last executing test programs: 27m12.077747262s ago: executing program 4 (id=5): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000001100)=""/4112, &(0x7f0000001040)=0x1010) 27m11.030836649s ago: executing program 4 (id=13): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000001100)=""/4112, &(0x7f0000001040)=0x1010) 27m8.763625219s ago: executing program 4 (id=14): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)='\'', 0x1}], 0x1}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 27m6.704036903s ago: executing program 4 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf250300000004000180080004"], 0x20}}, 0x20000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f00000002c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r8], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)=@buf="9ce5e546e16e0d5d9169b8b1"}, 0x20) 27m5.490707745s ago: executing program 4 (id=24): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) exit(0x1f52b4ba) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x80881) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f00000006c0)="3b000000010006", 0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc4c85513, &(0x7f0000000140)={0x8, 0x4, 0x1, 0xffffffff, '\x00', 0x4}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf2501000000600002800c00018008000100070000001c0000800800010005000000080001000300000008000100050000003400018008000100060000000800010001000000080001000200000008000100070000000800010002000000080001000500000004000180"], 0x78}, 0x1, 0x0, 0x0, 0x841}, 0x20000080) syz_open_dev$swradio(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) 26m49.461027186s ago: executing program 32 (id=24): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) exit(0x1f52b4ba) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x80881) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f00000006c0)="3b000000010006", 0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc4c85513, &(0x7f0000000140)={0x8, 0x4, 0x1, 0xffffffff, '\x00', 0x4}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf2501000000600002800c00018008000100070000001c0000800800010005000000080001000300000008000100050000003400018008000100060000000800010001000000080001000200000008000100070000000800010002000000080001000500000004000180"], 0x78}, 0x1, 0x0, 0x0, 0x841}, 0x20000080) syz_open_dev$swradio(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) 23m7.477954849s ago: executing program 0 (id=510): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x8}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r4) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x2000001}}}}]}, 0x44}}, 0x20000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffff, 0xffe0}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x7, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) 23m7.119819519s ago: executing program 0 (id=511): syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20048045) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0)="ec2eb69eb14000a1317d76c0", 0xc, 0x4000080, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[], 0x50) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, 0x0, 0x0}, 0x20) 23m3.885601745s ago: executing program 0 (id=517): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x800) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, 0xffffffffffffffff, 0x100000000) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0) 23m1.82809559s ago: executing program 0 (id=523): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23m0.994826402s ago: executing program 0 (id=525): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x24, 0x1c, 0x114236db3b607435, 0x70bd28, 0x25dfd3fe, {0x2, 0x0, 0x0, r0, 0x40, 0xc4, 0x4}, [@NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={0x0}}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020800000400000001000000", @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x18, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 22m57.707714251s ago: executing program 0 (id=530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x5, 0x3, 0x20000000, 0x9, 0x401}, 0x4, 0x85, [{0x0, 0x5d, 0x8, 0x0, 0xa3a6, 0x101}]}, [{0xc8, 0x9, 0x4, 0xfffffffc, 0xffffffff, 0xf08c}, {0xfffffffc, 0x1, 0x9, 0xd80, 0x1ff, 0x7}, {0x0, 0xd, 0x3, 0x7, 0x1, 0xb5a3}, {0x2, 0x3, 0xe0, 0x4, 0x3f, 0x9}, {0xd7ba, 0x800, 0x1, 0x9, 0x6, 0x2}, {0x79, 0xb, 0xffffff20, 0x7, 0x5, 0x10000}, {0x7fff, 0x2, 0x3, 0xfffffff8, 0x0, 0xdb63}, {0x8, 0x9, 0x7cbf134f, 0x3, 0x5, 0x101}, {0x10001, 0x4, 0x7, 0x400, 0xd423, 0x5}, {0x1, 0x2, 0x0, 0x6, 0xfffffffc}, {0xeced, 0x3, 0x7fff, 0x18, 0xd4, 0x7}, {0x9, 0x4, 0x1, 0x629aa8ca, 0x1, 0x100}, {0xffff, 0xffffff00, 0x9, 0x6, 0x80000000, 0x6}, {0x8, 0xb, 0x401, 0x5, 0xe, 0xfffffff7}, {0xab5, 0xff, 0x6, 0x4, 0x5, 0x6a}, {0xd14d, 0x2a, 0x8, 0x3ff, 0x6f9}, {0x7, 0xc, 0x9, 0x2, 0x9, 0x8}, {0xffffffff, 0x3ff, 0x8, 0xff, 0xfffffffc, 0xfffffffd}, {0x0, 0x3c000000, 0x401, 0x28, 0x8, 0x8}, {0x4, 0x69d, 0x8, 0x3d092435, 0xfa, 0x7ed1}, {0x4, 0x3, 0x80, 0xc, 0x401, 0x6}, {0x40, 0x0, 0x3, 0x1, 0x9, 0x5}, {0x3, 0x1, 0x0, 0x8, 0x1, 0x8}, {0x5e, 0x9, 0x7fffffff, 0xff, 0x8, 0xaa5}, {0x3, 0x8, 0x2, 0x5, 0x800}, {0x1, 0x5, 0x0, 0xb, 0x9ca, 0x100}, {0x1, 0x6, 0x5, 0x7fff, 0x3, 0x7fff}, {0x6, 0x9, 0x1, 0x8, 0x2d, 0x4}, {0x6, 0x5, 0xc, 0xfff, 0x6, 0x8}, {0x2, 0x6, 0x1, 0x1, 0x10, 0xf2}, {0x400, 0x9, 0x7, 0x100, 0x3, 0x3ff}, {0xfffffffb, 0x6510, 0x4, 0x9, 0x10, 0x6}, {0x5, 0x3, 0xb159, 0x2, 0xa8c, 0x6}, {0x0, 0x0, 0xf, 0x4, 0x3, 0x2}, {0xa, 0x8, 0x4, 0x2, 0x7, 0xc9c}, {0x8, 0xf, 0x696b, 0x1, 0x6, 0x80000001}, {0x7, 0x5, 0x1000, 0xff, 0x10, 0x3}, {0x8, 0x5, 0x4, 0x0, 0x60d, 0xf6}, {0x0, 0x10000, 0x7, 0x6, 0x60500000, 0x8}, {0xffff720e, 0x0, 0x8, 0x8, 0x3, 0x4}, {0x7, 0x8, 0x9, 0x3, 0x7, 0x10000}, {0x3, 0xd, 0x0, 0x6, 0x38, 0x6f7}, {0x10000, 0x400, 0xab, 0x4, 0x8000, 0x3f0}, {0x8, 0x6, 0x7, 0xfffffa16, 0x1ff, 0x7}, {0x6, 0x1, 0x4, 0x401, 0x0, 0x7}, {0x10000, 0x0, 0x5c, 0x3, 0x3, 0x6a9c}, {0xfff, 0x1, 0x2, 0xaf30, 0x0, 0x3}, {0x10001, 0x1, 0x81, 0x8, 0x6, 0xc00}, {0x9, 0x401, 0x0, 0x4, 0x3ff, 0x2}, {0x6, 0x80, 0x7, 0x6, 0x7, 0x70000000}, {0x216d, 0x9, 0x2, 0x100, 0xd, 0x4}, {0x1ff, 0x2, 0xe, 0x3, 0x4, 0x4}, {0x4, 0x6, 0x7, 0x403c, 0xf, 0x3}, {0x9, 0xfc1, 0x6, 0x3, 0x8001, 0x8}, {0x7, 0xfff, 0x7, 0x54f3, 0x3, 0x6}, {0x800, 0x80000000, 0x6, 0x7, 0x3, 0x6}, {0x5, 0x6, 0x1000, 0x8, 0x3, 0x80000001}, {0x2, 0x800, 0xfff, 0x7, 0x3, 0x94d}, {0x7, 0x4, 0xfffffa2a, 0x4, 0x10, 0x5}, {0x4, 0x6, 0x3, 0x10, 0x6, 0x86}, {0xcf, 0x7, 0x1, 0xb, 0x80, 0x3}, {0x2, 0x400, 0x4823, 0x59e8d375, 0x400, 0x6}, {0x15e, 0x7, 0x7, 0x8b, 0x6, 0x5}, {0xfffffff9, 0x6, 0x7, 0x4, 0x2, 0x10001}, {0x7224f33c, 0x101, 0x100, 0x2, 0x3, 0x1}, {0x8, 0x5, 0x6, 0x2, 0x80000000, 0x320b}, {0x9, 0x80000001, 0xc8, 0x3ff, 0x1000, 0x6}, {0x7fff, 0x900000, 0x2, 0xa3a, 0x1, 0x9}, {0x1000, 0x0, 0x4, 0xad, 0x7, 0x9}, {0x6, 0x91, 0x33a, 0x0, 0x6, 0x1}, {0xff, 0x9, 0xffff8000, 0x84f, 0x9, 0x8}, {0x5b8, 0xa, 0x0, 0x7, 0xb, 0xfed4}, {0x0, 0xfffffffe, 0x4, 0x8c28, 0x9, 0x6fb}, {0x2, 0x3, 0xf1, 0xfff, 0x1ff}, {0x2, 0x7, 0xff, 0x9, 0x3, 0xfe00}, {0xef0e, 0xe2, 0x7, 0x7, 0x8f, 0x2}, {0x317b, 0x6, 0x80000000, 0x2, 0x4, 0x89}, {0xdd3f, 0x3dbe, 0x81, 0x7, 0x5, 0xfffffffa}, {0x0, 0xfffff000, 0x7fff, 0x7, 0xfffffff8, 0x4}, {0x9, 0x616, 0xe, 0x80, 0x2, 0x5}, {0x1, 0x3, 0x7, 0x7fffffff, 0x2, 0x10000}, {0x401, 0x96, 0xe6, 0x6, 0x8, 0x4}, {0xa2e00000, 0x0, 0x8, 0x80000000, 0x1, 0x1}, {0xfffffff4, 0xc18f, 0x5, 0x7, 0x3, 0x71d}, {0xc, 0xe10f, 0xb, 0x4, 0x200, 0xfffffffd}, {0x4, 0x0, 0x200, 0xf32, 0x3, 0x3}, {0x5, 0x80, 0x80000001, 0x80, 0x8, 0x7}, {0x2, 0x10, 0x7, 0xb, 0x4}, {0x4, 0xc, 0x3, 0x3, 0x4159f02e, 0x5}, {0x7, 0x5, 0x8000, 0x40, 0x7f0c, 0xaf4}, {0xfe00000, 0x2, 0xff, 0x8000, 0x7, 0x4}, {0x1, 0x8, 0x7, 0x3, 0x3, 0x1000}, {0x3, 0x8, 0x80000001, 0xe, 0x0, 0x7}, {0x4, 0x3, 0x8000, 0x4, 0xa}, {0xd10, 0x56a, 0xfffffffe, 0x2, 0x80000000, 0x6}, {0x3, 0xffffffff, 0x80000001, 0x4, 0xdcd6, 0x4}, {0xfa, 0xe, 0x9, 0x9, 0x6b39, 0x8}, {0x0, 0xe8, 0x8, 0x6, 0x4, 0x9}, {0xbf, 0x8, 0x7, 0xb, 0x5, 0x2}, {0x54, 0x2, 0x7, 0x7, 0x4, 0xfffffffc}, {0x2, 0x7, 0x401, 0xfff, 0xfffffff8, 0x3ff}, {0x8001, 0xe, 0x7fff, 0xa, 0x7, 0x3}, {0xfff, 0x2, 0x7, 0x7fff, 0xfff, 0x1}, {0x4, 0x7, 0x7ff, 0x7, 0x8a, 0x7f}, {0xe, 0x0, 0xc, 0x9, 0x7, 0x7d0}, {0x2, 0x2, 0x9, 0x1, 0x7ff, 0x3}, {0x0, 0xb, 0x7f, 0x0, 0x3, 0xff}, {0x7a2f, 0x7, 0x1, 0x0, 0xffffffff, 0x2}, {0x2, 0x2, 0x2, 0x6, 0x4, 0x48d}, {0x2, 0xff, 0x4, 0x8001, 0xfffffffe}, {0xfffffffa, 0xffffffff, 0x39c, 0xfffffffb, 0xfffffffa, 0x7fffffff}, {0x400, 0x2a1, 0x9, 0xc, 0x4, 0x6}, {0x32, 0x5, 0x10001, 0x7ff, 0x0, 0x8}, {0x8, 0x3, 0xc, 0x7fffffff, 0x9, 0xfffffffe}, {0x1800000, 0x6, 0x401, 0x6, 0x5, 0x26}, {0x769, 0x7ff, 0x7fffffff, 0x18000000, 0xffff, 0x8001}, {0x2, 0xfffff000, 0xe, 0x1, 0xf, 0xb55}, {0x7, 0x6, 0x8, 0x3, 0x1, 0x7303}, {0x9, 0x1000006, 0x80, 0x5, 0x1, 0x3}, {0x80000001, 0x2, 0x2, 0x6, 0x4, 0x3}, {0xffff, 0x9023, 0xff, 0x0, 0x400, 0x2ae}, {0x3, 0x8, 0x3, 0x6, 0x4, 0x400}, {0xd, 0x7, 0x9, 0x7, 0x9, 0x1}, {0x800, 0x2, 0x9, 0x8, 0x7, 0x7}, {0xe4f, 0x7, 0xfffffffe, 0x9, 0x200, 0x3}, {0x2, 0x897f, 0xd, 0x4, 0x101, 0x6f4}, {0x66, 0x3, 0x4, 0x8, 0xae, 0x9}, {0x8, 0xfffffd5a, 0x3, 0x2, 0x0, 0x8c}], [{0x0, 0x1}, {0x2, 0x2}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {}, {0x3}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4ee9163edc092ecd, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x6, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x4}, {0x4, 0x1}, {}, {0x3}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x893e69629313f360}, {0x5, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0xe540b2e3bbf30571}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x3}, {0x2}, {0x4}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) 22m40.311209947s ago: executing program 33 (id=530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x5, 0x3, 0x20000000, 0x9, 0x401}, 0x4, 0x85, [{0x0, 0x5d, 0x8, 0x0, 0xa3a6, 0x101}]}, [{0xc8, 0x9, 0x4, 0xfffffffc, 0xffffffff, 0xf08c}, {0xfffffffc, 0x1, 0x9, 0xd80, 0x1ff, 0x7}, {0x0, 0xd, 0x3, 0x7, 0x1, 0xb5a3}, {0x2, 0x3, 0xe0, 0x4, 0x3f, 0x9}, {0xd7ba, 0x800, 0x1, 0x9, 0x6, 0x2}, {0x79, 0xb, 0xffffff20, 0x7, 0x5, 0x10000}, {0x7fff, 0x2, 0x3, 0xfffffff8, 0x0, 0xdb63}, {0x8, 0x9, 0x7cbf134f, 0x3, 0x5, 0x101}, {0x10001, 0x4, 0x7, 0x400, 0xd423, 0x5}, {0x1, 0x2, 0x0, 0x6, 0xfffffffc}, {0xeced, 0x3, 0x7fff, 0x18, 0xd4, 0x7}, {0x9, 0x4, 0x1, 0x629aa8ca, 0x1, 0x100}, {0xffff, 0xffffff00, 0x9, 0x6, 0x80000000, 0x6}, {0x8, 0xb, 0x401, 0x5, 0xe, 0xfffffff7}, {0xab5, 0xff, 0x6, 0x4, 0x5, 0x6a}, {0xd14d, 0x2a, 0x8, 0x3ff, 0x6f9}, {0x7, 0xc, 0x9, 0x2, 0x9, 0x8}, {0xffffffff, 0x3ff, 0x8, 0xff, 0xfffffffc, 0xfffffffd}, {0x0, 0x3c000000, 0x401, 0x28, 0x8, 0x8}, {0x4, 0x69d, 0x8, 0x3d092435, 0xfa, 0x7ed1}, {0x4, 0x3, 0x80, 0xc, 0x401, 0x6}, {0x40, 0x0, 0x3, 0x1, 0x9, 0x5}, {0x3, 0x1, 0x0, 0x8, 0x1, 0x8}, {0x5e, 0x9, 0x7fffffff, 0xff, 0x8, 0xaa5}, {0x3, 0x8, 0x2, 0x5, 0x800}, {0x1, 0x5, 0x0, 0xb, 0x9ca, 0x100}, {0x1, 0x6, 0x5, 0x7fff, 0x3, 0x7fff}, {0x6, 0x9, 0x1, 0x8, 0x2d, 0x4}, {0x6, 0x5, 0xc, 0xfff, 0x6, 0x8}, {0x2, 0x6, 0x1, 0x1, 0x10, 0xf2}, {0x400, 0x9, 0x7, 0x100, 0x3, 0x3ff}, {0xfffffffb, 0x6510, 0x4, 0x9, 0x10, 0x6}, {0x5, 0x3, 0xb159, 0x2, 0xa8c, 0x6}, {0x0, 0x0, 0xf, 0x4, 0x3, 0x2}, {0xa, 0x8, 0x4, 0x2, 0x7, 0xc9c}, {0x8, 0xf, 0x696b, 0x1, 0x6, 0x80000001}, {0x7, 0x5, 0x1000, 0xff, 0x10, 0x3}, {0x8, 0x5, 0x4, 0x0, 0x60d, 0xf6}, {0x0, 0x10000, 0x7, 0x6, 0x60500000, 0x8}, {0xffff720e, 0x0, 0x8, 0x8, 0x3, 0x4}, {0x7, 0x8, 0x9, 0x3, 0x7, 0x10000}, {0x3, 0xd, 0x0, 0x6, 0x38, 0x6f7}, {0x10000, 0x400, 0xab, 0x4, 0x8000, 0x3f0}, {0x8, 0x6, 0x7, 0xfffffa16, 0x1ff, 0x7}, {0x6, 0x1, 0x4, 0x401, 0x0, 0x7}, {0x10000, 0x0, 0x5c, 0x3, 0x3, 0x6a9c}, {0xfff, 0x1, 0x2, 0xaf30, 0x0, 0x3}, {0x10001, 0x1, 0x81, 0x8, 0x6, 0xc00}, {0x9, 0x401, 0x0, 0x4, 0x3ff, 0x2}, {0x6, 0x80, 0x7, 0x6, 0x7, 0x70000000}, {0x216d, 0x9, 0x2, 0x100, 0xd, 0x4}, {0x1ff, 0x2, 0xe, 0x3, 0x4, 0x4}, {0x4, 0x6, 0x7, 0x403c, 0xf, 0x3}, {0x9, 0xfc1, 0x6, 0x3, 0x8001, 0x8}, {0x7, 0xfff, 0x7, 0x54f3, 0x3, 0x6}, {0x800, 0x80000000, 0x6, 0x7, 0x3, 0x6}, {0x5, 0x6, 0x1000, 0x8, 0x3, 0x80000001}, {0x2, 0x800, 0xfff, 0x7, 0x3, 0x94d}, {0x7, 0x4, 0xfffffa2a, 0x4, 0x10, 0x5}, {0x4, 0x6, 0x3, 0x10, 0x6, 0x86}, {0xcf, 0x7, 0x1, 0xb, 0x80, 0x3}, {0x2, 0x400, 0x4823, 0x59e8d375, 0x400, 0x6}, {0x15e, 0x7, 0x7, 0x8b, 0x6, 0x5}, {0xfffffff9, 0x6, 0x7, 0x4, 0x2, 0x10001}, {0x7224f33c, 0x101, 0x100, 0x2, 0x3, 0x1}, {0x8, 0x5, 0x6, 0x2, 0x80000000, 0x320b}, {0x9, 0x80000001, 0xc8, 0x3ff, 0x1000, 0x6}, {0x7fff, 0x900000, 0x2, 0xa3a, 0x1, 0x9}, {0x1000, 0x0, 0x4, 0xad, 0x7, 0x9}, {0x6, 0x91, 0x33a, 0x0, 0x6, 0x1}, {0xff, 0x9, 0xffff8000, 0x84f, 0x9, 0x8}, {0x5b8, 0xa, 0x0, 0x7, 0xb, 0xfed4}, {0x0, 0xfffffffe, 0x4, 0x8c28, 0x9, 0x6fb}, {0x2, 