity change from 0 to 4096 [ 283.779661][ T4291] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 283.803039][ T4295] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 283.831665][ T4291] EXT4-fs (loop0): This should not happen!! Data will be lost [ 283.831665][ T4291] [ 283.835997][ T4295] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 283.855141][ T405] udevd[405]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 283.876000][ T4291] EXT4-fs (loop0): Total free blocks count 0 [ 283.897513][ T4291] EXT4-fs (loop0): Free/Dirty block details [ 283.903677][ T4291] EXT4-fs (loop0): free_blocks=0 [ 283.909235][ T4291] EXT4-fs (loop0): dirty_blocks=65 [ 283.915117][ T4291] EXT4-fs (loop0): Block reservation details [ 283.921184][ T4291] EXT4-fs (loop0): i_reserved_data_blocks=65 [ 283.928404][ T43] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 319 with max blocks 1 with error 28 [ 283.952083][ T288] EXT4-fs (loop4): unmounting filesystem. [ 284.443531][ T4309] loop2: detected capacity change from 0 to 2048 [ 284.496696][ T4309] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 284.543872][ T4309] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 284.594842][ T4309] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 60 with error 28 [ 284.617144][ T4309] EXT4-fs (loop2): This should not happen!! Data will be lost [ 284.617144][ T4309] [ 284.628437][ T4309] EXT4-fs (loop2): Total free blocks count 0 [ 284.634849][ T4309] EXT4-fs (loop2): Free/Dirty block details [ 284.640819][ T4309] EXT4-fs (loop2): free_blocks=4096 [ 284.646205][ T4309] EXT4-fs (loop2): dirty_blocks=64 [ 284.651387][ T4309] EXT4-fs (loop2): Block reservation details [ 284.657871][ T4309] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 284.664293][ T4323] loop5: detected capacity change from 0 to 512 [ 284.672394][ T28] audit: type=1400 audit(1794949398.064:357): avc: denied { setattr } for pid=4308 comm="syz.2.1115" path="/203/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 284.693679][ T4323] EXT4-fs: Ignoring removed i_version option [ 284.710276][ T4309] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 284.738558][ T4323] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802c018, mo2=0002] [ 284.760334][ T4323] System zones: 1-3, 19-19, 35-38 [ 284.771832][ T4323] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 284.781141][ T4323] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.834665][ T4323] EXT4-fs error (device loop5): ext4_get_verity_descriptor_location:337: inode #15: comm syz.5.1118: verity file corrupted; can't find descriptor [ 284.838715][ T4327] loop3: detected capacity change from 0 to 512 [ 284.858801][ T4323] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size [ 284.881211][ T4329] loop2: detected capacity change from 0 to 2048 [ 284.893141][ T4327] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 284.914637][ T4327] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.917480][ T2202] EXT4-fs (loop5): unmounting filesystem. [ 284.945267][ T4329] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 284.976943][ T4335] loop0: detected capacity change from 0 to 2048 [ 284.983601][ T4337] loop5: detected capacity change from 0 to 1024 [ 284.993544][ T4329] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 285.012346][ T4329] EXT4-fs (loop2): Remounting filesystem read-only [ 285.025157][ T4337] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 285.050601][ T4337] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 2: comm syz.5.1122: lblock 2 mapped to illegal pblock 2 (length 1) [ 285.070852][ T4335] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 285.079567][ T4337] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 285.088778][ T4337] EXT4-fs error (device loop5): __ext4_get_inode_loc:4522: comm syz.5.1122: Invalid inode table block 1 in block_group 0 [ 285.102328][ T4337] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 285.112280][ T4337] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.1122: mark_inode_dirty error [ 285.131538][ T4335] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 285.146177][ T4337] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 285.149075][ T287] EXT4-fs (loop2): unmounting filesystem. [ 285.155088][ T4337] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.1122: Failed to acquire dquot type 0 [ 285.172384][ T4335] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 60 with error 28 [ 285.185092][ T4337] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 285.194656][ T290] EXT4-fs (loop3): unmounting filesystem. [ 285.195913][ T4335] EXT4-fs (loop0): This should not happen!! Data will be lost [ 285.195913][ T4335] [ 285.210661][ T4337] EXT4-fs error (device loop5): ext4_evict_inode:281: inode #11: comm syz.5.1122: mark_inode_dirty error [ 285.221999][ T4335] EXT4-fs (loop0): Total free blocks count 0 [ 285.224573][ T4337] EXT4-fs warning (device loop5): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 285.238752][ T4337] EXT4-fs (loop5): 1 orphan inode deleted [ 285.239588][ T4335] EXT4-fs (loop0): Free/Dirty block details [ 285.253746][ T4337] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 285.270069][ T326] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 285.309663][ T4335] EXT4-fs (loop0): free_blocks=4096 [ 285.321038][ T326] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 285.322395][ T4335] EXT4-fs (loop0): dirty_blocks=64 [ 285.335497][ T4337] ext4: Unknown parameter 'cgroup2' [ 285.341045][ T326] EXT4-fs error (device loop5): ext4_release_dquot:6864: comm kworker/u4:4: Failed to release dquot type 0 [ 285.360349][ T4335] EXT4-fs (loop0): Block reservation details [ 285.366869][ T4335] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 285.379484][ T2202] EXT4-fs (loop5): unmounting filesystem. [ 285.388750][ T2202] EXT4-fs error (device loop5): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 285.403801][ T2202] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 285.420297][ T4334] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 285.461844][ T2202] EXT4-fs error (device loop5): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 285.514206][ T4355] loop3: detected capacity change from 0 to 256 [ 285.535062][ T4355] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 285.548861][ T4355] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 285.586494][ T4355] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 285.610303][ T4361] loop2: detected capacity change from 0 to 16 [ 285.677695][ T4361] erofs: (device loop2): mounted with root inode @ nid 36. [ 285.753139][ T4350] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 285.763144][ T4350] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 285.773135][ T4350] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 285.782906][ T4350] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 285.792902][ T4350] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 285.801270][ T4350] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 285.812691][ T4350] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 285.822495][ T4350] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 285.832513][ T4350] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 285.842288][ T4350] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 285.852347][ T4350] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 286.318242][ T4371] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 286.393463][ T28] audit: type=1400 audit(1794949399.784:358): avc: denied { map } for pid=4370 comm="syz.3.1133" path="/240/file1/file1" dev="loop3" ino=1048626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 286.981673][ T2130] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 287.172742][ T2130] usb 5-1: config 1 has an invalid interface number: 110 but max is 0 [ 287.181011][ T2130] usb 5-1: config 1 has no interface number 0 [ 287.211718][ T2130] usb 5-1: config 1 interface 110 altsetting 5 endpoint 0x5 has invalid maxpacket 1024, setting to 8 [ 287.232864][ T2130] usb 5-1: config 1 interface 110 altsetting 5 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 287.261693][ T2130] usb 5-1: config 1 interface 110 has no altsetting 0 [ 287.280137][ T4382] EXT4-fs: Ignoring removed oldalloc option [ 287.281167][ T2130] usb 5-1: string descriptor 0 read error: -22 [ 287.297103][ T2130] usb 5-1: New USB device found, idVendor=06cd, idProduct=011b, bcdDevice=f3.96 [ 287.306476][ T2130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.309018][ T4382] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 287.323891][ T4379] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 287.453846][ T287] EXT4-fs (loop2): unmounting filesystem. [ 287.578375][ T4393] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 287.639601][ T28] audit: type=1400 audit(1794949401.024:359): avc: denied { create } for pid=4378 comm="syz.4.