0x3, 0xf1, 0xfff, 0x1ff}, {0x2, 0x7, 0xff, 0x9, 0x3, 0xfe00}, {0xef0e, 0xe2, 0x7, 0x7, 0x8f, 0x2}, {0x317b, 0x6, 0x80000000, 0x2, 0x4, 0x89}, {0xdd3f, 0x3dbe, 0x81, 0x7, 0x5, 0xfffffffa}, {0x0, 0xfffff000, 0x7fff, 0x7, 0xfffffff8, 0x4}, {0x9, 0x616, 0xe, 0x80, 0x2, 0x5}, {0x1, 0x3, 0x7, 0x7fffffff, 0x2, 0x10000}, {0x401, 0x96, 0xe6, 0x6, 0x8, 0x4}, {0xa2e00000, 0x0, 0x8, 0x80000000, 0x1, 0x1}, {0xfffffff4, 0xc18f, 0x5, 0x7, 0x3, 0x71d}, {0xc, 0xe10f, 0xb, 0x4, 0x200, 0xfffffffd}, {0x4, 0x0, 0x200, 0xf32, 0x3, 0x3}, {0x5, 0x80, 0x80000001, 0x80, 0x8, 0x7}, {0x2, 0x10, 0x7, 0xb, 0x4}, {0x4, 0xc, 0x3, 0x3, 0x4159f02e, 0x5}, {0x7, 0x5, 0x8000, 0x40, 0x7f0c, 0xaf4}, {0xfe00000, 0x2, 0xff, 0x8000, 0x7, 0x4}, {0x1, 0x8, 0x7, 0x3, 0x3, 0x1000}, {0x3, 0x8, 0x80000001, 0xe, 0x0, 0x7}, {0x4, 0x3, 0x8000, 0x4, 0xa}, {0xd10, 0x56a, 0xfffffffe, 0x2, 0x80000000, 0x6}, {0x3, 0xffffffff, 0x80000001, 0x4, 0xdcd6, 0x4}, {0xfa, 0xe, 0x9, 0x9, 0x6b39, 0x8}, {0x0, 0xe8, 0x8, 0x6, 0x4, 0x9}, {0xbf, 0x8, 0x7, 0xb, 0x5, 0x2}, {0x54, 0x2, 0x7, 0x7, 0x4, 0xfffffffc}, {0x2, 0x7, 0x401, 0xfff, 0xfffffff8, 0x3ff}, {0x8001, 0xe, 0x7fff, 0xa, 0x7, 0x3}, {0xfff, 0x2, 0x7, 0x7fff, 0xfff, 0x1}, {0x4, 0x7, 0x7ff, 0x7, 0x8a, 0x7f}, {0xe, 0x0, 0xc, 0x9, 0x7, 0x7d0}, {0x2, 0x2, 0x9, 0x1, 0x7ff, 0x3}, {0x0, 0xb, 0x7f, 0x0, 0x3, 0xff}, {0x7a2f, 0x7, 0x1, 0x0, 0xffffffff, 0x2}, {0x2, 0x2, 0x2, 0x6, 0x4, 0x48d}, {0x2, 0xff, 0x4, 0x8001, 0xfffffffe}, {0xfffffffa, 0xffffffff, 0x39c, 0xfffffffb, 0xfffffffa, 0x7fffffff}, {0x400, 0x2a1, 0x9, 0xc, 0x4, 0x6}, {0x32, 0x5, 0x10001, 0x7ff, 0x0, 0x8}, {0x8, 0x3, 0xc, 0x7fffffff, 0x9, 0xfffffffe}, {0x1800000, 0x6, 0x401, 0x6, 0x5, 0x26}, {0x769, 0x7ff, 0x7fffffff, 0x18000000, 0xffff, 0x8001}, {0x2, 0xfffff000, 0xe, 0x1, 0xf, 0xb55}, {0x7, 0x6, 0x8, 0x3, 0x1, 0x7303}, {0x9, 0x1000006, 0x80, 0x5, 0x1, 0x3}, {0x80000001, 0x2, 0x2, 0x6, 0x4, 0x3}, {0xffff, 0x9023, 0xff, 0x0, 0x400, 0x2ae}, {0x3, 0x8, 0x3, 0x6, 0x4, 0x400}, {0xd, 0x7, 0x9, 0x7, 0x9, 0x1}, {0x800, 0x2, 0x9, 0x8, 0x7, 0x7}, {0xe4f, 0x7, 0xfffffffe, 0x9, 0x200, 0x3}, {0x2, 0x897f, 0xd, 0x4, 0x101, 0x6f4}, {0x66, 0x3, 0x4, 0x8, 0xae, 0x9}, {0x8, 0xfffffd5a, 0x3, 0x2, 0x0, 0x8c}], [{0x0, 0x1}, {0x2, 0x2}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {}, {0x3}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4ee9163edc092ecd, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x6, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x4}, {0x4, 0x1}, {}, {0x3}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x893e69629313f360}, {0x5, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0xe540b2e3bbf30571}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x3}, {0x2}, {0x4}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) 11m8.120021815s ago: executing program 6 (id=1823): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"}) r4 = syz_open_dev$usbmon(&(0x7f0000000040), 0xfb7, 0x840) ioctl$MON_IOCX_GETX(r4, 0x4018920a, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f000000b200)=[{{&(0x7f0000000040)={0xa, 0xfa04, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000540)}}, {{0x0, 0x0, &(0x7f0000000780)}}], 0x2, 0x20004051) shutdown(r5, 0x1) getsockopt$bt_hci(r5, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 11m0.771825301s ago: executing program 6 (id=1832): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@dstopts_2292={{0x110, 0x29, 0x4, {0x4, 0x1e, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x6f, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x10, "e80ee304ecb784ec4655260cecea14e4"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x40, 0x29, 0x36, {0x5e, 0x4, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @generic={0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x1b8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10m58.992222099s ago: executing program 6 (id=1840): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000100)="1073eeda8705da74bc83496ee251e51e6d155c558a", 0x15}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b", 0x21}], 0x2}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000e80)="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", 0x146}, {&(0x7f0000000a40)="d82d33a6d81edc4b66cc88bf8c1a89a600010000000000006cab778d9631e23dc7b23087ca46c503e8b9bbf55511a47353213e9469564dc8aea385d25838f30a8b23ee20331856a97befcd9aaf4dba1e25357a", 0x53}, {&(0x7f0000000580)="4cc291a1339f36fedfa937c3d768baa73ddc72c419695988fc8177e38f1379e15e6745bbb565b5a19e98a179b04a46aeeb2ae125123d", 0x36}, {&(0x7f0000000640)="4f5d11a3bedb1e613a22193c7efc0895ad8a3a732fc9ac7b82813fb06350e990d28156283d5b74e91294a85de9d112834691b29f7b8de2d221534387bb87a9000000006d90826596c1f8831c143bb8e2e7acd2128a4925e5c6e0a2131998d6d58ff9c3db3eb272", 0x67}], 0x4}}], 0x2, 0x8810) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4040001}, 0x0) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) 10m57.148909049s ago: executing program 6 (id=1844): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)=""/18, 0x12}], 0x1}, 0x81}], 0x1, 0x0, 0x0) 10m52.533647112s ago: executing program 6 (id=1852): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000180), &(0x7f0000015ac0)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@swalloc}, {@ikeep}]}, 0x1, 0x15aa0, &(0x7f000002b5c0)="$eJzs3XtsnXX9wPGn29pd2GC/nzNOI2FjYxvg2KUbu4i4dtBRYBU3LgXBWWUD3MDBhm4Ew0UCIvEGCoTEwNAAihk3xUiCzEAERYIQcIpgRIxBIyJ/wOQyap6e55Snh7Mm/dbvty57vZL2nOc55/O0Pe37fE+3k57OtpWtWTYqq7g4q/XTxVcu+PVTLTdf/vCaLSeNmdFW2btkfHHxpOJ0cnG6f5Zlw4rdIyq79l7/ox8PyzeGlY+71+gxDeOybHixuaQ4XVA5OffY6vW6axS7qx8/a+j9vBu+UnnrsU+WZaPzM3N/cOpT5eMUI9ve9YXuoTpblrX13oyV71tD5XuYNRbny29Nlbf9Hq281f35KF+3Yai+rul/vmPTUH3s3Ulny7L2mu9/3uLwYl/e46TaBvdEtT/nh99x9xXFTdhQ3GYjalrZLXS2tPXc19a/n8+yxZds6+qu3G+OzCoLRX6/Oia/C8+ybOxQf18YnJbW5tb857W6XXzbqz/LS+r9XOy1qHVGlmXzizWgegoA7CZaWpuX1ln/R/W3/r9v+45zrP8AsPtqb2ltrrP+j+1v/b+n+5bNxT8WLqhMvT20XwQAMCBt7XXX//H9rf+v3XLTT6z/ALD7WrG8Z/3fq2b9n9Df+v/4mkO/Xlyv+rhhZ+mQPc8fK/a/Wdo/vLT/jdL+xtJxytdvKu3/d2n/yPyyOtcfV3rezdTS/r1L+6eV9u9T2j+jtH986TlPr5f2zy4+19z0Xd+iAPC/b0Vz29Ks7/PjcxOrl9db/8ecO/n7Q/X5AgAAAAAAAAAAAAAAAMCeYMPmC9Z2rVu3+jxnnHHGmd4zQ33PBMT2TvRD/ZkAAKmk+HViqL9GAKCv9o6Wl4b3fbXq4eWNfR9b3XM6b0fnmRd+96s3VU+Li4+pc8g+r/Pf3d3d/czGOQ8XmyNrrjuqdjg//tolN55ZbE6q/fuDPX+Ad1Jj9qk1Z61bPTv/UFMas035xpz8q5jWmH0j35ibb0xvzG7LN5p7NkZn2/KNQz7zuXWnN9T8yV/YM7V3XJwN71Ns39euL/e/dsmTs6un/RyyerQRWdH/hC9OWFVzWdUu+u89/uRdvS49MHgD6/+5F6un/RzyXev/0+O3X1fvsl3333v8/fUP8dR5/N+n0drH/TWP/yfVOWTv/N+W3TUx739Y25Ypxa4R1dcVKbbr9l86/pTa/nsO3vv4Pz/U1Orj//x3iwMGdWPAHqa945KX+lv/++9/xAdqZhrK/T9x52Ez8/6vOmr9zGJX4wD7n9rf+t9wU9/PFRiY9o4t3TXr/wD6r/s6WL39P7fh1Xl5/yOvPuW80mUD6f+A2v5nbTx7/awNmy+YedbZXWesPmP1Oc3zZy88dNH8RQvmzep5SFB5P7gbBfYQg1v/szE1Mw1Ztrp3/oFXjjwq73/rMzuvL3aNGmD/0/pd/7dZ/6Gu/YdlTU3Zpq6NG8+bU3lf3ZxbeV+5Wp3+B/D7/5Tqf6JVXxezIcsm9s5ffOfPGvP+D+9ad3Kxq2mA/U/vr/+mdz4uEGCQ6//pNTN9+l/6bNNbef8XfuvqrmLXQH//n9Hv+v8n6z8MRntHzRN+/svy/jc+dvaBgeMH+v8/iCdF/52LLrwucPwg/UM8Kfp/z7LtoY/TD9Y/xJOi/1duveefgeMf0j/Ek6L/+34/cVPg+Ez9Qzwp+r925uhfBI4fon+IJ0X/z628+bjA8Vn6h3hS9P/ZByacFjg+W/8QT4r+J//8gUcDx+foH+JJ0f+4+VvPDxyfq3+IJ0X/bcc0vhA43qx/iCdF/9+7vWts4Pg8/UM8Kfp/+elf3RA4Pl//EE+K/h+c/IepgeOH6h/iSdH/l1etvztwfIH+IZ4U/b927dvdgeML9Q/xpOj//hdPOCtwfJH+IZ4U/X/zg0dsDxxfrH+IJ0X/z3z65ZbA8Q/rH+JJ0f/CS6/aGjh+mP4hnhT9b3hr0sLA8Y/oH+JJ0f+qUXMuDxw/XP8QT4r+J3z+hvGB4x/VP8STov+/zD7u+sDxJfqHeFL0f0fHm3sHjrfoH+JJ0f+X7vv7nYHjrfqHeFL0/8hDLdMCx5fqH+JJ0f9BUw/4ZeD4EfqHeFL033XK11YFjh+pf4gnRf/Lt974fOB4m/4hnhT9N/1m3hcCx5fpH+JJ0f+m99+3OHD8KP1DPCn6bz7j/34YON6uf4gnRf/7XZP9f+D40fqHeFL0f/xLt18WOH6M/iGeFP3fO+7xtYHjx+of4knR/84Np+8MHF+uf4gnRf9PXHH+0sDxDv1DPCn6v+H1Pz4dOP4x/UM8Kfqf+d4zfxc4fpz+IZ4U/a9Z+2BH4PjH9Q/xpOj/6Buf/Ffg+Ar9Qzwp+m94fvOawPGV+od4UvT/QsO+VwaOH69/iCdF/7dddO9+geMn6B/iSdH/ZVfduiVw/ET9Qzwp+n/81bELAsdP0j/Ek6L/uw679ILA8U79Qzwp+n+j9cB/BI6frH+IJ0X/v7134YrA8VP0D/Gk6P87j1zzUOD4J/QP8aTo/6IZOw4OHD9V/xBPiv7nnXjq/YHjp+kf4knR/8Sbl4d+iE/qH+JJ0f/KZ//67cDxVfoHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/sMOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXftnjRoMAwD+5Npe/9iqg4ObnURBRLlBsIu5wpUDXergTQoOzhXUuZOlIvgBnBTcHVwEBXFxEUHUL+HqIhappElqSAMdWghHfz944fK8IXnufZP3IZcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAwzQa3OxHzBRb63v6317dvPL5e/ry8ad7L27NnRvk0Wsni+7F7ZqI6EQsZn2T+S7H19686mQbnepxj83OJQuRTDRndf/BPmmX549kN+/kSd52nIiI2ezDxurltf1H4egapSuDYhiTYt6SfA5j6n98t3XzduZX3hqvj+q+SVvfa/3Hl35b5x4no3RlWJv/zEQ5d/X7+6iqX+ed90vfakM5WbtXxsIoHVzP8m1e5yO+Xrp9YTtf16cjLxTZujqXLeERMd/2vHAwab+XrZNJuZ3P+vpkOf9N6/vGxZ+9iFgoawAAMF7Sfm+5of6XPwg01v/nH+48VP8BYHwN0372LB+1+j9f9jfV/+WlZ8P2MgYADmowbKz/u+/Xm+p/9+7mRnsZAwAHtXpjp/53a/X/VNnfVP8fzZx9XXSX7w3+Vg658/+xIr5ViU9U4n8q8anKcar7dyvx35X4dCXfrUMeDgA4ElZ7g+XY+/x/uuxvqv9P3308317GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/GMHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrC3n1AS1IXitY/Aww5i4IEycGA5AxKDhIkgwICknNUgkiQoKAICgqKZFAEFZAgoAQRRQQUFCXnnHMO861hZnAc93B9993vcXXvvdY53V1dXfPv/6+r6pzDWlRVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV1b9L6y+/1tIDA+MOf7T/Pz1/8aKHLnTdTUudcsjVW5683vhzLD9s6ZKTDhlNAwMDYwwMzDB0pbGGrTvxzuefPsbQB2OMvN0Jxht/0EQDg8bkUe2y+38x7ElH3Bn0zrgHHTbs6+0mGRgYGG/onWkuvWjyf20mnK2/1ArLD5/GEW7D7w8MHn5/5K+xh31NduDAwGRvf1jg8zHyuoPeq/c197JvHPxe/dv/Tq2/1AorjeI/tDFH2I1uP7c16uf8xkNmX3GUqRxrlH3l36L1l1p+laH2fJwfGHjivjdfGzLsuD7OwLATxdDj6vhDD+EDAwMTvtcu9X/XUkvPt/RQ/xGP30YfNOLcjcf3MWY664yh59mJhh0nJt5/xLmgqqqq/j1aaun5loHz/4g/COD5/xPLTXdd5/+qqqp/31Zaaun5Bkb6O9/bCwcNTDjieTr/Hzf9i0PewyFXVVXV/2XLr4Tn/3f++zqd/+9a/vl53sMhV1VV1f9la6769vl/nFHO/1OMeJ7O/8c/cc3iw58eNPxlb460yUEj/feE10daPuZIy18bafngkbYz8vpjj7T8lZGWjzP0OVh/0oGBiXcevvyN/6n5qaqq+k9szfmWX2bgn3//n2rE83T+X/vYi058D4dcVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVX1b9dbT15y2d+v/73vwEjXrn7nGtbD/7+Ag8654oYb3rOB/u9o0D///xD/7S99ONR53DNnGBjYcZ33eij1HvRvc636+v+l/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3Giu/7/kiNvpljx1v+GrLvLEmRdOOtJLZ9hm+J2LFz10oW3+3w/9veg/9fr/A9sMGhgY7jvpUMvVllpz7TmGPrjwzCcWHHjnuYWHPrfY5GMOjPn2S+d4+/uso9nwkiPfTvHONs55e/srDTl5zEGjDGKkTjr81H22Xv/l+Ue9nX3072OMEXfmf3G3O4cMGTLkHxYOb9zRvHjE9ke8l1Gdh499jqFjn2v3HXaea7e99p5zmx023WqLrbbYcb4F5l54wUUWWGSh+efacpvtt5h72PfRzNkMb3+f+V+ZswlHnbMnlxp5zkZ9b6Obsxnefc7e3uJU567w6Ig5G+v/cM5mfvc5e/s48fZYZxg8sMnbUzP0n5xl8MCeQx/MM87Qj9Dwdacauu7ik48xMHDk39/o0HvjvPMZHLT/0HXWX36tpf8+sn/eB/95P317Vkccv0ZMyYzDb2caNsQZRnr7E+98/gVjDH3wD9M8wXjjD5poYDjl37kWGXaz5d4j1hsySsMXTzryexo27kGHDft6u0kGBgbGe3tAV5493cjbGQ3B/0T/rfP/P3ktPOidiRo0/Gv4OsO8llphpb//W2/P89C5G3P4soWGLhx1zv4n+6fxzjDWOxg03uVXWnq+oYtH50efryXXveqp4W9uoWGveuu/jULjnfBdxrvSUjjeCd9tvIMnuXKGEfP/PzTeUY51q7z9fXTHnyVHuX23Y92YtIEtrp9u1GPdyqMf4j/sxyPmaJxRVhrdsW7rE5fcbuRj6WiOdasMHfvggZGPdUP/2ZlHHOuGvqPZBg8cOfTBvEMfzD544IyhD+Z7+8F4A1cMffDxzXbafvNBb59fh2937qHbXXLyQW9jPTLlGOuOefSQIbMMH8tEo4x1+OdjhpHP50tNPmwyR7x2xHaHrjpiu7fM/tjsQ44aMmS24duZ+P9guyNeS+M9afxhz404d889ynYHv8t2R7z2n/aHOQa9c+AazfFm+VGON8N/xh3xz/3D19jDvqa/dtgX7i8jr/tfHjNp/x33Xca71NLzLQP77zsfR9p/H9nooPEHBgYWGD7mEbf/pw0a3XjHevfxLg3jHevdxvvCefOs8j8w3oGRxvsPn7NjJx/2WZlj+DqTwBsd3edsxGtHPY69vS8PP+zPMZqx/MNxbIZ/Oo4dMOYYo0z2SI3uZ7bNYf1h96d6Z2tvjH3HMiPmfvAo2/2vfmYb6b0MguPYpKP+PjfonoFBNOcD6zy/x1v/xZwPHvjH3y1GzPmI177bnI/u5/1/mPNp333O/9Wfk+cY/oPs4FHGP/KcD77snP1HzPnYo2z3v5rzEe9lNOeOf5rzsQcGBtOcvzLOsHl7t+Pp6OZ8xGtHzPnQt7jY5GMNLDf0J/Lhcz7baN7HP8z5VP8zn/PxYf1h97d4Z9GKyz17+Yg5H3WO/6s5H/Fe/tU5H3TFO5/zWd5+bqYxBsYee2DPTXfffdd5hn0f8XDeYd/5WDTVEsPm+d3OpaMzGvHad9svZhnN+/4Ho0n/JaNBo87ZqLdTjzXKin+//87W5lz8nBv/u8eiEe/lXzY6iY9F90w/bN7e7eei0c35iNfSeXCKkV4/6u+ha6769s/dE4xyHhzxEjwP3nv4xxYZscnhL3tzlGGOMXz56yMtH3Ok5a+NtHzwSNsZef2xR1r+ykjLh76FsUdaf9BI0zXi/sgfr4lHWj7yoWGSkZaPfGqcdKTf5V4dafncI3003uXPOP9njfib5DajHuTrX62//7vL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+40Vz/f//ht0tuO/Hr+w6/nNzgS+85bXSXnbP0H339/+G+/3D9/1lOu+fSMQbeee5dr88+bJ3/lddnX2jYzS6rjFhv1OuDD1/8L1+ffapTNzxh4P/N9dn/W43YV/+F6+J1/HeXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLG831/68Yfrv/A0usdszwC6EPPmGRu958r8f7Hvcfff3/4b7/cP3/N+9a5IQxBt557l2v/z9sHcf1/2/d+JDVB/4XX/9/xL76L1z/v9x1/neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cXz9/0HDbweu2PjsDY4Yejv08Rr3LD/dez3e97j/1Ov/j3vmDAMDO67zXg+l3oM6/rvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFDb/+/8Cw6/+PaNCSfS4wuP7/v3ej8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOL/qfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+H86f8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6Yxf8z+WMW/8/mj1n8N8gfs/hvmD9m8d8of8zi/7n8MYv/xvljFv9N8scs/pvmj1n8P58/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+O+ePWfx3yR+z+O+aP2bx3y1/zOK/e/6Yxf8L+WMW/y/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMX/S/ljFv998scs/l/OH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/V/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4v/V/DGL/9fyxyz+h+aPWfwPyx+z+H89f8zi/438MYv/4fljFv9v5o9Z/I/IH7P4H5k/ZvH/Vv6Yxf/b+WMW/6Pyxyz+R+ePWfy/kz9m8f9u/pjF/5j8MYv/sfljFv/v5Y9Z/L+fP2bxPy5/zOL/g/wxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/H+aPWfx/lD9m8T8jf8zi/+P8MYv/mfljFv+z8scs/j/JH7P4/zR/zOL/s/wxi//Z+WMW/3Pyxyz+5+aPWfx/nj9m8T8vf8zif37+mMX/gvwxi/+F+WMW/1/kj1n8L8ofs/hfnD9m8b8kf8zi/8v8MYv/r/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4v/r/DGL/5X5Yxb/3+SPWfyvyh+z+P82f8zi/7v8MYv/1fljFv/f549Z/K/JH7P4/yF/zOJ/bf6Yxf+6/DGL//Ve/yFDhgwZ7ZMW/z96/d81i/+f8scs/jfkj1n8b8wfs/j/OX/M4v+X/DGL/035Yxb/v+aPWfz/lj9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvEfkj8m8X/7bv7/nMV/UP6YxX+M/DGL/5j5Yxb/sfLHLP6D88cs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bxnyx/zOI/ef6Yxf99+WMW/ynyxyz+788fs/h/IH/M4j9l/pjFf6r8MYv/B/PHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4v+h/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjFf7b8MYv/7PljFv858scs/h/OH7P4fyR/zOL/0fwxi//H8scs/nPmj1n8P54/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+H8if8zi/8n8MYv/kvljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+n8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/+n88cs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw/kz9m8f9s/pjFf4P8MYv/hvljFv+N8scs/p/LH7P4b5w/ZvHfJH/M4r9p/pjF//P5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/93yxyz+u+ePWfy/kD9m8f9i/pjFf4/8MYv/nvljFv+98scs/nvnj1n8v5Q/ZvHfJ3/M4v/l/DGL/775Yxb//fLHLP77549Z/A/IH7P4fyV/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP5fzR+z+H8tf8zif2j+mMX/sPwxi//X88cs/t/IH7P4H54/ZvH/Zv6Yxf+I/DGL/5H5Yxb/b+WPWfy/nT9m8T8qf8zif3T+mMX/O/ljFv/v5o9Z/I/JH7P4H5s/ZvH/Xv6Yxf/7+WMW/+Pyxyz+P8gfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bx/2H+mMX/R/ljFv8z8scs/j/OH7P4n5k/ZvE/K3/M4v+T/DGL/0/zxyz+P8sfs/ifnT9m8T8nf8zif27+mMX/5/ljFv/z8scs/ufnj1n8L8gfs/hfmD9m8f9F/pjF/6L8MYv/xfljFv9L8scs/r/MH7P4/yp/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP6//tf8B///Nq7/pVn8r2z/xyz+v8kfs/hflT9m8f9t/pjF/3f5Yxb/q/PHLP6/zx+z+F+TP2bx/0P+mMX/2vwxi/91+WMW/+vzxyz+f8wfs/j/KX/M4n9D/pjF/8b8MYv/n/PHLP5/yR+z+N+UP2bx/2v+mMX/b/ljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/IfljEv8xB/LHLP6D8scs/mPkj1n8x8wfs/iPlT9m8R+cP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/ZPljFv/J88cs/u/LH7P4T5E/ZvF/f/6Yxf8D+WMW/ynzxyz+U+WPWfw/mD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/w/lj1n8p88fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfxnzx+z+M+RP2bx/3D+mMX/I/ljFv+P5o9Z/D+WP2bxnzN/zOL/8fwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjF/xP5Yxb/T+aPWfyXzB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvH/VP6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/D+dP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4v+Z/DGL/2fzxyz+G+SPWfw3zB+z+G+UP2bx/1z+mMV/4/wxi/8m+WMW/03zxyz+n88fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/HfNH7P475Y/ZvHfPX/M4v+F/DGL/xfzxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOL/pfwxi/8++WMW/y/nj1n8980fs/jvlz9m8d8/f8zif0D+mMX/K/ljFv8D88cs/gflj1n8D84fs/gfkj9m8f/qcP9x36tx/S/N4v+19n/M4n9o/pjF/7D8MYv/1/PHLP7fyB+z+B+eP2bx/2b+mMX/iPwxi/+R+WMW/2/lj1n8v50/ZvE/Kn/M4n90/pjF/zv5Yxb/7+aPWfyPyR+z+B+bP2bx/17+mMX/+/ljFv/j8scs/j/IH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8f9h/pjF/0f5Yxb/M/LHLP4/zh+z+J+ZP2bxPyt/zOL/k/wxi/9P88cs/j/LH7P4n50/ZvE/J3/M4n9u/pjF/+f5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvH/Rf6Yxf+i/DGL/8X5Yxb/S/LHLP6/zB+z+P8qf8zif2n+mMX/svwxi//lI/l3DcC/Z/G/ov0fs/j/On/M4n9l/pjF/zf5Yxb/q/LHLP6/zR+z+P8uf8zif3X+mMX/9/ljFv9r8scs/n/IH7P4X5s/ZvG/Ln/M4n99/pjF/4/5Yxb/P+WPWfxvyB+z+N+YP2bx/3P+mMX/L/ljFv+b8scs/n/NH7P4/y1/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8ziPyR/TOI/1kD+mMV/UP6YxX+M/DGL/5j5Yxb/sfLHLP6D88cs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bxnyx/zOI/ef6Yxf99+WMW/ynyxyz+788fs/h/IH/M4j9l/pjFf6r8MYv/B/PHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4v+h/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjFf7b8MYv/7PljFv858scs/h/OH7P4fyR/zOL/0fwxi//H8scs/nPmj1n8P54/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+H8if8zi/8n8MYv/kvljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+n8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/+n88cs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw/kz9m8f9s/pjFf4P8MYv/hvljFv+N8scs/p/LH7P4b5w/ZvHfJH/M4r9p/pjF//P5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/93yxyz+u+ePWfy/kD9m8f9i/pjFf4/8MYv/nvljFv+98scs/nvnj1n8v5Q/ZvHfJ3/M4v/l/DGL/775Yxb//fLHLP77549Z/A/IH7P4fyV/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP5fzR+z+H8tf8zif2j+mMX/sPwxi//X88cs/t/IH7P4H54/ZvH/Zv6Yxf+I/DGL/5H5Yxb/b+WPWfy/nT9m8T8qf8zif3T+mMX/O/ljFv/v5o9Z/I/JH7P4H5s/ZvH/Xv6Yxf/7+WMW/+Pyxyz+P8gfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bx/2H+mMX/R/ljFv8z8scs/j/OH7P4n5k/ZvE/K3/M4v+T/DGL/0/zxyz+P8sfs/ifnT9m8T8nf8zif27+mMX/5/ljFv/z8scs/ufnj1n8L8gfs/hfmD9m8f9F/pjF/6L8MYv/xfljFv9L8scs/r/MH7P4/yp/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP6/zh+z+F+ZP2bx/03+mMX/qvwxi/9v88cs/r/LH7P4X50/ZvH/ff6Yxf+a/DGL/x/yxyz+1+aPWfyvyx+z+F+fP2bx/2P+mMX/T/ljFv8b8scs/jfmj1n8/5w/ZvH/S/6Yxf+m/DGL/1/zxyz+f8sfs/jfnD9m8b8lf8zif2v+mMX/tlH8J/p/Pa7/pVn8b2//xyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvEfkj8m8R88kD9m8R+UP2bxHyN/zOI/Zv6YxX+s/DGL/+D8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfwnyx+z+E+eP2bxf1/+mMV/ivwxi//788cs/h/IH7P4T5k/ZvGfKn/M4v/B/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4fyh/zOI/ff6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/nPljFv+P549Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+n8gfs/h/Mn/M4r9k/pjFf6n8MYv/0vljFv9l8scs/svmj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMV/pfwxi/+n8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/+n8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/8/kj1n8P5s/ZvHfIH/M4r9h/pjFf6P8MYv/5/LHLP4b549Z/DfJH7P4b5o/ZvH/fP6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/jvnD9m8d8lf8ziv2v+mMV/t/wxi//u+WMW/y/kj1n8v5g/ZvHfI3/M4r9n/pjFf6/8sRH+Yw0MDPwn+++dP2bZ/7+UP2bx3yd/zOL/5fwxi/+++WMW//3yxyz+++ePWfwPyB+z+H8lf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+X80fs/h/LX/M4n9o/pjF/7D8MYv/1/PHLP7fyB+z+B+eP2bx/2b+mMX/iPwxi/+R+WMW/2/lj1n8v50/ZvE/Kn/M4n90/pjF/zv5Yxb/7+aPWfyPyR+z+B+bP2bx/17+mMX/+/ljFv/j8scs/j/IH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8f9h/pjF/0f5Yxb/M/LHLP4/zh+z+J+ZP2bxPyt/zOL/k/wxi/9P88cs/j/LH7P4n50/ZvE/J3/M4n9u/pjF/+f5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvH/Rf6Yxf+i/DGL/8X5Yxb/S/LHLP6/zB+z+P8qf8zif2n+mMX/svwxi//l+WMW/yvyxyz+v84fs/hfmT9m8f9N/pjF/6r8MYv/b/PHLP6/yx+z+F+dP2bx/33+mMX/mvwxi/8f8scs/tfmj1n8r8sfs/hfnz9m8f9j/pjF/0/5Yxb/G/LHLP435o9Z/P+cP2bx/0v+mMX/pvwxi/9f88cs/n/LH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n873L5v/6vrmjxv9vl/y9n8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+A/JH5P4jz2QP2bxH5Q/ZvEfI3/M4j9m/pjFf6z8MYv/4Pwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/CfLH7P4T54/ZvF/X/6YxX+K/DGL//vzxyz+H8gfs/hPmT9m8Z8qf8zi/8H8MYv/1PljFv9p8scs/tPmj1n8p8sfs/h/KH/M4j99/pjFf4b8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+H88cs/h/JH7P4fzR/zOL/sfwxi/+c+WMW/4/nj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP6fyB+z+H8yf8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/6fyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/6fwxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/z+SPWfw/mz9m8d8gf8ziv2H+mMV/o/wxi//n8scs/hvnj1n8N8kfs/hvmj9m8f98/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+O+aPWfx3yh+z+O+cP2bx3yV/zOK/a/6YxX+3/DGL/+75Yxb/L+SPWfy/mD9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/y/lj1n898kfs/h/OX/M4r9v/pjFf7/8MYv//vljFv8D8scs/l/JH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/V/PHLP5fyx+z+B+aP2bxPyx/zOL/9fwxi/838scs/ofnj1n8v5k/ZvE/In/M4n9k/pjF/1v5Yxb/b+ePWfyPyh+z+B+dP2bx/07+mMX/u/ljFv9j8scs/sfmj1n8v5c/ZvH/fv6Yxf+4/DGL/w/yxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/H+YP2bx/1H+mMX/jPwxi/+P88cs/mfmj1n8z8ofs/j/JH/M4v/T/DGL/8/yxyz+Z+ePWfzPyR+z+J+bP2bx/3n+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfx/kT9m8b8of8zif3H+mMX/kvwxi/8v88cs/r/KH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/r/PHLP5X5o9Z/H+TP2bxvyp/zOL/2/wxi//v8scs/lfnj1n8f58/ZvG/Jn/M4v+H/DGL/7X5Yxb/6/LHLP7X549Z/P+YP2bx/1P+mMX/hvwxi/+N+WMW/z/nj1n8/5I/ZvG/KX/M4v/X/DGL/9/yxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/kPyxyT+4wzkj/3n+0/6zlP5/3P/+f5vN84Y+WMW/zHzxyz+Y+WPWfwH549Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8ziP1n+mMV/8vwxi//78scs/lPkj1n8358/ZvH/QP6YxX/K/DGL/1T5Yxb/D+aPWfynzh+z+E+TP2bxnzZ/zOI/Xf6Yxf9D+WMW/+nzxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/D+cP2bx/0j+mMX/o/ljFv+P5Y9Z/OfMH7P4fzx/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4r9Q/pjFf+H8MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8f9E/pjF/5P5Yxb/JfPHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv8V88cs/ivlj1n8P5U/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv9P549Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/h/Jn/M4v/Z/DGL/wb5Yxb/DfPHLP4b5Y9Z/D+XP2bx3zh/zOK/Sf6YxX/T/DGL/+fzxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4r9T/pjFf+f8MYv/LvljFv9d88cs/rvlj1n8d88fs/h/IX/M4v/F/DGL/x75Yxb/PfPHLP575Y9Z/PfOH7P4fyl/zOK/T/6Yxf/L+WMW/33zxyz+++WPWfz3zx+z+B+QP2bx/0r+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfy/mj9m8f9a/pjF/9D8MYv/YfljFv+v549Z/L+RP2bxPzx/zOL/zfwxi/8R+WMW/yPzxyz+38ofs/h/O3/M4n9U/pjF/+j8MYv/d/LHLP7fzR+z+B+TP2bxPzZ/zOL/vfwxi//388cs/sflj1n8f5A/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zi/8P8MYv/j/LHLP5n5I9Z/H+cP2bxPzN/zOJ/Vv6Yxf8n+WMW/5/mj1n8f5Y/ZvE/O3/M4n9O/pjF/9z8MYv/z/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4v+L/DGL/0X5Yxb/i/PHLP6X5I9Z/H+ZP2bx/1X+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfx/nT9m8b8yf8zi/5v8MYv/VfljFv/f5o9Z/H+XP2bxvzp/zOL/+/wxi/81+WMW/z/kj1n8r80fs/hflz9m8b8+f8zi/8f8MYv/n/LHLP435I9Z/G/MH7P4/zl/zOL/l/wxi/9N+WMW/7/mj1n8/5Y/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxH5I/JvEfdyB/zOI/KH/M4j9G/pjFf8z8MYv/WPljFv/B+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4T5Y/ZvGfPH/M4v++/DGL/xT5Yxb/9+ePWfw/kD9m8Z8yf8ziP1X+mMX/g/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8f9Q/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/w/nj1n8P5I/ZvH/aP6Yxf9j+WMW/znzxyz+H88fs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/D+RP2bx/2T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/T+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf/T+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP6fyR+z+H82f8ziv0H+mMV/w/wxi/9G+WMW/8/lj1n8N84fs/hvkj9m8d80f8zi//n8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP5fyB+z+H8xf8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+X8ofs/jvkz9m8f9y/pjFf9/8MYv/fvljFv/988cs/gfkj1n8v5I/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv+v5o9Z/L+WP2bxPzR/zOJ/WP6Yxf/r+WMW/2/kj1n8D88fs/h/M3/M4n9E/pjF/8j8MYv/t/LHLP7fzh+z+B+VP2bxPzp/zOL/nfwxi/9388cs/sfkj1n8j80fs/h/L3/M4v/9/DGL/3H5Yxb/H+SPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4/zB/zOL/o/wxi/8Z+WMW/x/nj1n8z8wfs/iflT9m8f9J/pjF/6f5Yxb/n+WPWfzPzh+z+J+TP2bxPzd/zOL/8/wxi/95+WMW//Pzxyz+F+SPWfwvzB+z+P8if8zif1H+mMX/4vwxi/8l+WMW/1/mj1n8f5U/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv9f549Z/K/MH7P4/yZ/zOJ/Vf6Yxf+3+WMW/9/lj1n8r84fs/j/Pn/M4n9N/pjF/w/5Yxb/a/PHLP7X5Y9Z/K/PH7P4/zF/zOL/p/wxi/8N+WMW/xvzxyz+f84fs/j/JX/M4n9T/pjF/6/5Yxb/v+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8h+SPSfzHG8gfs/gPyh+z+I+RP2bxHzN/zOI/Vv6YxX9w/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+k+WPWfwnzx+z+L8vf8ziP0X+mMX//fljFv8P5I9Z/KfMH7P4T5U/ZvH/YP6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/D+UP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjF/8P5Yxb/j+SPWfw/mj9m8f9Y/pjFf878MYv/x/PHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/0/kj1n8P5k/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8l88fs/ivkD9m8V8xf8ziv1L+mMX/U/ljFv+V88cs/qvkj1n8V80fs/ivlj9m8f90/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/9n8scs/p/NH7P4b5A/ZvHfMH/M4r9R/pjF/3P5Yxb/jfPHLP6b5I9Z/DfNH7P4fz5/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/jvlj1n8d84fs/jvkj9m8d81f8ziv1v+mMV/9/wxi/8X8scs/l/MH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/l/LHLP775I9Z/L+cP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/r+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf+r+WMW/6/lj1n8D80fs/gflj9m8f96/pjF/xv5Yxb/w/PHLP7fzB+z+B+RP2bxPzJ/zOL/rfwxi/+388cs/kflj1n8j84fs/h/J3/M4v/d/DGL/zH5Yxb/Y/PHLP7fyx+z+H8/f8zif1z+mMX/B/ljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+P8wfs/j/KH/M4n9G/pjF/8f5Yxb/M/PHLP5n5Y9Z/H+SP2bx/2n+mMX/Z/ljFv+z88cs/ufkj1n8z80fs/j/PH/M4n9e/pjF//z8MYv/BfljFv8L88cs/r/IH7P4X5Q/ZvG/OH/M4n9J/pjF/5f5Yxb/X+WPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/X+WMW/yvzxyz+v8kfs/hflT9m8f9t/pjF/3f5Yxb/q/PHLP6/zx+z+F+TP2bx/0P+mMX/2vwxi/91+WMW/+vzxyz+f8wfs/j/KX/M4n9D/pjF/8b8MYv/n/PHLP5/yR+z+N+UP2bx/2v+mMX/b/ljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/IfljEv/xB/LHLP6D8scs/mPkj1n8x8wfs/iPlT9m8R+cP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/ZPljFv/J88cs/u/LH7P4T5E/ZvF/f/6Yxf8D+WMW/ynzxyz+U+WPWfw