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 287.665508][ T2130] usb 5-1: USB disconnect, device number 21 [ 287.692005][ T4393] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.1138: lblock 2 mapped to illegal pblock 2 (length 1) [ 287.733881][ T4393] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 287.742331][ T4393] EXT4-fs error (device loop2): __ext4_get_inode_loc:4522: comm syz.2.1138: Invalid inode table block 1 in block_group 0 [ 287.757065][ T4393] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 287.768339][ T4393] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.1138: mark_inode_dirty error [ 287.779971][ T4393] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 287.788829][ T4393] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.1138: Failed to acquire dquot type 0 [ 287.807807][ T4393] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 287.817675][ T4393] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.1138: mark_inode_dirty error [ 287.832419][ T4393] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 287.843039][ T4393] EXT4-fs (loop2): 1 orphan inode deleted [ 287.848815][ T4393] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 287.857911][ T4402] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 287.871768][ T326] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 287.880708][ T4393] ext4: Unknown parameter 'cgroup2' [ 287.892259][ T326] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 287.900920][ T326] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:4: Failed to release dquot type 0 [ 287.914351][ T4402] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 287.915378][ T287] EXT4-fs (loop2): unmounting filesystem. [ 287.926756][ T4402] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 287.939542][ T287] EXT4-fs error (device loop2): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 287.952702][ T287] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 287.962481][ T287] EXT4-fs error (device loop2): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 287.979467][ T290] EXT4-fs (loop3): unmounting filesystem. [ 288.007157][ T4408] using random self ethernet address [ 288.015396][ T4408] using random host ethernet address [ 288.046237][ T4412] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 288.054719][ T4412] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1146: invalid indirect mapped block 8 (level 2) [ 288.069586][ T4412] EXT4-fs (loop3): 1 truncate cleaned up [ 288.075457][ T2130] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 288.075477][ T4412] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 288.180081][ T28] audit: type=1400 audit(1794949401.564:360): avc: denied { ioctl } for pid=4409 comm="syz.2.1145" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 288.248945][ T4412] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 288.313381][ T2130] usb 6-1: not running at top speed; connect to a high speed hub [ 288.372939][ T2130] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.492992][ T2130] usb 6-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 288.502448][ T2130] usb 6-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 288.503678][ T290] EXT4-fs (loop3): unmounting filesystem. [ 288.510966][ T2130] usb 6-1: Product: syz [ 288.521328][ T2130] usb 6-1: Manufacturer: syz [ 288.541820][ T2130] usb 6-1: Found UVC 1.00 device syz (225a:e1d4) [ 288.603041][ T4426] SELinux: failed to load policy [ 288.660322][ T4436] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1156'. [ 288.673118][ T4436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1156'. [ 288.697769][ T4436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1156'. [ 288.715211][ T4436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1156'. [ 288.732775][ T2130] usb 6-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 288.757165][ T2130] uvcvideo 6-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 288.788127][ T4439] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1158'. [ 288.796660][ T2130] uvcvideo 6-1:1.1: Failed to initialize the device (-5). [ 288.828180][ T2130] usb 6-1: USB disconnect, device number 15 [ 288.880422][ T4447] set_capacity_and_notify: 5 callbacks suppressed [ 288.880444][ T4447] loop3: detected capacity change from 0 to 1024 [ 288.922674][ T4447] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 288.935359][ T4447] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 288.988788][ T4457] loop4: detected capacity change from 0 to 512 [ 288.995591][ T4457] EXT4-fs: Ignoring removed nobh option [ 289.008660][ T4457] EXT4-fs (loop4): orphan cleanup on readonly fs [ 289.015569][ T4457] EXT4-fs warning (device loop4): ext4_xattr_inode_get:492: inode #11: comm syz.4.1159: ea_inode file size=1535 entry size=6 [ 289.028758][ T4457] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 289.042654][ T4457] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #15: comm syz.4.1159: corrupted inode contents [ 289.058164][ T4457] EXT4-fs (loop4): Remounting filesystem read-only [ 289.066739][ T4457] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #15: comm syz.4.1159: mark_inode_dirty error [ 289.078468][ T4457] EXT4-fs (loop4): Remounting filesystem read-only [ 289.085311][ T4457] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #15: comm syz.4.1159: corrupted inode contents [ 289.097995][ T4457] EXT4-fs (loop4): Remounting filesystem read-only [ 289.104718][ T4457] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2947: inode #15: comm syz.4.1159: mark_inode_dirty error [ 289.122688][ T4457] EXT4-fs (loop4): Remounting filesystem read-only [ 289.129309][ T4457] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2950: inode #15: comm syz.4.1159: mark inode dirty (error -117) [ 289.143426][ T4457] EXT4-fs (loop4): Remounting filesystem read-only [ 289.150032][ T4457] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 289.159369][ T4457] EXT4-fs (loop4): 1 orphan inode deleted [ 289.166119][ T4457] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 289.197403][ T4465] loop3: detected capacity change from 0 to 128 [ 289.217012][ T4465] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 289.233150][ T4465] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.371793][ T2186] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 289.584967][ T2186] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 289.607853][ T2186] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 289.641672][ T2186] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 289.654210][ T2186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.666134][ T2186] usb 3-1: config 0 descriptor?? [ 289.682983][ T288] EXT4-fs (loop4): unmounting filesystem. [ 289.743657][ T4491] loop4: detected capacity change from 0 to 512 [ 289.767537][ T4491] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 289.776977][ T4491] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.804893][ T288] EXT4-fs (loop4): unmounting filesystem. [ 289.815069][ T290] EXT4-fs (loop3): unmounting filesystem. [ 289.851388][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 289.851403][ T28] audit: type=1400 audit(1794949403.234:366): avc: denied { setopt } for pid=4496 comm="syz.4.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 289.879871][ T28] audit: type=1400 audit(1794949403.274:367): avc: denied { accept } for pid=4496 comm="syz.4.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 289.883424][ T4499] loop3: detected capacity change from 0 to 4096 [ 289.912856][ T4499] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 289.925370][ T4499] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 289.970012][ T290] EXT4-fs (loop3): unmounting filesystem. [ 290.171973][ T2186] hid (null): bogus close delimiter [ 290.178505][ T2186] magicmouse 0003:05AC:0324.0008: unknown main item tag 0x0 [ 290.185921][ T2186] magicmouse 0003:05AC:0324.0008: unknown main item tag 0x0 [ 290.193332][ T2186] magicmouse 0003:05AC:0324.0008: unknown main item tag 0x0 [ 290.200691][ T2186] magicmouse 0003:05AC:0324.0008: unknown main item tag 0x0 [ 290.208087][ T2186] magicmouse 0003:05AC:0324.0008: unknown main item tag 0x0 [ 290.215539][ T2186] magicmouse 0003:05AC:0324.0008: unknown main item tag 0x0 [ 290.227275][ T2186] magicmouse 0003:05AC:0324.0008: unknown main item tag 0x0 [ 290.234882][ T2186] magicmouse 0003:05AC:0324.0008: unexpected long global item [ 290.249562][ T2186] magicmouse 0003:05AC:0324.0008: magicmouse hid parse failed [ 290.254763][ T4513] loop3: detected capacity change from 0 to 256 [ 290.257677][ T2186] magicmouse: probe of 0003:05AC:0324.0008 failed with error -22 [ 290.274901][ T4513] FAT-fs (loop3): bogus logical sector size 0 [ 290.281913][ T4513] FAT-fs (loop3): Can't find a valid FAT filesystem [ 290.311085][ T2186] usb 3-1: USB disconnect, device number 19 [ 290.439774][ T4518] picdev_read: 18 callbacks suppressed [ 290.439787][ T4518] kvm: pic: non byte read [ 290.449966][ T4518] kvm: pic: non byte read [ 290.454668][ T4518] kvm: pic: non byte read [ 290.459177][ T4518] kvm: pic: non byte read [ 290.464193][ T4518] kvm: pic: non byte read [ 290.468895][ T4518] kvm: pic: non byte read [ 290.473804][ T4518] kvm: pic: non byte read [ 290.478349][ T4518] kvm: pic: non byte read [ 290.482997][ T4518] kvm: pic: non byte read [ 290.487638][ T4518] kvm: pic: non byte read [ 290.546029][ T4521] loop3: detected capacity change from 0 to 512 [ 290.556670][ T4521] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.1189: iget: bad i_size value: 38620345925642 [ 290.569744][ T4521] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1189: couldn't read orphan inode 15 (err -117) [ 290.582034][ T4521] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 290.596821][ T4521] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1189: bg 0: block 5: invalid block bitmap [ 290.609554][ T4521] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 290.622748][ T4521] EXT4-fs (loop3): This should not happen!! Data will be lost [ 290.622748][ T4521] [ 290.633597][ T4521] EXT4-fs (loop3): Total free blocks count 0 [ 290.639639][ T4521] EXT4-fs (loop3): Free/Dirty block details [ 290.645789][ T4521] EXT4-fs (loop3): free_blocks=0 [ 290.650756][ T4521] EXT4-fs (loop3): dirty_blocks=65 [ 290.655970][ T4521] EXT4-fs (loop3): Block reservation details [ 290.662134][ T4521] EXT4-fs (loop3): i_reserved_data_blocks=65 [ 290.668828][ T326] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 319 with max blocks 1 with error 28 [ 290.837764][ T4525] loop2: detected capacity change from 0 to 256 [ 290.854244][ T4525] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 292.044527][ T4550] FAULT_INJECTION: forcing a failure. [ 292.044527][ T4550] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 292.078061][ T4550] CPU: 0 PID: 4550 Comm: syz.3.1199 Not tainted syzkaller #0 [ 292.085504][ T4550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 292.095595][ T4550] Call Trace: [ 292.098901][ T4550] [ 292.101861][ T4550] __dump_stack+0x21/0x24 [ 292.106233][ T4550] dump_stack_lvl+0x110/0x170 [ 292.110948][ T4550] ? __cfi_dump_stack_lvl+0x8/0x8 [ 292.116019][ T4550] ? __cfi_sched_clock_cpu+0x10/0x10 [ 292.121340][ T4550] dump_stack+0x15/0x24 [ 292.125539][ T4550] should_fail_ex+0x3bf/0x510 [ 292.130255][ T4550] should_fail_alloc_page+0x61/0x90 [ 292.135498][ T4550] prepare_alloc_pages+0x131/0x570 [ 292.140653][ T4550] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 292.145896][ T4550] __alloc_pages+0x15b/0x610 [ 292.150528][ T4550] ? __cfi___alloc_pages+0x10/0x10 [ 292.155690][ T4550] ? mas_state_walk+0x7ab/0xa80 [ 292.160582][ T4550] __folio_alloc+0x12/0x40 [ 292.165040][ T4550] handle_mm_fault+0x1989/0x26b0 [ 292.170006][ T4550] ? futex_unqueue+0x132/0x160 [ 292.174805][ T4550] ? __cfi_handle_mm_fault+0x10/0x10 [ 292.180123][ T4550] ? down_read_trylock+0x27f/0x660 [ 292.185277][ T4550] ? lock_mm_and_find_vma+0x9e/0x320 [ 292.190587][ T4550] ? do_user_addr_fault+0x2eb/0x1030 [ 292.195915][ T4550] do_user_addr_fault+0x61e/0x1030 [ 292.201064][ T4550] exc_page_fault+0x51/0xb0 [ 292.205600][ T4550] asm_exc_page_fault+0x27/0x30 [ 292.210481][ T4550] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 292.216246][ T4550] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 292.235892][ T4550] RSP: 0018:ffffc90008cefe60 EFLAGS: 00050297 [ 292.242008][ T4550] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 00002000000010c0 [ 292.250009][ T4550] RDX: ffff888118671440 RSI: 0000000000000005 RDI: 0000000000000000 [ 292.258037][ T4550] RBP: ffffc90008cefec8 R08: ffff888138a9e8a7 R09: 1ffff11027153d14 [ 292.266042][ T4550] R10: dffffc0000000000 R11: ffffed1027153d15 R12: 0000000000000002 [ 292.274039][ T4550] R13: 00002000000010c0 R14: 0000000000000004 R15: 0000000000000000 [ 292.282040][ T4550] ? __sys_socketpair+0xac/0x5b0 [ 292.287021][ T4550] ? fpregs_restore_userregs+0x128/0x260 [ 292.292691][ T4550] __x64_sys_socketpair+0x9b/0xb0 [ 292.297763][ T4550] x64_sys_call+0x6e/0x9a0 [ 292.302217][ T4550] do_syscall_64+0x4c/0xa0 [ 292.306683][ T4550] ? clear_bhb_loop+0x30/0x80 [ 292.311399][ T4550] ? clear_bhb_loop+0x30/0x80 [ 292.316108][ T4550] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.322036][ T4550] RIP: 0033:0x7f3e3f99e159 [ 292.326474][ T4550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.346197][ T4550] RSP: 002b:00007f3e4090f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 292.354659][ T4550] RAX: ffffffffffffffda RBX: 00007f3e3fc25fa0 RCX: 00007f3e3f99e159 [ 292.362668][ T4550] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 292.370679][ T4550] RBP: 00007f3e3fa3503b R08: 0000000000000000 R09: 0000000000000000 [ 292.378679][ T4550] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000000 [ 292.386673][ T4550] R13: 00007f3e3fc26038 R14: 00007f3e3fc25fa0 R15: 00007ffde54c7448 [ 292.394677][ T4550] [ 292.789321][ T4570] loop4: detected capacity change from 0 to 8192 [ 292.892091][ T4577] futex_wake_op: syz.4.1210 tries to shift op by 144; fix this program [ 292.961867][ T4577] futex_wake_op: syz.4.1210 tries to shift op by 144; fix this program [ 293.121660][ T1781] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 293.333502][ T1781] usb 3-1: config 0 has no interfaces? [ 293.339062][ T1781] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.348418][ T1781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.361697][ T3870] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 293.369671][ T1781] usb 3-1: config 0 descriptor?? [ 293.552934][ T3870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.564474][ T3870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.574556][ T3870] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.644577][ T28] audit: type=1400 audit(1794949407.034:368): avc: denied { setopt } for pid=4600 comm="syz.0.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 294.361793][ T3870] usb 5-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 294.371054][ T3870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.381144][ T1781] usb 3-1: USB disconnect, device number 20 [ 294.387686][ T3870] usb 5-1: config 0 descriptor?? [ 294.505283][ T28] audit: type=1400 audit(1794949407.894:369): avc: denied { bind } for pid=4611 comm="syz.2.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 294.550222][ T4612] loop2: detected capacity change from 0 to 8192 [ 294.559036][ T28] audit: type=1400 audit(1794949407.894:370): avc: denied { listen } for pid=4611 comm="syz.2.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 295.069621][ T3870] thrustmaster 0003:044F:B324.0009: unknown main item tag 0x0 [ 295.078314][ T4635] loop3: detected capacity change from 0 to 16 [ 295.085107][ T3870] thrustmaster 0003:044F:B324.0009: unknown main item tag 0x0 [ 295.093552][ T4635] erofs: (device loop3): mounted with root inode @ nid 36. [ 295.103902][ T4635] syz.3.1232: attempt to access beyond end of device [ 295.103902][ T4635] loop3: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 295.117594][ T4635] syz.3.1232: attempt to access beyond end of device [ 295.117594][ T4635] loop3: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 295.132787][ T3870] thrustmaster 0003:044F:B324.0009: hidraw0: USB HID v0.00 Device [HID 044f:b324] on usb-dummy_hcd.4-1/input0 [ 295.144670][ T3870] thrustmaster 0003:044F:B324.0009: no inputs found [ 295.170236][ T4640] loop2: detected capacity change from 0 to 512 [ 295.189164][ T4640] EXT4-fs (loop2): Test dummy encryption mode enabled [ 295.199031][ T4640] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1233: inode has both inline data and extents flags [ 295.213324][ T4640] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1233: couldn't read orphan inode 15 (err -117) [ 295.225462][ T4640] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 295.238354][ T39] usb 5-1: USB disconnect, device number 22 [ 295.244699][ T4640] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 295.253069][ T28] audit: type=1400 audit(1794949408.644:371): avc: denied { append } for pid=4638 comm="syz.2.1233" path="/225/file1/file1" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 295.279835][ T287] EXT4-fs (loop2): unmounting filesystem. [ 295.303527][ T4647] SELinux: policydb version 1180827720 does not match my version range 15-33 [ 295.312665][ T4647] SELinux: failed to load policy [ 295.517190][ T4653] loop5: detected capacity change from 0 to 2048 [ 295.552408][ T4658] ./dev/sda1: Can't open blockdev [ 295.611890][ T4653] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 295.617185][ T4653] loop5: partition table partially beyond EOD, truncated [ 295.624760][ T4653] loop5: p1 start 3405774849 is beyond EOD, truncated [ 295.631566][ T4653] loop5: p2 start 53543428 is beyond EOD, truncated [ 295.638208][ T4653] loop5: p3 start 4284289 is beyond EOD, truncated [ 295.646735][ T4653] loop5: p5 start 3405774849 is beyond EOD, truncated [ 295.653721][ T4653] loop5: p6 start 53543428 is beyond EOD, truncated [ 295.805696][ T4664] loop4: detected capacity change from 0 to 512 [ 295.854085][ T4664] EXT4-fs (loop4): bad s_min_extra_isize: 544 [ 296.001689][ T610] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 296.186659][ T4677] loop2: detected