/mD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/w/lj1n8p88fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfxnzx+z+M+RP2bx/3D+mMX/I/ljFv+P5o9Z/D+WP2bxnzN/zOL/8fwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjF/xP5Yxb/T+aPWfyXzB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvH/VP6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/D+dP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4v+Z/DGL/2fzxyz+G+SPWfw3zB+z+G+UP2bx/1z+mMV/4/wxi/8m+WMW/03zxyz+n88fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/HfNH7P475Y/ZvHfPX/M4v+F/DGL/xfzxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOL/pfwxi/8++WMW/y/nj1n8980fs/jvlz9m8d8/f8zif0D+mMX/K/ljFv8D88cs/gflj1n8D84fs/gfkj9m8f9q/pjF/2v5Yxb/Q/PHLP6H5Y9Z/L+eP2bx/0b+mMX/8Pwxi/8388cs/kfkj1n8j8wfs/h/K3/M4v/t/DGL/1H5Yxb/o/PHLP7fyR+z+H83f8zif0z+mMX/2Pwxi//38scs/t/PH7P4H5c/ZvH/Qf6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/D/PHLP4/yh+z+J+RP2bx/3H+mMX/zPwxi/9Z+WMW/5/kj1n8f5o/ZvH/Wf6Yxf/s/DGL/zn5Yxb/c/PHLP4/zx+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/y/yxyz+F+WPWfwvzh+z+F+SP2bx/2X+mMX/V/ljFv9L88cs/pflj1n8L88fs/hfkT9m8f91/pjF/8r8MYv/b/LHLP5X5Y9Z/H+bP2bx/13+mMX/6vwxi//v88cs/tfkj1n8/5A/ZvG/Nn/M4n9d/pjF//r8MYv/H/PHLP5/yh+z+N+QP2bxvzF/zOL/5/wxi/9f8scs/jflj1n8/5o/ZvH/W/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMV/SP6YxH+Cgfwxi/+g/DGL/xj5Yxb/MfPHLP5j5Y9Z/Afnj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+E+SP2bxnzR/zOI/Wf6YxX/y/DGL//vyxyz+U+SPWfzfnz9m8f9A/pjFf8r8MYv/VPljFv8P5o9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjF/0P5Yxb/6fPHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n8P5w/ZvH/SP6Yxf+j+WMW/4/lj1n858wfs/h/PH/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/0T+mMX/k/ljFv8l88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfw/lT9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/0/nj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+H8mf8zi/9n8MYv/BvljFv8N88cs/hvlj1n8P5c/ZvHfOH/M4r9J/pjFf9P8MYv/5/PHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/8u+WMW/13zxyz+u+WPWfx3zx+z+H8hf8zi/8X8MYv/HvljFv8988cs/nvlj1n8984fs/h/KX/M4r9P/pjF/8v5Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvH/Sv6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/L+aP2bx/1r+mMX/0Pwxi/9h+WMW/6/nj1n8v5E/ZvE/PH/M4v/N/DGL/xH5Yxb/I/PHLP7fyh+z+H87f8zif1T+mMX/6Pwxi/938scs/t/NH7P4H5M/ZvE/Nn/M4v+9/DGL//fzxyz+x+WPWfx/kD9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOL/w/wxi/+P8scs/mfkj1n8f5w/ZvE/M3/M4n9W/pjF/yf5Yxb/n+aPWfx/lj9m8T87f8zif07+mMX/3Pwxi//P88cs/uflj1n8z88fs/hfkD9m8b8wf8zi/4v8MYv/RfljFv+L88cs/pfkj1n8f5k/ZvH/Vf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/H+dP2bxvzJ/zOL/m/wxi/9V+WMW/9/mj1n8f5c/ZvG/On/M4v/7/DGL/zX5Yxb/P+SPWfyvzR+z+F+XP2bxvz5/zOL/x/wxi/+f8scs/jfkj1n8b8wfs/j/OX/M4v+X/DGL/035Yxb/v+aPWfz/lj9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvEfkj8m8Z9wIH/M4j8of8ziP0b+mMV/zPwxi/9Y+WMW/8H5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/hPlj9m8Z88f8zi/778MYv/FPljFv/3549Z/D+QP2bxnzJ/zOI/Vf6Yxf+D+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bx/1D+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/D+ePWfw/kj9m8f9o/pjF/2P5Yxb/OfPHLP4fzx+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8P5E/ZvH/ZP6YxX/J/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv9P5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/9P5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/p/JH7P4fzZ/zOK/Qf6YxX/D/DGL/0b5Yxb/z+WPWfw3zh+z+G+SP2bx3zR/zOL/+fwxi/9m+WMW/83zxyz+W+SPWfy3zB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P475Q/ZvHfOX/M4r9L/pjFf9f8MYv/bvljFv/d88cs/l/IH7P4fzF/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP5fyh+z+O+TP2bx/3L+mMV/3/wxi/9++WMW//3zxyz+B+SPWfy/kj9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/6/mj1n8v5Y/ZvE/NH/M4n9Y/pjF/+v5Yxb/b+SPWfwPzx+z+H8zf8zif0T+mMX/yPwxi/+38scs/t/OH7P4H5U/ZvE/On/M4v+d/DGL/3fzxyz+x+SPWfyPzR+z+H8vf8zi//38MYv/cfljFv8f5I9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88eG+4+Yqv9Y/9Pyxyz7/+n5Yxb/H+aPWfx/lD9m8T8jf8zi/+P8MYv/mfljFv+z8scs/j/JH7P4/zR/zOL/s/wxi//Z+WMW/3Pyxyz+5+aPWfx/nj9m8T8vf8zif37+mMX/gvwxi/+F+WMW/1/kj1n8L8ofs/hfnD9m8b8kf8zi/8v8MYv/r/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4v/r/DGL/5X5Yxb/3+SPWfyvyh+z+P82f8zi/7v8MYv/1fljFv/f549Z/K/JH7P4/yF/zOJ/bf6Yxf+6/DGL//X5Yxb/P+aPWfz/lD9m8b8hf8zif2P+mMX/z/ljFv+/5I9Z/G/KH7P4/zV/zOL/t/wxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/kPwxif9EA/ljFv9B+WMW/zHyxyz+Y+aPWfzHyh+z+A/OH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMV/svwxi//k+WMW//flj1n8p8gfs/i/P3/M4v+B/DGL/5T5Yxb/qfLHLP4fzB+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL/4fyxyz+0+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4fzh/zOL/kfwxi/9H88cs/h/LH7P4z5k/ZvH/eP6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi/4n8MYv/J/PHLP5L5o9Z/JfKH7P4L50/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8V8ofs/h/Kn/M4r9y/pjFf5X8MYv/qvljFv/V8scs/p/OH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8f9M/pjF/7P5Yxb/DfLHLP4b5o9Z/DfKH7P4fy5/zOK/cf6YxX+T/DGL/6b5Yxb/z+ePWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4r9j/pjFf6f8MYv/zvljFv9d8scs/rvmj1n8d8sfs/jvnj9m8f9C/pjF/4v5Yxb/PfLHLP575o9Z/PfKH7P4750/ZvH/Uv6YxX+f/DGL/5fzxyz+++aPWfz3yx+z+O+fP2bxPyB/zOL/lfwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+H81f8zi/7X8MYv/ofljFv/D8scs/l/PH7P4fyN/zOJ/eP6Yxf+b+WMW/yPyxyz+R+aPWfy/lT9m8f92/pjF/6j8MYv/0fljFv/v5I9Z/L+bP2bxPyZ/zOJ/bP6Yxf97+WMW/+/nj1n8j8sfs/j/IH/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/h/ljFv8f5Y9Z/M/IH7P4/zh/zOJ/Zv6Yxf+s/DGL/0/yxyz+P80fs/j/LH/M4n92/pjF/5z8MYv/ufljFv+f549Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/xf5Yxb/i/LHLP4X549Z/C/JH7P4/zJ/zOL/q/wxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P86f8zif2X+mMX/N/ljFv+r8scs/r/NH7P4/y5/zOJ/df6Yxf/3+WMW/2vyxyz+f8gfs/hfmz9m8b8uf8zif33+mMX/j/ljFv8/5Y9Z/G/IH7P435g/ZvH/c/6Yxf8v+WMW/5vyxyz+f80fs/j/LX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOI/JH9M4j/xQP6YxX9Q/pjFf4z8MYv/mPljFv+x8scs/oPzxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvGfLH/M4j95/pjF/335Yxb/KfLHLP7vzx+z+H8gf8ziP2X+mMV/qvwxi/8H88cs/lPnj1n8p8kfs/hPmz9m8Z8uf8zi/6H8MYv/9PljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi//s+WMW/znyxyz+H84fs/h/JH/M4v/R/DGL/8fyxyz+c+aPWfw/nj9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4fyJ/zOL/yfwxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP6fyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/6fzxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/D+TP2bx/2z+mMV/g/wxi/+G+WMW/43yxyz+n8sfs/hvnD9m8d8kf8ziv2n+mMX/8/ljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/3fLHLP67549Z/L+QP2bx/2L+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfy/lD9m8d8nf8zi/+X8MYv/vvljFv/98scs/vvnj1n8D8gfs/h/JX/M4n9g/pjF/6D8MYv/wfljFv9D8scs/l/NH7P4fy1/zOJ/aP6Yxf+w/DGL/9fzxyz+38gfs/gfnj9m8f9m/pjF/4j8MYv/kfljFv9v5Y9Z/L+dP2bxPyp/zOJ/dP6Yxf87+WMW/+/mj1n8j8kfs/gfmz9m8f9e/pjF//v5Yxb/4/LHLP4/yB+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvH/Yf6Yxf9H+WMW/zPyxyz+P84fs/ifmT9m8T8rf8zi/5P8MYv/T/PHLP4/yx+z+J+dP2bxPyd/zOJ/bv6Yxf/n+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bx/0X+mMX/ovwxi//F+WMW/0vyxyz+v8wfs/j/Kn/M4n9p/pjF/7L8MYv/5fljFv8r8scs/r/OH7P4X5k/ZvH/Tf6Yxf+q/DGL/2/zxyz+v8sfs/hfnT9m8f99/pjF/5r8MYv/H/LHLP7X5o9Z/K/LH7P4X58/ZvH/Y/6Yxf9P+WMW/xvyxyz+N+aPWfz/nD9m8f9L/pjF/6b8MYv/X/PHLP5/yx+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/gPyR+T+E8ykD9m8R+UP2bxHyN/zOI/Zv6YxX+s/DGL/+D8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfwnyx+z+E+eP2bxf1/+mMV/ivwxi//788cs/h/IH7P4T5k/ZvGfKn/M4v/B/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4fyh/zOI/ff6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/h/PHLP4fyR/7/9ijBwQwEAMIgLWR2nZjOynPtm3btm3btm3btm1/YF9wO/OFafkf6D9q+R/kP2r5H+w/avkf4j9q+R/qP2r5H+Y/avkf7j9q+R/hP2r5H+k/avkf5T9q+R/tP2r5H+M/avkf6z9q+R/nP2r5H+8/avmf4D9q+Z/oP2r5n+Q/avmf7D9q+Z/iP2r5n+o/avn/l/+o5f/f/qOW///4j1r+/+s/avn/n/+o5f///qOW/2n8Ry3/0/qPWv6n8x+1/E/vP2r5n8F/1PI/o/+o5X8m/1HL/8z+o5b/WfxHLf+z+o9a/mfzH7X8z+4/avmfw3/U8j+n/6jlfy7/Ucv/3P6jlv95/Ect//P6j1r+5/MftfzP7z9q+V/Af9Tyv6D/qOV/If9Ry//C/qOW/0X8Ry3/i/qPWv4X8x+1/C/uP2r5X8J/1PK/pP+o5X8p/1HL/9L+o5b/ZfxHLf/L+o9a/pfzH7X8L+8/avlfwX/U8r+i/6jlfyX/Ucv/yv6jlv9V/Ect/6v6j1r+V/Mftfyv7j9q+V/Df9Tyv6b/qOV/Lf9Ry//a/qOW/3X8Ry3/6/qPWv7X8x+1/K/vP2r538B/1PK/of+o5X8j/1HL/8b+o5b/TfxHLf+b+o9a/jfzH7X8b+4/avnfwn/U8r+l/6jlfyv/Ucv/1v6jlv9t/Ect/9v6j1r+t/Mftfxv7z9q+d/Bf9Tyv6P/qOV/J/9Ry//O/qOW/138Ry3/u/qPWv538x+1/O/uP2r538N/1PK/p/+o5X8v/1HL/97+o5b/ffxHLf/7+o9a/vfzH7X87+8/avk/wH/U8n+g/6jl/yD/Ucv/wf6jlv9D/Ect/4f6j1r+D/Mftfwf7j9q+T/Cf9Tyf6T/qOX/KP9Ry//R/qOW/2P8Ry3/x/qPWv6P8x+1/B/vP2r5P8F/1PJ/ov+o5f8k/1HL/8n+o5b/U/xHLf+n+o9a/k/zH7X8n+4/avk/w3/U8n+m/6jl/yz/Ucv/2f6jlv9z/Ect/+f6j1r+z/Mftfyf7z9q+b/Af9Tyf6H/qOX/Iv9Ry//F/qOW/0v8Ry3/l/qPWv4v8x+1/F/uP2r5v8J/1PJ/pf+o5f8q/1HL/9X+o5b/a/xHLf/X+o9a/q/zH7X8X+8/avm/wX/U8n+j/6jl/yb/Ucv/zf6jlv9b/Ect/7f6j1r+b/Mftfzf7j9q+b/Df9Tyf6f/qOX/Lv9Ry//d/qOW/3v8Ry3/9/qPWv7v8x+1/N/vP2r5f8B/1PL/oP+o5f8h/1HL/8P+o5b/R/xHLf+P+o9a/h/zH7X8P+4/avl/wn/U8v+k/6jl/yn/Ucv/0/6jlv9n/Ect/8/6j1r+n/Mftfw/7z9q+X/Bf9Ty/6L/qOX/Jf9Ry//L/qOW/1f8Ry3/r/qPWv5f8x+1/L/uP2r5f8N/1PL/pv+o5f8t/1HL/9v+o5b/d/xHLf/v+o9a/t/zH7X8v+8/avn/wH/U8v+h/6jl/yP/Ucv/x/6jlv9P/Ect/5/6j0r+B3zBf9Ty/0X/Ucv/l/xHLf9f9h+1/H/Ff9Ty/1X/Ucv/1/xHLf9f9x+1/H/Df9Ty/03/Ucv/t/xHLf/f9h+1/H/Hf9Ty/13/Ucv/9/xHLf/f9x+1/A/wH7X8/8B/1PL/Q/9Ry/+P/Ect/z/2H7X8/8R/1PL/U/9Ry//P/Ect/z/3H7X8/8J/1PL/S/9Ry/+v/Ect/7/2H7X8/8Z/1PL/W/9Ry//v/Ect/7/3H7X8/8F/1PL/R/9Ry/+f/Ect/3/2H7X8/8V/1PL/V/9Ry//f/Ect/3/3H7X8/8N/1PL/T/9Ry/9A/1HL/yD/Ucv/YP9Ry/8Q/1HL/1D/Ucv/MP9Ry/9w/1HL/wj/Ucv/SP9Ry/8o/1HL/2j/Ucv/GP9Ry/9Y/1HL/zj/Ucv/eP9Ry/8E/1HL/0T/Ucv/JP9Ry/9k/1HL/xT/Ucv/VP/R5+4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+YwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2LV/16ihOADgL73+sLXVDiIu0k5SR7lBcBBzhZSCLi3igYsgOFd0t1NFXfwXFJxFEMTJSbs4VRdH/RdcikUquSTlkQY6nBCO+3zgQfJ9Iff6vu/elyYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0o59t9kI4VZ5tH+v/eO3Z1a/f09c7uw9e3ZlbyYrojcWye/mwJoQwEcJy3jdZXHJm6/2bifxkIr7v6dm5ZCEkneZRPXx8wrCrzw/J0biT50UbOBtCmM0Pnm5c2Tp5FsZXP13LymnslHlLihyGqfI4btNFW/pdtMb1EV+btPV3/dq/9Latzx4l/XRtvZb/UBwXuat/v8dVfZ3fe/ntem0qJ2vflZHQT7Obeb6b9/kQZjbvfzgs9vWZUBSKfF+dy7fwEMJ823lhOGmv28vXa3U+SHqyPVnlv2FddH7sPsprw0JVAwCA0ZL2uqsN9b96INBY/z9f/rKq/gPA6FpPe90QPecbBJPt+aq/qf5f3Dv/pMUhAwBDytYb6//R+/Wm+t9/sfiuxSEDAEPauDWo/9O1+n+u6m+q/ys/P+2U3dV7g7/RLQe/HyvjB1G8E8X/RPGp6D7x9dNRfD+Kz0TjPfjf8wEA42Cjm62G4///X6j6m+r/3u27Sy0OGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6xAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOSAAAAAAE/X/djkABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgoAAD//0+Ao/Q=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="0cec7f008524710100e2ff22"], 0x844000) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r4, 0x89e1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, 0x0, &(0x7f00000010c0)) mkdirat(0xffffffffffffff9c, 0x0, 0x67) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) 10m49.055987085s ago: executing program 6 (id=1861): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40), 0x0, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10m32.616085426s ago: executing program 34 (id=1861): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40), 0x0, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10.936096586s ago: executing program 1 (id=3311): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x1c02}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x21c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x204, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10.41056819s ago: executing program 1 (id=3313): syz_open_dev$video4linux(&(0x7f0000000200), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000840)={0x20f, 0x2, 0x0, {{0x51f, 0xce, 0x0, 0x0, {}, 0x2810000, 0x8, 0x1, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x83\x00\xb5\x00\x00+YN\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\x00\x00\x9f\xd2\x8f43\xb6\x02\"K\xdd_MR\xb8=a\xcb\v!\x89A\x16\x95\xef\xe2\xefH\xb2\x11\x1d\x1c6\x04\x82\xe6\xc7\x8e\x1e{\xb8\x8e7\x9d*\xec\xff\xfe\xc3\xa1\x9e^\x17<\x8b\x04\xcfr\f\xa4+\xfd3\x8c\xb7\x0f\xdaP+\x89/\xb0\xdd\x83{\x9e\xc6S\x05\x0f\r|\xdcE\x99\x7f\xa6w;\xbf\xe1\xbdp\xee\x03\xe4\xaf\xb4\x99\xa2\x9b\xd3\xde\xce/F@\xf8V\x02\x1c\xde\xe9\xdcoR\x1e{\xc0jv\xa9\x1eg\xba\x8d\xf3\xcc%:\xbcY\x1a\x15\a\x7f\x89\x92\xeaWv\x80\xff\xec\x87\xa9\x06\xd0(\x8am\xbf2\xa2$\x01T6{\x1e\x05v\x1a;\xac\xde\xab\xba\x82\xb3\xccLFl\xe0\x0e&\x81\xb2\xffk\x94\"\xd8\x01\b\n\x96\xc8\xc8r\xa6\xad\xd7\xd7 D3\x82\xaea\xb3U89\xde#4]\v\xdd\xcc\t\x878\x97\x03\xf81\xa0\x948\x91\xf0\xfa\x9eo\x9b\xb5w\x86\xd9R\xc2\x9a\x8c\xbd\xb8M\xd5\xed~\xd8\xab\xf6\x0f\xacKC\x1b\xbfo\x0e\xc9\x006\xf5\xe4', 0x2f19639a8414712, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8r\x9aE\x1b4\a\xdb\xda\xb2\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00\x13\x12D\xf7s=\xa4*&%\x00\x00\x00_\ro \xe5\xfd\xac\xfb\xa5l\xf3\xe7\xa3\xc0\x14\x19N\x13\xa4\x92G\x7f\x92\'\xe4{\x1a^,)\xee\xec\x05}d\xc2\xb5\x9e\\\xa6\a\x1e\x06l\xa4\x86,\xff\b\x9f\xd5\x9fo\xb8\x8cLi\x14\xd0\x9a\xf7\xf6'}, 0xfffffed4, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x20f) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) read$dsp(r1, &(0x7f0000000340)=""/36, 0x24) 8.900717271s ago: executing program 3 (id=3314): syz_open_dev$video4linux(&(0x7f0000000200), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000840)={0x20f, 0x2, 0x0, {{0x51f, 0xce, 0x0, 0x0, {}, 0x2810000, 0x8, 0x1, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x83\x00\xb5\x00\x00+YN\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\x00\x00\x9f\xd2\x8f43\xb6\x02\"K\xdd_MR\xb8=a\xcb\v!