capacity change from 0 to 512 [ 296.193681][ T4677] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 296.201925][ T610] usb 6-1: Using ep0 maxpacket: 32 [ 296.210211][ T610] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 88, changing to 10 [ 296.210510][ T4677] EXT4-fs (loop2): 1 truncate cleaned up [ 296.227838][ T4677] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 296.233397][ T610] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9056, setting to 1024 [ 296.247533][ T610] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 296.256862][ T610] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.265858][ T610] usb 6-1: config 0 descriptor?? [ 296.273770][ T610] hub 6-1:0.0: USB hub found [ 296.311675][ T6] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 296.472089][ T610] hub 6-1:0.0: 26 ports detected [ 296.477341][ T610] hub 6-1:0.0: insufficient power available to use all downstream ports [ 296.507023][ T6] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 296.514848][ T6] usb 4-1: can't read configurations, error -71 [ 296.723982][ T28] audit: type=1326 audit(1794949410.114:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.5.1238" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f20b539e159 code=0x0 [ 297.245231][ T28] audit: type=1400 audit(1794949410.484:373): avc: denied { watch watch_reads } for pid=4686 comm="syz.3.1250" path="/276" dev="tmpfs" ino=1512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 297.329356][ T287] EXT4-fs (loop2): unmounting filesystem. [ 297.502666][ T610] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 297.509193][ T610] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 297.518599][ T610] usbhid 6-1:0.0: can't add hid device: -32 [ 297.524880][ T610] usbhid: probe of 6-1:0.0 failed with error -32 [ 298.491774][ T610] usb 6-1: USB disconnect, device number 16 [ 298.752056][ T4715] loop4: detected capacity change from 0 to 1024 [ 298.867950][ T4715] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.1259: lblock 2 mapped to illegal pblock 2 (length 1) [ 298.887622][ T4715] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 298.897157][ T4715] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.1259: lblock 0 mapped to illegal pblock 48 (length 1) [ 298.912500][ T4715] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 298.921449][ T4715] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.1259: Failed to acquire dquot type 0 [ 298.934288][ T4715] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 298.945085][ T4715] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.1259: mark_inode_dirty error [ 298.956838][ T6] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 298.965838][ T4715] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 298.977192][ T4715] EXT4-fs (loop4): 1 orphan inode deleted [ 298.983656][ T4715] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 298.992940][ T43] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 299.054435][ T43] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 299.089032][ T43] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:2: Failed to release dquot type 0 [ 299.115927][ T4715] netlink: 'syz.4.1259': attribute type 1 has an invalid length. [ 299.124523][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1259'. [ 299.185575][ T6] usb 4-1: New USB device found, idVendor=17cc, idProduct=1940, bcdDevice= 0.40 [ 299.195146][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.204001][ T6] usb 4-1: Product: syz [ 299.208561][ T6] usb 4-1: Manufacturer: 싋ꕿ껠ꍭᵌ紘讜哯佇㡍蚘˵릙딮␑髷旘仜짨 [ 299.219058][ T6] usb 4-1: SerialNumber: syz [ 299.408250][ T4722] netlink: 'syz.2.1263': attribute type 4 has an invalid length. [ 299.456340][ T6] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 299.814306][ T4736] loop5: detected capacity change from 0 to 2048 [ 299.823538][ T288] EXT4-fs (loop4): unmounting filesystem. [ 299.836862][ T288] EXT4-fs error (device loop4): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 299.850739][ T288] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 299.860970][ T288] EXT4-fs error (device loop4): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 299.874885][ T4736] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 299.884370][ T4736] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.908682][ T4736] fs-verity: sha256 using implementation "sha256-avx2" [ 300.042351][ T6] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 300.201484][ T6] usb 4-1: USB disconnect, device number 25 [ 300.246178][ T404] udevd[404]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 300.637223][ T4775] loop3: detected capacity change from 0 to 1024 [ 300.664290][ T4775] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.1280: lblock 2 mapped to illegal pblock 2 (length 1) [ 300.685775][ T4775] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 300.698177][ T4775] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.1280: lblock 0 mapped to illegal pblock 48 (length 1) [ 300.723901][ T4775] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 300.734895][ T4775] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.1280: Failed to acquire dquot type 0 [ 300.747354][ T4736] fs-verity (loop5, inode 13): Error -28 writing Merkle tree block 22912 [ 300.756029][ T4736] fs-verity (loop5, inode 13): Error -28 building Merkle tree [ 300.756079][ T4775] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 300.775992][ T4775] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.1280: mark_inode_dirty error [ 300.794723][ T4775] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 300.809000][ T4775] EXT4-fs (loop3): 1 orphan inode deleted [ 300.816110][ T4775] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 300.831931][ T326] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 300.836969][ T4775] netlink: 'syz.3.1280': attribute type 1 has an invalid length. [ 300.853782][ T326] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 300.853858][ T326] EXT4-fs error (device loop3): ext4_release_dquot:6864: comm kworker/u4:4: Failed to release dquot type 0 [ 300.874136][ T4775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 300.932008][ T2202] EXT4-fs (loop5): unmounting filesystem. [ 301.428279][ T290] EXT4-fs (loop3): unmounting filesystem. [ 301.439794][ T290] EXT4-fs error (device loop3): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 301.462619][ T290] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 301.480926][ T290] EXT4-fs error (device loop3): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 301.926303][ T4830] loop4: detected capacity change from 0 to 16 [ 301.933229][ T4830] erofs: (device loop4): mounted with root inode @ nid 36. [ 302.046953][ T28] audit: type=1400 audit(1794949415.434:374): avc: denied { accept } for pid=4833 comm="syz.5.1305" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 302.706087][ T28] audit: type=1400 audit(1794949416.094:375): avc: denied { lock } for pid=4859 comm="syz.4.1314" path="socket:[33596]" dev="sockfs" ino=33596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 302.751074][ T4863] loop3: detected capacity change from 0 to 1024 [ 302.775031][ T4866] loop2: detected capacity change from 0 to 512 [ 302.811094][ T4863] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 302.823391][ T4866] EXT4-fs (loop2): bad s_min_extra_isize: 544 [ 302.854639][ T443] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 302.893006][ T4863] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #3: block 1: comm syz.3.1315: lblock 1 mapped to illegal pblock 1 (length 1) [ 302.941928][ T4863] Quota error (device loop3): write_blk: dquota write failed [ 302.949380][ T4863] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 302.971769][ T4863] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.1315: Failed to acquire dquot type 0 [ 303.031302][ T4863] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.1315: Freeing blocks not in datazone - block = 0, count = 4096 [ 303.082172][ T4863] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1315: Invalid inode bitmap blk 0 in block_group 0 [ 303.111715][ T8] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 303.131798][ T8] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 303.144537][ T4863] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 303.153818][ T8] EXT4-fs error (device loop3): ext4_release_dquot:6864: comm kworker/u4:0: Failed to release dquot type 0 [ 303.181036][ T4863] EXT4-fs (loop3): 1 orphan inode deleted [ 303.193085][ T4863] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 303.241505][ T290] EXT4-fs (loop3): unmounting filesystem. [ 304.026504][ T28] audit: type=1400 audit(1794949417.414:376): avc: denied { listen } for pid=4943 comm="syz.2.1350" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 304.120778][ T28] audit: type=1400 audit(1794949417.504:377): avc: denied { associate } for pid=4951 comm="syz.2.1352" name="753" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 304.147270][ T4954] netlink: 'syz.5.1349': attribute