\x89A\x16\x95\xef\xe2\xefH\xb2\x11\x1d\x1c6\x04\x82\xe6\xc7\x8e\x1e{\xb8\x8e7\x9d*\xec\xff\xfe\xc3\xa1\x9e^\x17<\x8b\x04\xcfr\f\xa4+\xfd3\x8c\xb7\x0f\xdaP+\x89/\xb0\xdd\x83{\x9e\xc6S\x05\x0f\r|\xdcE\x99\x7f\xa6w;\xbf\xe1\xbdp\xee\x03\xe4\xaf\xb4\x99\xa2\x9b\xd3\xde\xce/F@\xf8V\x02\x1c\xde\xe9\xdcoR\x1e{\xc0jv\xa9\x1eg\xba\x8d\xf3\xcc%:\xbcY\x1a\x15\a\x7f\x89\x92\xeaWv\x80\xff\xec\x87\xa9\x06\xd0(\x8am\xbf2\xa2$\x01T6{\x1e\x05v\x1a;\xac\xde\xab\xba\x82\xb3\xccLFl\xe0\x0e&\x81\xb2\xffk\x94\"\xd8\x01\b\n\x96\xc8\xc8r\xa6\xad\xd7\xd7 D3\x82\xaea\xb3U89\xde#4]\v\xdd\xcc\t\x878\x97\x03\xf81\xa0\x948\x91\xf0\xfa\x9eo\x9b\xb5w\x86\xd9R\xc2\x9a\x8c\xbd\xb8M\xd5\xed~\xd8\xab\xf6\x0f\xacKC\x1b\xbfo\x0e\xc9\x006\xf5\xe4', 0x2f19639a8414712, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8r\x9aE\x1b4\a\xdb\xda\xb2\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00\x13\x12D\xf7s=\xa4*&%\x00\x00\x00_\ro \xe5\xfd\xac\xfb\xa5l\xf3\xe7\xa3\xc0\x14\x19N\x13\xa4\x92G\x7f\x92\'\xe4{\x1a^,)\xee\xec\x05}d\xc2\xb5\x9e\\\xa6\a\x1e\x06l\xa4\x86,\xff\b\x9f\xd5\x9fo\xb8\x8cLi\x14\xd0\x9a\xf7\xf6'}, 0xfffffed4, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x20f) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) read$dsp(r1, &(0x7f0000000340)=""/36, 0x24) 8.315287376s ago: executing program 7 (id=3316): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x1c02}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x21c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x204, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.101072032s ago: executing program 1 (id=3317): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f31", 0x38}, {&(0x7f00000002c0)="7c1a2d6c68f2b19af5ad5b3fbc13c1398f392d4e4912a47fd97c06e88e711432b971d95d781d72632d1369d5bc4db51e6dedbc9dd35219282a22db679e0734d6f64f608f7db61ee9dcba4b43f11d902fb9ba9566c7f94f39dbcae20665c5e1172a2ea6060acb92714a17ee6714dc06068795e0892d041d8c2f35", 0x7a}, {&(0x7f0000000540)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2", 0x2c}, {&(0x7f0000000980)="daa783cd66e6cbbbe761ae363ca91d0f8a1045df4f9a9cd7a8add41c38c00df6cea93ba7396c327f6ae2bcb858d08a21269be6091e8e362d6512bc51b29efdbb313d21d11c4b0a6bb9acd9d29146205ecd9ebff1ea64713b1d959b2bf125b17cece0048ad5", 0x65}, {0x0}, {&(0x7f0000000b40)="2aa89dcc6d20cf5a732764f89bf238658cba80614e317b8304dae54c36f6e447b2b6cc36779a2bc14605bdf8b1beccc5fde0f08e0363a89d728c719de27252ce4ddb980418e0a63877d1", 0x4a}], 0x7, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0xa0}}], 0x48}}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xdbc2, 0x2}, 0x80, 0x0}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.999843205s ago: executing program 2 (id=3318): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x1c02}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x21c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x204, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.907402777s ago: executing program 3 (id=3319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f0000000300)="77cccb0deedbb94fc459781afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba20947442cb766e4a9666c979fc45e14a15eb8cab8dce71eaea08ea87db5609774561bea20207eff207d81c7b175cfcb3e448d7fcac7a44402e", 0x5e}], 0x3, 0x4, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.664061734s ago: executing program 2 (id=3320): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x1c02}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500000000"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x204, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.517112508s ago: executing program 5 (id=3321): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe0, 0x29, 0x4, {0x4, 0x18, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x54, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4]}}, @ra={0x5, 0x2, 0xa7e}, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93}]}}}, @hoplimit={{0x14}}, @hopopts={{0x68, 0x29, 0x36, {0x5e, 0x9, '\x00', [@generic={0xff, 0x1f, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast2]}}}], 0x1a0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.466517879s ago: executing program 7 (id=3322): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x21c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x204, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.256227115s ago: executing program 3 (id=3323): syz_open_dev$video4linux(&(0x7f0000000200), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) read$dsp(r1, &(0x7f0000000340)=""/36, 0x24) 7.246537255s ago: executing program 1 (id=3324): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x40000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9c8af77a75979705a", 0xd) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 7.021084781s ago: executing program 2 (id=3325): syz_usb_connect(0x4, 0x36, &(0x7f0000000280)=ANY=[], 0x0) openat$sequencer(0xffffff9c, &(0x7f0000002400), 0x800, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 6.939903444s ago: executing program 5 (id=3326): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb", 0x61}, {&(0x7f0000000780)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c71", 0x20}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.917697994s ago: executing program 7 (id=3327): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$kcm(0x2, 0xa, 0x2) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r4, r2, 0x0, 0x100000000) 6.724524089s ago: executing program 5 (id=3328): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x1c02}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a700"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x204, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.617159592s ago: executing program 7 (id=3329): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x40000) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000084) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000b40)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9c8af77a7597970", 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20048805}, 0x800) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 6.255507592s ago: executing program 2 (id=3330): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000900)={0x40, 0xf}, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x400, 0x40}}, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x7f}, 0x0, 0x0, &(0x7f0000000c40)={0x40, 0x19, 0x2, "9029"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0xa64e}, 0x0, 0x0, 0x0}) 5.804639514s ago: executing program 3 (id=3331): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e", 0xc}, {&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970ac14acdadd04357bdd44bc926d0adef887b2e25c2f435ce79bac1d1f473c3a49a12aa5c5cfa4bfa4fd2470308ed259e62c218aee67006a3ca187c9aa13a806d99b2275341fd6022940537b1cb1fd2389f417ea92c6e77a09a9d09a98c4e2f0912d36b47588ff991aa98c3c650055bacb669aaf68dd4f8a7b43569c9af62e7cee6ba05278fe8642feafa5c436cb13fa45b3cdf750f8956c493acf7c561b12259331a363c74fb5f2947652ced415b0986b673680e8ad7bad823ff84c30681cbe45114510d9aa6f423f212bcdf1c244178ae31474d9f176707e9c481057f72d489372f7daeba51e3ea86895c8eed109566ad19f3957d0df21a671fce2d674c207d86", 0x1d1}, {&(0x7f0000001440)="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", 0x400}, {&(0x7f00000025c0)}], 0x5}}], 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 4.519031658s ago: executing program 5 (id=3332): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004090) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x1c02}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x21c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x204, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.48041675s ago: executing program 1 (id=3333): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000500)={r0, 0x0, 0x100, &(0x7f0000000440)={@align=0xf, {0x4, 0x81, 0x7ff, 0x2e48}}, 0x7, 0x0, &(0x7f00000004c0)=0x9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) syz_open_dev$dri(0x0, 0x1, 0x88300) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74b", 0x75, 0x840, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100370c57411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c957102358770b0d8425f098be9383b5e487e7165e847191d5e95233e", 0xf6}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f337418", 0x82}, {&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dccc", 0x66}, {&(0x7f0000003b80)="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", 0xda9}, {&(0x7f0000000740)}], 0x5}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000000c0)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000580)=0x40) 3.398905949s ago: executing program 5 (id=3334): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x108, 0x29, 0x4, {0x4, 0x1d, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x6f, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4]}}, @ra={0x5, 0x2, 0xa7e}, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x10, "e80ee304ecb784ec4655260cecea14e4"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x50, 0x29, 0x36, {0x5e, 0x6, '\x00', [@generic={0xff, 0x18, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5f"}, @pad1, @pad1, @padn, @calipso={0x7, 0x8, {0x0, 0x0, 0x7, 0x6}}, @generic={0x8}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast1]}}}], 0x1c8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.397342339s ago: executing program 2 (id=3335): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f31", 0x38}, {&(0x7f00000002c0)="7c1a2d6c68f2b19af5ad5b3fbc13c1398f392d4e4912a47fd97c06e88e711432b971d95d781d72632d1369d5bc4db51e6dedbc9dd35219282a22db679e0734d6f64f608f7db61ee9dcba4b43f11d902fb9ba9566c7f94f39dbcae20665c5e1172a2ea6060acb92714a17ee6714dc06068795e0892d041d8c2f35", 0x7a}, {&(0x7f0000000540)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2", 0x2c}, {&(0x7f0000000980)="daa783cd66e6cbbbe761ae363ca91d0f8a1045df4f9a9cd7a8add41c38c00df6cea93ba7396c327f6ae2bcb858d08a21269be6091e8e362d6512bc51b29efdbb313d21d11c4b0a6bb9acd9d29146205ecd9ebff1ea64713b1d959b2bf125b17cece0048ad5", 0x65}, {0x0}, {&(0x7f0000000b40)="2aa89dcc6d20cf5a732764f89bf238658cba80614e317b8304dae54c36f6e447b2b6cc36779a2bc14605bdf8b1beccc5fde0f08e0363a89d728c719de27252ce4ddb980418e0a63877d1", 0x4a}], 0x7, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0xa0}}], 0x48}}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xdbc2, 0x2}, 0x80, 0x0}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.367894629s ago: executing program 1 (id=3336): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe0, 0x29, 0x4, {0x4, 0x18, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x54, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93}]}}}, @hoplimit={{0x14}}, @hopopts={{0x68, 0x29, 0x36, {0x5e, 0x9, '\x00', [@generic={0xff, 0x1f, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast2]}}}], 0x1a0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.280022331s ago: executing program 7 (id=3337): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x21c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x204, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.628614869s ago: executing program 2 (id=3338): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x100000000000004) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_usb_connect(0x4, 0xffffffffffffffb2, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8894}, 0x8040) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, 0x0) sendmsg$TIPC_CMD_GET_NODES(r4, 0x0, 0x20040891) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mount_setattr(r5, &(0x7f0000000080)='./file0/../file0\x00', 0x8800, &(0x7f0000000240)={0x70, 0x0, 0x40000}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) 2.60651683s ago: executing program 3 (id=3339): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb", 0x61}, {&(0x7f0000000780)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c71", 0x20}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.402802035s