type 4 has an invalid length. [ 304.397216][ T4972] xt_hashlimit: size too large, truncated to 1048576 [ 305.191765][ T2130] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 305.231706][ T1781] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 305.301680][ T610] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 305.382780][ T2130] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.401631][ T2130] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.411538][ T2130] usb 6-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.431725][ T39] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 305.440806][ T2130] usb 6-1: config 0 interface 0 has no altsetting 0 [ 305.447107][ T1781] usb 5-1: config 127 has an invalid interface number: 57 but max is 0 [ 305.448194][ T2130] usb 6-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 305.456171][ T1781] usb 5-1: config 127 has no interface number 0 [ 305.481254][ T1781] usb 5-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 305.481756][ T2130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.501529][ T2130] usb 6-1: config 0 descriptor?? [ 305.506999][ T610] usb 4-1: unable to get BOS descriptor or descriptor too short [ 305.511373][ T1781] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 305.524264][ T610] usb 4-1: not running at top speed; connect to a high speed hub [ 305.532086][ T1781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.532113][ T1781] usb 5-1: Product: syz [ 305.532129][ T1781] usb 5-1: Manufacturer: syz [ 305.549285][ T1781] usb 5-1: SerialNumber: syz [ 305.554554][ T610] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 305.563861][ T5011] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 305.571628][ T610] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 305.581051][ T610] usb 4-1: config 14 has no interface number 0 [ 305.587568][ T610] usb 4-1: config 14 has no interface number 1 [ 305.594124][ T610] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 305.605181][ T610] usb 4-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 305.616218][ T610] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.631213][ T610] usb 4-1: config 14 interface 57 has no altsetting 0 [ 305.638283][ T610] usb 4-1: config 14 interface 228 has no altsetting 0 [ 305.645475][ T39] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.656516][ T39] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.668200][ T39] usb 3-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 305.677576][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.685870][ T610] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 305.695475][ T610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.711995][ T610] usb 4-1: Product: syz [ 305.717306][ T610] usb 4-1: Manufacturer: syz [ 305.722617][ T610] usb 4-1: SerialNumber: syz [ 305.974593][ T5011] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 306.120773][ T39] hid-generic 0003:8086:0000.000B: unknown main item tag 0x5 [ 306.128745][ T2130] sony 0003:054C:042F.000A: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 306.140082][ T39] hid-generic 0003:8086:0000.000B: unknown main item tag 0x0 [ 306.147930][ T39] hid-generic 0003:8086:0000.000B: unknown main item tag 0x0 [ 306.155647][ T2130] sony 0003:054C:042F.000A: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.5-1/input0 [ 306.166933][ T39] hid-generic 0003:8086:0000.000B: unknown main item tag 0x0 [ 306.174390][ T2130] sony 0003:054C:042F.000A: failed to claim input [ 306.181007][ T39] hid-generic 0003:8086:0000.000B: unknown main item tag 0x0 [ 306.188769][ T1781] asix 5-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 306.194915][ T2130] usb 6-1: USB disconnect, device number 17 [ 306.204589][ T39] hid-generic 0003:8086:0000.000B: unknown main item tag 0x0 [ 306.213198][ T39] hid-generic 0003:8086:0000.000B: unknown main item tag 0x0 [ 306.220651][ T39] hid-generic 0003:8086:0000.000B: unknown main item tag 0x0 [ 306.228502][ T39] hid-generic 0003:8086:0000.000B: unknown main item tag 0x0 [ 306.236979][ T39] hid-generic 0003:8086:0000.000B: unknown main item tag 0x0 [ 306.244545][ T39] hid-generic 0003:8086:0000.000B: unknown main item tag 0x0 [ 306.252130][ T39] hid-generic 0003:8086:0000.000B: unknown main item tag 0x0 [ 306.259575][ T39] hid-generic 0003:8086:0000.000B: unknown main item tag 0x0 [ 306.267282][ T39] hid-generic 0003:8086:0000.000B: unknown main item tag 0x0 [ 306.274850][ T39] hid-generic 0003:8086:0000.000B: unknown main item tag 0x0 [ 306.282525][ T39] hid-generic 0003:8086:0000.000B: unknown main item tag 0x0 [ 306.289821][ T5016] fido_id[5016]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 306.289994][ T39] hid-generic 0003:8086:0000.000B: unknown main item tag 0x0 [ 306.311788][ T39] hid-generic 0003:8086:0000.000B: unknown main item tag 0x0 [ 306.319231][ T39] hid-generic 0003:8086:0000.000B: unknown main item tag 0x0 [ 306.321026][ T5015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.327710][ T39] hid-generic 0003:8086:0000.000B: unknown main item tag 0x0 [ 306.335733][ T5015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.360528][ T39] hid-generic 0003:8086:0000.000B: hiddev96,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.2-1/input0 [ 306.374927][ T39] usb 3-1: USB disconnect, device number 21 [ 306.402484][ T5011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.408110][ T5017] fido_id[5017]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 306.412276][ T5011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.635216][ T5011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.643841][ T5011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.778326][ T5019] kvm [5018]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000000 [ 306.790386][ T5019] kvm [5018]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 306.802751][ T5019] kvm [5018]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffff000000000000 [ 307.151668][ T6] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 307.225277][ T1781] asix 5-1:127.57 eth1: register 'asix' at usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet, 4e:bc:5c:fb:74:3c [ 307.245592][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 307.245610][ T28] audit: type=1400 audit(1794949420.634:379): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 307.265152][ T1781] usb 5-1: USB disconnect, device number 23 [ 307.287191][ T1781] asix 5-1:127.57 eth1: unregister 'asix' usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet [ 307.301645][ T28] audit: type=1400 audit(1794949420.644:380): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.327589][ T28] audit: type=1400 audit(1794949420.644:381): avc: denied { read } for pid=142 comm="dhcpcd" name="n15" dev="tmpfs" ino=11610 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 307.349757][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 307.356889][ T28] audit: type=1400 audit(1794949420.644:382): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=11610 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 307.380805][ T28] audit: type=1400 audit(1794949420.644:383): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=11610 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 307.407209][ T6] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 307.419968][ T6] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 307.431156][ T28] audit: type=1400 audit(1794949420.814:384): avc: denied { read } for pid=5028 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.454622][ T6] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 307.465365][ T6] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 307.477027][ T28] audit: type=1400 audit(1794949420.814:385): avc: denied { open } for pid=5028 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.508864][ T6] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 307.520602][ T6] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.533934][ T28] audit: type=1400 audit(1794949420.814:386): avc: denied { getattr } for pid=5028 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.559744][ T6] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 307.569223][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.596020][ T28] audit: type=1400 audit(1794949420.984:387): avc: denied { write } for pid=5027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=492 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.619115][ T28] audit: type=1400 audit(1794949420.984:388): avc: denied { add_name } for pid=5027 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.971675][ T1781] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 308.081661][ T6] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 308.153407][ T1781] usb 6-1: unable to get BOS descriptor or descriptor too short [ 308.161533][ T1781] usb 6-1: not running at top speed; connect to a high speed hub [ 308.171858][ T1781] usb 6-1: New USB device found, idVendor=050d, idProduct=0103, bcdDevice=fc.25 [ 308.180956][ T1781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.189026][ T1781] usb 6-1: Product: syz [ 308.193243][ T1781] usb 6-1: Manufacturer: syz [ 308.197950][ T1781] usb 6-1: SerialNumber: syz [ 308.261657][ T6] usb 5-1: Using ep0 maxpacket: 8 [ 308.267956][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.278160][ T6] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 308.290378][ T6] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 308.299536][ T6] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 308.307683][ T6] usb 5-1: Product: syz [ 308.311910][ T6] usb 5-1: Manufacturer: syz [ 308.316563][ T6] usb 5-1: SerialNumber: syz [ 308.322254][ T6] usb 5-1: config 0 descriptor?? [ 308.405376][ T5045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.414032][ T5045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.422632][ T5045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.431122][ T5045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.439618][ T5045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.448158][ T5045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.456666][ T5045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.465328][ T5045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.474081][ T5045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.482733][ T5045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.494199][ T1781] usb 6-1: USB disconnect, device number 18 [ 308.530343][ T39] usb 5-1: USB disconnect, device number 24 [ 308.687545][ T6] usb 4-1: USB disconnect, device number 26 [ 309.101670][ T6] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 309.271663][ T308] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 309.281746][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 309.288246][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 309.296688][ T6] usb 4-1: config 8 has an invalid interface number: 43 but max is 1 [ 309.304796][ T6] usb 4-1: config 8 has an invalid interface number: 35 but max is 1 [ 309.312944][ T6] usb 4-1: config 8 has no interface number 0 [ 309.319038][ T6] usb 4-1: config 8 has no interface number 1 [ 309.321747][ T39] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 309.325311][ T6] usb 4-1: config 8 interface 43 altsetting 17 has an invalid endpoint with address 0xE5, skipping [ 309.343490][ T6] usb 4-1: config 8 interface 43 altsetting 17 bulk endpoint 0x4 has invalid maxpacket 8 [ 309.353502][ T6] usb 4-1: config 8 interface 43 has no altsetting 0 [ 309.360217][ T6] usb 4-1: config 8 interface 35 has no altsetting 0 [ 309.368287][ T6] usb 4-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 309.377384][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.385426][ T6] usb 4-1: Product: syz [ 309.389612][ T6] usb 4-1: Manufacturer: syz [ 309.394332][ T6] usb 4-1: SerialNumber: syz [ 309.399916][ T5063] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 309.407236][ T5063] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 309.452068][ T308] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 309.460535][ T308] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.469491][ T308] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.480443][ T308] usb 6-1: config 0 interface 0 has no altsetting 0 [ 309.487815][ T308] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.496749][ T308] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.507663][ T308] usb 6-1: config 0 interface 0 has no altsetting 0 [ 309.515009][ T308] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.523934][ T308] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.533358][ T39] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 309.534962][ T308] usb 6-1: config 0 interface 0 has no altsetting 0 [ 309.545557][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 309.553054][ T308] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.561739][ T39] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 309.570380][ T308] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.582874][ T39] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 309.590652][ T308] usb 6-1: config 0 interface 0 has no altsetting 0 [ 309.600139][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.608569][ T308] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.614646][ T39] usb 5-1: Product: syz [ 309.624218][ T308] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.636782][ T39] usb 5-1: Manufacturer: syz [ 309.641348][ T308] usb 6-1: config 0 interface 0 has no altsetting 0 [ 309.642803][ T6] ums-alauda 4-1:8.43: USB Mass Storage device detected [ 309.643755][ T39] usb 5-1: SerialNumber: syz [ 309.659422][ T39] usb 5-1: config 0 descriptor?? [ 309.666672][ T5067] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 309.670927][ T308] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.683737][ T308] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.694845][ T308] usb 6-1: config 0 interface 0 has no altsetting 0 [ 309.702168][ T308] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.711087][ T308] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.722141][ T308] usb 6-1: config 0 interface 0 has no altsetting 0 [ 309.729393][ T308] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.739748][ T308] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.750761][ T308] usb 6-1: config 0 interface 0 has no altsetting 0 [ 309.757638][ T6] hub 4-1:8.35: Invalid hub with more than one config or interface [ 309.765654][ T6] hub: probe of 4-1:8.35 failed with error -22 [ 309.772265][ T6] ums-alauda 4-1:8.35: USB Mass Storage device detected [ 309.780250][ T308] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 309.789531][ T308] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 309.797953][ T308] usb 6-1: Product: syz [ 309.802147][ T308] usb 6-1: Manufacturer: syz [ 309.806742][ T308] usb 6-1: SerialNumber: syz [ 309.812037][ T308] usb 6-1: config 0 descriptor?? [ 309.827160][ T6] usb 4-1: USB disconnect, device number 27 [ 309.881825][ T5067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.890515][ T5067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.897293][ T39] usb 3-1: USB disconnect, device number 22 [ 309.901976][ T5067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.919254][ T5067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.023289][ T610] usb 6-1: USB disconnect, device number 19 [ 310.131000][ T5067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.139635][ T5067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.148186][ T5067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.156782][ T5067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.169995][ T6] usb 5-1: USB disconnect, device number 25 [ 310.271690][ T39] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 310.452915][ T39] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 310.461814][ T308] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 310.464403][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 310.483994][ T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 310.493086][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.501745][ T39] usb 3-1: config 0 descriptor?? [ 310.507798][ T39] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 310.651664][ T308] usb 4-1: Using ep0 maxpacket: 8 [ 310.657898][ T308] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 310.666251][ T308] usb 4-1: config 179 has no interface number 0 [ 310.672594][ T308] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 310.683790][ T308] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 310.695127][ T308] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 310.706351][ T308] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 310.723568][ T308] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 310.737026][ T308] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 310.746159][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.755888][ T5077] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 310.821678][ T610] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 310.969520][ T308] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input15 [ 310.991657][ T2130] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 311.002833][ T610] usb 6-1: config 255 has an invalid interface number: 235 but max is 2 [ 311.011278][ T610] usb 6-1: config 255 has an invalid interface number: 97 but max is 2 [ 311.019615][ T610] usb 6-1: config 255 has an invalid interface descriptor of length 2, skipping [ 311.029015][ T610] usb 6-1: config 255 has an invalid interface number: 227 but max is 2 [ 311.037430][ T610] usb 6-1: config 255 has no interface number 0 [ 311.043734][ T610] usb 6-1: config 255 has no interface number 1 [ 311.050000][ T610] usb 6-1: config 255 has no interface number 2 [ 311.056310][ T610] usb 6-1: config 255 interface 235 altsetting 4 bulk endpoint 0xA has invalid maxpacket 16 [ 311.066455][ T610] usb 6-1: config 255 interface 97 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 311.077578][ T610] usb 6-1: config 255 interface 97 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 