ago: executing program 7 (id=3340): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x0, 0x0, 0x800000000000, 0x100}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x20008851) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x44014) recvmmsg(r7, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0}, 0x800}, {{&(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000b00)=""/227, 0xe3}, {&(0x7f0000001e00)=""/4089, 0xff9}, {&(0x7f00000005c0)=""/18, 0x12}], 0x3, &(0x7f0000000500)=""/34, 0x22}, 0x81}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/32, 0x20}, {&(0x7f0000000840)=""/143, 0x8f}], 0x2}, 0x3}], 0x3, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="200029bd7000fcffffff1400000018000180140002006e657464657673696d300000000000000500190001000000"], 0x34}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESHEX=r9, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) 1.801441111s ago: executing program 3 (id=3341): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000900)={0x40, 0xf}, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x400, 0x40}}, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x7f}, 0x0, 0x0, &(0x7f0000000c40)={0x40, 0x19, 0x2, "9029"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0xa64e}, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="00141000"], 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1}, 0x0, 0x0}) 0s ago: executing program 5 (id=3342): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x400) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b, 0x4}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): mode: none. [ 1369.510911][T15314] ext4 filesystem being mounted at /501/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1369.584107][T15325] Cannot find add_set index 0 as target [ 1369.601998][ T4317] rc_core: IR keymap rc-hauppauge not found [ 1369.618009][ T4317] Registered IR keymap rc-empty [ 1369.623105][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1369.666636][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1369.707448][ T4317] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1369.769601][ T4317] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30 [ 1369.829895][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1369.887058][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1370.022287][T15328] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2550: bg 0: block 112: padding at end of block bitmap is not set [ 1370.584166][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1370.591608][T15328] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 1370.592190][T15329] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm syz.5.2550: lblock 0 mapped to illegal pblock 0 (length 1) [ 1370.604010][T15328] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1370.604010][T15328] [ 1370.604033][T15328] EXT4-fs (loop5): Total free blocks count 0 [ 1370.604049][T15328] EXT4-fs (loop5): Free/Dirty block details [ 1370.604066][T15328] EXT4-fs (loop5): free_blocks=0 [ 1370.604081][T15328] EXT4-fs (loop5): dirty_blocks=64 [ 1370.604096][T15328] EXT4-fs (loop5): Block reservation details [ 1370.604109][T15328] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 1370.639415][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1370.679050][T15329] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1370.687405][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1370.703570][T15332] tipc: Enabled bearer , priority 0 [ 1370.734784][T15333] device syzkaller0 entered promiscuous mode [ 1370.776758][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1370.788806][T15332] tipc: Resetting bearer [ 1370.835262][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1370.868799][T15331] tipc: Resetting bearer [ 1370.888399][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1370.936798][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1370.944829][T15331] tipc: Disabling bearer [ 1370.987036][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1371.028179][ T4317] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1371.042499][ T4317] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1371.067058][ T4317] usb 3-1: USB disconnect, device number 34 [ 1371.269658][T15347] usb usb8: usbfs: process 15347 (syz.3.2557) did not claim interface 0 before use [ 1371.520881][T15350] netlink: 'syz.3.2557': attribute type 1 has an invalid length. [ 1372.631290][T15371] loop2: detected capacity change from 0 to 1024 [ 1372.689264][T15371] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1372.705019][T15371] ext4 filesystem being mounted at /509/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1373.065824][T15376] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2565: bg 0: block 112: padding at end of block bitmap is not set [ 1373.163691][T15376] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 1373.176272][T15376] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1373.176272][T15376] [ 1373.186135][T15376] EXT4-fs (loop2): Total free blocks count 0 [ 1373.192540][T15376] EXT4-fs (loop2): Free/Dirty block details [ 1373.198735][T15376] EXT4-fs (loop2): free_blocks=0 [ 1373.203831][T15376] EXT4-fs (loop2): dirty_blocks=64 [ 1373.209258][T15376] EXT4-fs (loop2): Block reservation details [ 1373.215350][T15376] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 1373.224174][T15377] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.2565: lblock 0 mapped to illegal pblock 0 (length 1) [ 1373.336432][T15377] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1373.350641][T15376] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.2565: lblock 0 mapped to illegal pblock 0 (length 1) [ 1374.276612][T13681] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1374.616926][T13681] usb 8-1: Using ep0 maxpacket: 16 [ 1374.698339][T13681] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.726746][T13681] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1374.738221][T13681] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1374.748940][T13681] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1374.770470][T13681] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1374.787878][T13681] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1374.834520][T13681] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1374.880528][T13681] usb 8-1: Manufacturer: syz [ 1374.912513][T13681] usb 8-1: config 0 descriptor?? [ 1376.433689][T13681] rc_core: IR keymap rc-hauppauge not found [ 1376.444994][T13681] Registered IR keymap rc-empty [ 1376.450365][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1376.505191][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1376.575415][T13681] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1376.612882][T13681] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input31 [ 1376.696114][T15414] loop1: detected capacity change from 0 to 4096 [ 1376.828894][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1376.967852][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1377.076882][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1377.109724][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1377.236755][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1377.641945][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1377.697009][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1377.736720][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1377.766643][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1377.796719][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1377.847913][T13681] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1377.857285][T13681] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1377.886301][T13681] usb 8-1: USB disconnect, device number 11 [ 1378.101969][T15422] loop7: detected capacity change from 0 to 1024 [ 1378.189647][ T4282] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 1378.217676][T15422] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1378.226285][T15422] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1378.255321][ T4282] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1378.608740][T15435] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2578: bg 0: block 112: padding at end of block bitmap is not set [ 1379.302168][T15435] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 1379.314755][T15435] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1379.314755][T15435] [ 1379.324581][T15435] EXT4-fs (loop7): Total free blocks count 0 [ 1379.330659][T15435] EXT4-fs (loop7): Free/Dirty block details [ 1379.336735][T15435] EXT4-fs (loop7): free_blocks=0 [ 1379.341734][T15435] EXT4-fs (loop7): dirty_blocks=64 [ 1379.346991][T15435] EXT4-fs (loop7): Block reservation details [ 1379.353027][T15435] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 1379.354965][T15436] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: comm syz.7.2578: lblock 0 mapped to illegal pblock 0 (length 1) [ 1379.383490][T15436] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1379.396296][T15431] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: comm syz.7.2578: lblock 0 mapped to illegal pblock 0 (length 1) [ 1380.601539][T15454] loop3: detected capacity change from 0 to 4096 [ 1381.616976][T12204] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1381.650915][ T4279] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 1381.677431][ T4279] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1381.689474][T15471] usb usb8: usbfs: process 15471 (syz.2.2591) did not claim interface 0 before use [ 1381.806703][T12204] usb 6-1: Using ep0 maxpacket: 16 [ 1381.819398][T12204] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.915140][T15474] netlink: 'syz.2.2591': attribute type 1 has an invalid length. [ 1382.023562][T12204] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1382.192200][T12204] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1382.357824][T12204] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1382.489654][T12204] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1382.711035][T12204] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1382.746706][T12204] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1382.754801][T12204] usb 6-1: Manufacturer: syz [ 1382.832067][T15485] Cannot find add_set index 0 as target [ 1382.863443][T12204] usb 6-1: config 0 descriptor?? [ 1383.127928][T15487] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2594'. [ 1383.556720][T12204] rc_core: IR keymap rc-hauppauge not found [ 1383.575140][T12204] Registered IR keymap rc-empty [ 1383.591186][T12204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1383.627615][T12204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1383.669197][T12204] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1383.691762][T12204] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input32 [ 1383.716926][T12204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1383.751733][T12204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1383.786823][T12204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1383.872251][T12204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1383.936826][T12204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1383.976790][T12204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1384.007522][T12204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1384.047873][T12204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1384.086746][T12204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1384.120407][T12204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1384.160660][T12204] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1384.180126][T12204] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1384.205951][T12204] usb 6-1: USB disconnect, device number 41 [ 1387.300512][T15528] usb usb8: usbfs: process 15528 (syz.3.2604) did not claim interface 0 before use [ 1387.327752][ T5706] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1387.611689][T15529] netlink: 'syz.3.2604': attribute type 1 has an invalid length. [ 1387.619937][ T5706] usb 3-1: Using ep0 maxpacket: 16 [ 1387.634672][ T5706] usb 3-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 1387.834002][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1387.952846][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1388.040540][ T5706] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1388.143046][ T5706] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1388.182764][T15532] loop5: detected capacity change from 0 to 512 [ 1388.246094][T15532] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.2606: missing EA_INODE flag [ 1388.262190][ T5706] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1388.296749][ T5706] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1388.315286][ T5706] usb 3-1: Manufacturer: syz [ 1388.338219][ T5706] usb 3-1: config 0 descriptor?? [ 1388.352025][T15532] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2606: error while reading EA inode 12 err=-117 [ 1388.365861][T15532] EXT4-fs (loop5): 1 orphan inode deleted [ 1388.372006][T15532] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1389.379391][ T4561] EXT4-fs (loop5): unmounting filesystem. [ 1389.386611][ T5706] rc_core: IR keymap rc-hauppauge not found [ 1389.392587][ T5706] Registered IR keymap rc-empty [ 1389.416684][ T5706] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1389.446693][ T5706] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1389.477327][ T5706] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1389.535646][ T5706] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input33 [ 1389.612881][T15554] binder: 15552:15554 ioctl 541b 0 returned -22 [ 1390.443588][ T5706] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1390.486691][ T5706] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1390.536775][ T5706] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1390.566834][ T5706] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1390.596648][ T5706] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1390.626863][ T5706] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1390.656824][ T5706] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1390.696837][ T5706] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1390.727166][ T5706] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1390.792157][T15565] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2614'. [ 1390.806708][ T5706] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1390.837968][ T5706] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1390.868836][ T5706] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1390.906898][ T5706] usb 3-1: USB disconnect, device number 35 [ 1391.167416][T15575] overlayfs: unrecognized mount option "context=sysadm_u" or missing value [ 1391.268123][T15577] overlayfs: missing 'lowerdir' [ 1391.337003][ T27] audit: type=1400 audit(1777689808.017:1454): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=15568 comm="syz.7.2615" [ 1392.045546][T15582] kvm: pic: non byte write [ 1392.103255][T15585] usb usb8: usbfs: process 15585 (syz.7.2617) did not claim interface 0 before use [ 1392.333671][T15589] netlink: 'syz.7.2617': attribute type 1 has an invalid length. [ 1393.026218][T15600] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2621'. [ 1393.526780][T12204] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1393.773949][T15628] overlayfs: unrecognized mount option "context=sysadm_u" or missing value [ 1393.810903][T15628] overlayfs: missing 'lowerdir' [ 1393.827046][ T27] audit: type=1400 audit(1777689810.557:1455): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=15618 comm="syz.7.2627" [ 1394.432718][T15630] netlink: 252 bytes leftover after parsing attributes in process `syz.5.2629'. [ 1394.523041][T12204] usb 2-1: Using ep0 maxpacket: 16 [ 1394.531398][T12204] usb 2-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 1394.541944][T12204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1394.552937][T12204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1394.562922][T12204] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1394.572721][T12204] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1394.588983][T12204] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1394.604364][T12204] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1394.612516][T12204] usb 2-1: Manufacturer: syz [ 1394.634306][T12204] usb 2-1: config 0 descriptor?? [ 1394.896080][T15646] usb usb8: usbfs: process 15646 (syz.5.2634) did not claim interface 0 before use [ 1395.118429][T15648] netlink: 'syz.5.2634': attribute type 1 has an invalid length. [ 1395.826684][T12204] rc_core: IR keymap rc-hauppauge not found [ 1395.832683][T12204] Registered IR keymap rc-empty [ 1395.869027][T12204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1395.919581][T12204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1395.979569][T12204] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1396.085717][T12204] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input34 [ 1396.150172][T15656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2636'. [ 1396.252133][T12204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1396.318664][T12204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1396.386734][T12204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1396.469127][T12204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1396.499200][T12204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1396.557861][T12204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1396.590006][T12204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1396.629287][T12204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1396.674672][T15669] binder: 15666:15669 ioctl 541b 0 returned -22 [ 1396.737043][T12204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1396.836915][T12204] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1396.949014][T12204] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1397.080313][T12204] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1397.357607][T12204] usb 2-1: USB disconnect, device number 61 [ 1397.884707][T15682] loop1: detected capacity change from 0 to 1024 [ 1397.974517][T15685] overlayfs: unrecognized mount option "context=sysadm_u" or missing value [ 1398.079649][T15686] overlayfs: missing 'lowerdir' [ 1398.197138][ T27] audit: type=1400 audit(1777689814.827:1456): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=15673 comm="syz.2.2642" [ 1398.685653][T15682] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1398.696802][T15682] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1398.867775][T15701] usb usb8: usbfs: process 15701 (syz.5.2648) did not claim interface 0 before use [ 1399.079838][T15702] netlink: 'syz.5.2648': attribute type 1 has an invalid length. [ 1399.846749][T15695] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1400.058858][ T5706] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1400.188736][T15713] kvm: pic: non byte write [ 1400.266688][ T5706] usb 8-1: Using ep0 maxpacket: 16 [ 1400.278188][ T5706] usb 8-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 1400.302473][T15682] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.2645: Freeing blocks not in datazone - block = 0, count = 16 [ 1400.303452][ T5706] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1400.365666][ T5706] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1400.390444][ T5706] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1400.414124][ T5706] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1400.446340][ T5706] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1400.463649][ T5706] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1400.479795][ T5706] usb 8-1: Manufacturer: syz [ 1400.491821][ T5706] usb 8-1: config 0 descriptor?? [ 1400.877058][ T5880] IPVS: ip_vs_send_async error -19 [ 1400.896650][ T5706] rc_core: IR keymap rc-hauppauge not found [ 1400.902736][ T5706] Registered IR keymap rc-empty [ 1400.916748][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1400.956907][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1400.987441][ T5706] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1401.041617][ T5706] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input35 [ 1401.100956][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.156661][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.207255][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.251704][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.296720][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.336833][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.560921][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.596664][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.626644][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.656879][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.695518][T15741] overlayfs: unrecognized mount option "context=sysadm_u" or missing value [ 1401.723946][T15741] overlayfs: missing 'workdir' [ 1401.755277][ T5706] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1401.786960][ T27] audit: type=1400 audit(1777689818.477:1457): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=15736 comm="syz.2.2658" [ 1401.914208][ T5706] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1402.275247][ T5706] usb 8-1: USB disconnect, device number 12 [ 1402.719395][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 1402.824571][T15748] usb usb8: usbfs: process 15748 (syz.5.2661) did not claim interface 0 before use [ 1403.032729][T15752] netlink: 'syz.5.2661': attribute type 1 has an invalid length. [ 1403.281273][T15754] netlink: 'syz.1.2662': attribute type 12 has an invalid length. [ 1403.381004][T15754] netlink: 'syz.1.2662': attribute type 29 has an invalid length. [ 1403.468144][T15754] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2662'. [ 1403.740942][T15759] netlink: 252 bytes leftover after parsing attributes in process `syz.7.2664'. [ 1404.049443][T15775] device syzkaller0 entered promiscuous mode [ 1404.119241][ T5880] IPVS: ip_vs_send_async error -19 [ 1405.282671][T15783] loop1: detected capacity change from 0 to 1024 [ 1405.337917][ T5706] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1405.387718][T15783] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1405.415024][T15783] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1405.483439][T15788] overlayfs: unrecognized mount option "context=sysadm_u" or missing value [ 1405.521283][T15788] overlayfs: missing 'workdir' [ 1405.586869][ T27] audit: type=1400 audit(1777689822.267:1458): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=15780 comm="syz.2.2671" [ 1406.118386][T15790] loop5: detected capacity change from 0 to 1024 [ 1406.234557][T15790] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1406.243710][T15790] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1406.309293][ T5706] usb 8-1: Using ep0 maxpacket: 16 [ 1406.320105][ T5706] usb 8-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 1406.357097][ T5706] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1406.392645][ T5706] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1406.442334][ T5706] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1406.464022][ T5706] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1406.520367][ T5706] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1406.547399][ T5706] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1406.555831][ T5706] usb 8-1: Manufacturer: syz [ 1406.586227][T15790] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2673: bg 0: block 112: padding at end of block bitmap is not set [ 1406.597043][ T5706] usb 8-1: config 0 descriptor?? [ 1406.606410][T15790] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 1406.618945][T15790] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1406.618945][T15790] [ 1406.628705][T15790] EXT4-fs (loop5): Total free blocks count 0 [ 1406.634797][T15790] EXT4-fs (loop5): Free/Dirty block details [ 1406.640986][T15790] EXT4-fs (loop5): free_blocks=0 [ 1406.645981][T15790] EXT4-fs (loop5): dirty_blocks=64 [ 1406.651245][T15790] EXT4-fs (loop5): Block reservation details [ 1406.657348][T15790] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 1406.663975][T15798] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm syz.5.2673: lblock 0 mapped to illegal pblock 0 (length 1) [ 1406.793126][ T4561] EXT4-fs (loop5): unmounting filesystem. [ 1407.122335][ T5706] rc_core: IR keymap rc-hauppauge not found [ 1407.130123][ T5706] Registered IR keymap rc-empty [ 1407.152727][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1407.178041][T15807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2676'. [ 1407.247150][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1407.439468][T15808] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2672: bg 0: block 112: padding at end of block bitmap is not set [ 1407.454789][ T5706] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1407.482711][T15808] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 1407.505373][ T5706] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input36 [ 1407.541146][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1407.543763][T15808] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1407.543763][T15808] [ 