311.090778][ T610] usb 6-1: config 255 interface 235 has no altsetting 0 [ 311.097839][ T610] usb 6-1: config 255 interface 97 has no altsetting 0 [ 311.105034][ T610] usb 6-1: config 255 interface 227 has no altsetting 0 [ 311.124493][ T610] usb 6-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 311.133627][ T610] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.141746][ T610] usb 6-1: Manufacturer: 姿ꝿꔭṫ䣡 [ 311.147457][ T610] usb 6-1: SerialNumber: syz [ 311.162564][ T5081] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 311.170850][ T308] usb 4-1: USB disconnect, device number 28 [ 311.170887][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 311.174966][ T2130] usb 5-1: Using ep0 maxpacket: 8 [ 311.176844][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 311.189693][ T2130] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 311.198585][ T2130] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 311.209128][ T308] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 311.217937][ T2130] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 311.238027][ T2130] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 311.249364][ T2130] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 311.259517][ T2130] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.272674][ T2130] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 311.281746][ T2130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.371680][ T5081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.380201][ T5081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.388720][ T5081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.397324][ T5081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.409183][ T610] usb 6-1: bad CDC descriptors [ 311.420519][ T610] usb 6-1: USB disconnect, device number 20 [ 312.281652][ T610] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 312.461652][ T610] usb 6-1: Using ep0 maxpacket: 16 [ 312.468090][ T610] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.479050][ T610] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 312.488949][ T610] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 312.498655][ T610] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 312.512536][ T610] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.521777][ T610] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 312.534133][ T610] usb 6-1: SerialNumber: syz [ 312.554991][ T5095] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 312.562322][ T5095] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 312.569935][ T610] hub 6-1:1.0: bad descriptor, ignoring hub [ 312.575907][ T610] hub: probe of 6-1:1.0 failed with error -5 [ 312.773377][ T5095] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 312.780671][ T5095] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 312.821650][ T308] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 312.929004][ T3870] usb 3-1: USB disconnect, device number 23 [ 313.002821][ T308] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.013003][ T308] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 313.022805][ T308] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 313.032502][ T308] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.045413][ T308] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 313.054991][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.191143][ T610] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 313.291728][ T3870] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 313.402323][ C1] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification 68! [ 313.410505][ C1] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification 03! [ 313.418087][ C1] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification 16! [ 313.425613][ C1] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification 65! [ 313.471786][ T3870] usb 3-1: Using ep0 maxpacket: 8 [ 313.483908][ T3870] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 313.491999][ T3870] usb 3-1: config 0 has no interface number 0 [ 313.498115][ T3870] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.509294][ T3870] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 313.518549][ T3870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.531869][ T3870] usb 3-1: config 0 descriptor?? [ 313.643563][ T2130] usb 6-1: USB disconnect, device number 21 [ 313.650049][ T2130] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 313.736647][ T39] usb 5-1: USB disconnect, device number 26 [ 313.747886][ T610] usb 3-1: USB disconnect, device number 24 [ 314.171758][ T39] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 314.353050][ T39] usb 5-1: unable to get BOS descriptor or descriptor too short [ 314.361530][ T39] usb 5-1: config 114 has an invalid interface number: 240 but max is 0 [ 314.370043][ T39] usb 5-1: config 114 has no interface number 0 [ 314.376409][ T39] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 314.386924][ T39] usb 5-1: config 114 interface 240 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 314.398033][ T39] usb 5-1: config 114 interface 240 has no altsetting 0 [ 314.407126][ T39] usb 5-1: string descriptor 0 read error: -22 [ 314.413351][ T39] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 314.422435][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.431333][ T5143] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 314.431820][ T3870] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 314.438764][ T5143] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 314.531673][ T308] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 314.612799][ T3870] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.623798][ T3870] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.633633][ T3870] usb 6-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 314.642751][ T3870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.712787][ T308] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 314.721018][ T308] usb 3-1: config 0 has no interface number 0 [ 314.727192][ T308] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 314.739929][ T308] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 314.749065][ T308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.757468][ T308] usb 3-1: Product: syz [ 314.761885][ T308] usb 3-1: Manufacturer: syz [ 314.766820][ T308] usb 3-1: SerialNumber: syz [ 314.773838][ T308] usb 3-1: config 0 descriptor?? [ 314.983875][ T308] usb 3-1: USB disconnect, device number 25 [ 315.008434][ T5154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.017085][ T5154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.054809][ T3870] hid-generic 0003:8086:0000.000C: unknown main item tag 0x5 [ 315.062340][ T3870] hid-generic 0003:8086:0000.000C: unknown main item tag 0x0 [ 315.069739][ T3870] hid-generic 0003:8086:0000.000C: unknown main item tag 0x0 [ 315.077167][ T3870] hid-generic 0003:8086:0000.000C: unknown main item tag 0x0 [ 315.084617][ T3870] hid-generic 0003:8086:0000.000C: unknown main item tag 0x0 [ 315.092131][ T3870] hid-generic 0003:8086:0000.000C: unknown main item tag 0x0 [ 315.099573][ T3870] hid-generic 0003:8086:0000.000C: unknown main item tag 0x0 [ 315.107033][ T3870] hid-generic 0003:8086:0000.000C: unknown main item tag 0x0 [ 315.114515][ T3870] hid-generic 0003:8086:0000.000C: unknown main item tag 0x0 [ 315.121959][ T3870] hid-generic 0003:8086:0000.000C: unknown main item tag 0x0 [ 315.129358][ T3870] hid-generic 0003:8086:0000.000C: unknown main item tag 0x0 [ 315.136812][ T3870] hid-generic 0003:8086:0000.000C: unknown main item tag 0x0 [ 315.144338][ T3870] hid-generic 0003:8086:0000.000C: unknown main item tag 0x0 [ 315.151787][ T3870] hid-generic 0003:8086:0000.000C: unknown main item tag 0x0 [ 315.159240][ T3870] hid-generic 0003:8086:0000.000C: unknown main item tag 0x0 [ 315.166696][ T3870] hid-generic 0003:8086:0000.000C: unknown main item tag 0x0 [ 315.174163][ T3870] hid-generic 0003:8086:0000.000C: unknown main item tag 0x0 [ 315.181549][ T3870] hid-generic 0003:8086:0000.000C: unknown main item tag 0x0 [ 315.189060][ T3870] hid-generic 0003:8086:0000.000C: unknown main item tag 0x0 [ 315.196689][ T3870] hid-generic 0003:8086:0000.000C: unknown main item tag 0x0 [ 315.205556][ T3870] hid-generic 0003:8086:0000.000C: hiddev96,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.5-1/input0 [ 315.256353][ T39] usb 6-1: USB disconnect, device number 22 [ 315.563045][ T39] usb 4-1: USB disconnect, device number 29 [ 315.971651][ T39] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 315.971651][ T3870] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 316.051722][ T2130] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 316.152800][ T3870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.164002][ T3870] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 316.171777][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 316.173766][ T3870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.180043][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 316.188588][ T3870] usb 3-1: config 0 descriptor?? [ 316.201830][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 316.215402][ T39] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 316.224651][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.233549][ T39] usb 4-1: config 0 descriptor?? [ 316.261649][ T2130] usb 6-1: Using ep0 maxpacket: 8 [ 316.268294][ T2130] usb 6-1: unable to get BOS descriptor or descriptor too short [ 316.276910][ T2130] usb 6-1: config 7 has an invalid interface number: 74 but max is 0 [ 316.285086][ T2130] usb 6-1: config 7 has no interface number 0 [ 316.292726][ T2130] usb 6-1: New USB device found, idVendor=0421, idProduct=0445, bcdDevice=f7.bf [ 316.301842][ T2130] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.309873][ T2130] usb 6-1: Product: syz [ 316.314101][ T2130] usb 6-1: Manufacturer: syz [ 316.318736][ T2130] usb 6-1: SerialNumber: syz [ 316.406335][ T3870] usbhid 3-1:0.0: can't add hid device: -71 [ 316.412494][ T3870] usbhid: probe of 3-1:0.0 failed with error -71 [ 316.419957][ T3870] usb 3-1: USB disconnect, device number 26 [ 316.528112][ T2130] usb 6-1: bad CDC descriptors [ 316.537174][ T2130] usb 6-1: USB disconnect, device number 23 [ 316.641983][ T39] lenovo 0003:17EF:6047.000D: unknown main item tag 0x0 [ 316.649050][ T39] lenovo 0003:17EF:6047.000D: unknown main item tag 0x0 [ 316.656155][ T39] lenovo 0003:17EF:6047.000D: unknown main item tag 0x0 [ 316.663212][ T39] lenovo 0003:17EF:6047.000D: unknown main item tag 0x0 [ 316.670195][ T39] lenovo 0003:17EF:6047.000D: unknown main item tag 0x0 [ 316.677202][ T39] lenovo 0003:17EF:6047.000D: unknown main item tag 0x0 [ 316.684211][ T39] lenovo 0003:17EF:6047.000D: unknown main item tag 0x0 [ 316.691168][ T39] lenovo 0003:17EF:6047.000D: unknown main item tag 0x0 [ 316.698945][ T39] lenovo 0003:17EF:6047.000D: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 316.775613][ T2130] usb 5-1: USB disconnect, device number 27 [ 316.971647][ T3870] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 317.042197][ T39] lenovo 0003:17EF:6047.000D: Failed to switch middle button: -71 [ 317.054104][ T39] lenovo 0003:17EF:6047.000D: Fn-lock setting failed: -71 [ 317.061619][ T39] lenovo 0003:17EF:6047.000D: Sensitivity setting failed: -71 [ 317.073098][ T39] usb 4-1: USB disconnect, device number 30 [ 317.097675][ T5172] fido_id[5172]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 317.152713][ T3870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.163924][ T3870] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 317.173013][ T3870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.181578][ T3870] usb 3-1: config 0 descriptor?? [ 317.182126][ T2130] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 317.361621][ T1781] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 317.374342][ T2130] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 317.383450][ T2130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.391464][ T2130] usb 5-1: Product: syz [ 317.395699][ T2130] usb 5-1: Manufacturer: syz [ 317.400345][ T2130] usb 5-1: SerialNumber: syz [ 317.552704][ T1781] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.563153][ T1781] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 317.573147][ T1781] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 317.583439][ T1781] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.600084][ T1781] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 317.609245][ T1781] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.861694][ T2130] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 318.012302][ T5159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.020782][ T3870] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 318.021091][ T5159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.029782][ T3870] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 318.053620][ T2130] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 318.055608][ C0] ================================================================================ [ 318.069256][ T2130] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 318.075843][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:685:31 [ 318.075880][ C0] index 70 is out of range for type 'const int[34]' [ 318.086271][ T2130] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.093515][ C0] CPU: 0 PID: 404 Comm: udevd Not tainted syzkaller #0 [ 318.093542][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 318.093558][ C0] Call Trace: [ 318.101212][ T2130] usb 4-1: Product: syz [ 318.108132][ C0] [ 318.108142][ C0] __dump_stack+0x21/0x24 [ 318.116130][ T2130] usb 4-1: Manufacturer: syz [ 318.125081][ C0] dump_stack_lvl+0x110/0x170 [ 318.129211][ T2130] usb 4-1: SerialNumber: syz [ 318.132560][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 318.158702][ C0] dump_stack+0x15/0x24 [ 318.162921][ C0] ubsan_epilogue+0xe/0x40 [ 318.167375][ C0] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 318.173128][ C0] aiptek_irq+0x25fe/0x29b0 [ 318.177661][ C0] ? kcov_remote_start+0x2c4/0x370 [ 318.182810][ C0] __usb_hcd_giveback_urb+0x360/0x520 [ 318.188223][ C0] usb_hcd_giveback_urb+0x11f/0x3e0 [ 318.193429][ C0] dummy_timer+0xa25/0x3270 [ 318.197946][ C0] ? __update_load_avg_cfs_rq+0xb1/0x2e0 [ 318.203646][ C0] ? enqueue_task_fair+0xbee/0x1d70 [ 318.208853][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 318.213806][ C0] ? timerqueue_del+0xd3/0x120 [ 318.218587][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 318.223547][ C0] __hrtimer_run_queues+0x398/0x8a0 [ 318.228768][ C0] ? hrtimer_interrupt+0x8c0/0x8c0 [ 318.233916][ C0] hrtimer_run_softirq+0x19b/0x260 [ 318.239040][ C0] handle_softirqs+0x1d7/0x600 [ 318.243851][ C0] __irq_exit_rcu+0x52/0xf0 [ 318.248364][ C0] irq_exit_rcu+0x9/0x10 [ 318.252612][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 318.258255][ C0] [ 318.261209][ C0] [ 318.264157][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 318.270142][ C0] RIP: 0010:netlink_sendmsg+0x885/0xbd0 [ 318.275709][ C0] Code: 24 80 00 00 00 eb 64 e8 d9 08 5b fd 4c 89 f7 e8 a1 2c 9a fd 41 be 97 ff ff ff eb 45 e8 c4 08 5b fd 4c 8b 74 24 20 8b 5c 24 30 <48> b8 00 00 00 00 00 fc ff df 48 8b 4c 24 58 0f b6 04 01 84 c0 0f [ 318.295549][ C0] RSP: 0018:ffffc9000df678e0 EFLAGS: 00000282 [ 318.301659][ C0] RAX: 00000000fffffffd RBX: 0000000000000000 RCX: ffff888115269440 [ 318.309649][ C0] RDX: 0000000000000000 RSI: 0000000000000a02 RDI: 0000000000000000 [ 318.317726][ C0] RBP: ffffc9000df679f0 R08: 0000000000000000 R09: ffffc9000df67740 [ 318.325711][ C0] R10: dffffc0000000000 R11: fffff52001bececc R12: 1ffff92001becf28 [ 318.333689][ C0] R13: ffffc9000df67960 R14: ffff88811218e000 R15: 0000000000000002 [ 318.341679][ C0] ? __cfi_netlink_sendmsg+0x10/0x10 [ 318.346987][ C0] ? security_socket_sendmsg+0x93/0xb0 [ 318.352492][ C0] ? __cfi_netlink_sendmsg+0x10/0x10 [ 318.357822][ C0] ____sys_sendmsg+0x5fb/0x9c0 [ 318.362648][ C0] ? __sys_sendmsg_sock+0x40/0x40 [ 318.367729][ C0] ? import_iovec+0x7c/0xb0 [ 318.372260][ C0] ___sys_sendmsg+0x2a2/0x360 [ 318.377037][ C0] ? __sys_sendmsg+0x290/0x290 [ 318.381823][ C0] ? __kasan_check_read+0x11/0x20 [ 318.386868][ C0] ? call_rcu+0xb84/0xf50 [ 318.391210][ C0] ? __cfi_call_rcu+0x10/0x10 [ 318.395898][ C0] ? __kasan_check_read+0x11/0x20 [ 318.400924][ C0] ? __fdget+0x15b/0x220 [ 318.405215][ C0] __x64_sys_sendmsg+0x20d/0x2e0 [ 318.410213][ C0] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 318.415730][ C0] x64_sys_call+0x171/0x9a0 [ 318.420252][ C0] do_syscall_64+0x4c/0xa0 [ 318.424724][ C0] ? clear_bhb_loop+0x30/0x80 [ 318.429419][ C0] ? clear_bhb_loop+0x30/0x80 [ 318.434104][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.440007][ C0] RIP: 0033:0x7ff9dc4a7407 [ 318.444437][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 318.464084][ C0] RSP: 002b:00007ffea203f1f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 318.472511][ C0] RAX: ffffffffffffffda RBX: 00007ff9dcc24880 RCX: 00007ff9dc4a7407 [ 318.480506][ C0] RDX: 0000000000000000 RSI: 00007ffea203f250 RDI: 000000000000000c [ 318.488490][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.496467][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000159 [ 318.504533][ C0] R13: 0000556aaafba270 R14: 0000000000000000 R15: 0000000000000000 [ 318.512527][ C0] [ 318.515576][ C0] ================================================================================ [ 318.710440][ T5179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.719111][ T5179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.727493][ T5179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.736043][ T5179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.800146][ T2130] usb 3-1: USB disconnect, device number 27 [ 318.800238][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 319.811289][ T2130] usb 5-1: USB disconnect, device number 28 [ 320.085645][ T2130] usb 6-1: USB disconnect, device number 24 [ 320.628639][ T2130] usb 4-1: USB disconnect, device number 31