1407.574506][T15809] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.2672: lblock 0 mapped to illegal pblock 0 (length 1) [ 1407.753122][T15808] EXT4-fs (loop1): Total free blocks count 0 [ 1407.763029][T15808] EXT4-fs (loop1): Free/Dirty block details [ 1407.769171][T15808] EXT4-fs (loop1): free_blocks=0 [ 1407.774362][T15808] EXT4-fs (loop1): dirty_blocks=64 [ 1407.777457][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1407.780673][T15808] EXT4-fs (loop1): Block reservation details [ 1407.793032][T15808] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 1407.947474][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1408.078888][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1408.110952][T15816] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.2672: lblock 0 mapped to illegal pblock 0 (length 1) [ 1408.146799][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1408.179339][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1408.231341][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1408.296838][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1408.316895][ T5880] IPVS: ip_vs_send_async error -19 [ 1408.339973][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1408.379924][ T5706] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1408.437918][ T5706] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1408.457699][ T5706] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1408.560835][ T5706] usb 8-1: USB disconnect, device number 13 [ 1409.298493][ T27] audit: type=1326 audit(1777689826.057:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.2.2684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadbef9cdd9 code=0x7ffc0000 [ 1409.367018][ T27] audit: type=1326 audit(1777689826.057:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.2.2684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadbef9cdd9 code=0x7ffc0000 [ 1409.419706][ T27] audit: type=1326 audit(1777689826.057:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.2.2684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fadbef9cdd9 code=0x7ffc0000 [ 1409.500219][ T27] audit: type=1326 audit(1777689826.057:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.2.2684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadbef9cdd9 code=0x7ffc0000 [ 1409.561951][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 1409.571854][ T27] audit: type=1326 audit(1777689826.057:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.2.2684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadbef9cdd9 code=0x7ffc0000 [ 1409.706674][ T27] audit: type=1326 audit(1777689826.057:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.2.2684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadbef9cdd9 code=0x7ffc0000 [ 1409.771960][ T27] audit: type=1326 audit(1777689826.057:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.2.2684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadbef9cdd9 code=0x7ffc0000 [ 1409.869903][ T27] audit: type=1326 audit(1777689826.057:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.2.2684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadbef9cdd9 code=0x7ffc0000 [ 1409.973199][T15843] loop1: detected capacity change from 0 to 1024 [ 1409.976069][ T27] audit: type=1326 audit(1777689826.057:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.2.2684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadbef5d60e code=0x7ffc0000 [ 1410.561113][T15843] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1410.684797][T15843] ext4 filesystem being mounted at /558/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1411.013492][T15843] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2686: bg 0: block 112: padding at end of block bitmap is not set [ 1411.028507][T15843] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 1411.041283][T15843] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1411.041283][T15843] [ 1411.051003][T15843] EXT4-fs (loop1): Total free blocks count 0 [ 1411.057108][T15843] EXT4-fs (loop1): Free/Dirty block details [ 1411.063119][T15843] EXT4-fs (loop1): free_blocks=0 [ 1411.068295][T15843] EXT4-fs (loop1): dirty_blocks=64 [ 1411.073453][T15843] EXT4-fs (loop1): Block reservation details [ 1411.079969][T15843] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 1411.175792][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 1411.335416][T15860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2689'. [ 1411.451114][T15860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2689'. [ 1411.700081][ T5706] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1411.787455][T15860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2689'. [ 1411.897068][ T5706] usb 4-1: Using ep0 maxpacket: 16 [ 1411.906191][ T5706] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1411.977421][ T5706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1412.052010][ T5706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1412.114069][ T5706] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1412.153102][ T5706] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1412.223767][ T5706] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1412.246783][ T5706] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1412.254912][ T5706] usb 4-1: Manufacturer: syz [ 1412.289647][ T5706] usb 4-1: config 0 descriptor?? [ 1412.862258][T15879] loop2: detected capacity change from 0 to 7 [ 1412.876872][ T5706] rc_core: IR keymap rc-hauppauge not found [ 1412.883186][ T5706] Registered IR keymap rc-empty [ 1412.899241][ T5706] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1412.916123][T15879] Dev loop2: unable to read RDB block 7 [ 1412.935600][T15879] loop2: AHDI p1 p2 p3 [ 1412.946635][ T5706] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1412.952330][T15879] loop2: partition table partially beyond EOD, truncated [ 1412.987462][ T5706] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1413.008292][T15879] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1413.034289][ T5706] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input37 [ 1413.035718][T15879] loop2: p3 start 335544320 is beyond EOD, truncated [ 1413.142841][ T5706] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1413.216681][ T5706] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1413.256944][ T5706] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1413.297102][ T5706] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1413.336714][ T5706] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1413.375764][ T5706] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1413.416680][ T5706] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1413.459876][ T5706] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1413.496734][ T5706] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1413.526355][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2698'. [ 1413.536944][ T5706] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1413.563720][T15886] tipc: Enabled bearer , priority 0 [ 1413.577708][ T5706] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1413.604755][T15886] tipc: Resetting bearer [ 1413.610877][ T5706] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1413.630354][ T5706] usb 4-1: USB disconnect, device number 51 [ 1413.650143][T15885] tipc: Disabling bearer [ 1414.656760][T12204] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1414.894092][T12204] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 1414.940926][T12204] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.139364][T12204] usb 4-1: config 8 has no interface number 0 [ 1415.145714][T12204] usb 4-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 1415.156761][T12204] usb 4-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1415.169071][T12204] usb 4-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1415.183207][T12204] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1415.880636][T12204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.903598][T12204] usb 4-1: NFC: intf ffff88805a1d7000 id ffffffff8d406400 [ 1416.273565][ T27] kauditd_printk_skb: 48 callbacks suppressed [ 1416.273610][ T27] audit: type=1107 audit(1777689833.027:1516): pid=15898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1419.213623][T15931] device syzkaller0 entered promiscuous mode [ 1419.226805][ T5706] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1419.360097][ T5638] usb 4-1: USB disconnect, device number 52 [ 1419.419687][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1419.493381][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1419.558169][ T5706] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1419.649745][ T5706] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1419.713622][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.820481][ T5706] usb 2-1: config 0 descriptor?? [ 1420.283386][ T5706] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 1420.308141][ T5706] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1421.006650][T13681] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1421.025819][T15950] kvm: pic: non byte write [ 1421.864861][T13681] usb 6-1: Using ep0 maxpacket: 16 [ 1421.957522][T13681] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1421.966329][T13681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1422.230709][ T5642] Bluetooth: hci0: Frame reassembly failed (-84) [ 1423.282121][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.288615][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.185514][T13681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1424.236781][T14255] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1424.287743][T13681] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1424.361783][T13681] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1424.540566][T15968] loop2: detected capacity change from 0 to 7 [ 1424.651796][T13029] Dev loop2: unable to read RDB block 7 [ 1424.666188][ T5638] usb 2-1: USB disconnect, device number 62 [ 1424.679834][T13029] loop2: AHDI p1 p2 p3 [ 1424.741797][T13029] loop2: partition table partially beyond EOD, truncated [ 1424.918852][T13681] usb 6-1: string descriptor 0 read error: -71 [ 1424.940325][T13681] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1425.021669][T13029] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1425.140873][T13681] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1425.186278][T13029] loop2: p3 start 335544320 is beyond EOD, truncated [ 1425.371824][T13681] usb 6-1: config 0 descriptor?? [ 1425.459021][T13681] usb 6-1: can't set config #0, error -71 [ 1425.571504][T13681] usb 6-1: USB disconnect, device number 42 [ 1425.906929][T12678] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1426.204683][T12678] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1426.285409][T12678] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1426.398781][T12678] usb 4-1: Product: syz [ 1426.461512][T15980] netlink: 252 bytes leftover after parsing attributes in process `syz.7.2724'. [ 1426.470025][T12678] usb 4-1: SerialNumber: syz [ 1426.507473][T12678] usb 4-1: config 0 descriptor?? [ 1426.653408][T15984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2725'. [ 1426.764296][T12678] usb 4-1: USB disconnect, device number 53 [ 1426.807054][ T4317] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1427.272947][ T4317] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 1427.308958][ T4317] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.321750][ T4317] usb 6-1: config 8 has no interface number 0 [ 1427.330718][ T4317] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 1427.353780][ T4317] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1427.378728][ T4317] usb 6-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1427.437929][ T4317] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1427.462891][ T4317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.491473][ T4317] usb 6-1: NFC: intf ffff888057228000 id ffffffff8d406400 [ 1427.708689][T15995] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2727'. [ 1428.301023][ T27] audit: type=1107 audit(1777689845.057:1517): pid=15974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1431.661400][T12204] usb 6-1: USB disconnect, device number 43 [ 1432.656760][ T4317] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1432.866677][ T4317] usb 3-1: Using ep0 maxpacket: 16 [ 1432.874108][ T4317] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1432.916739][ T4317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1432.956604][ T4317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1432.976653][ T4317] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1433.002451][T16030] loop5: detected capacity change from 0 to 1024 [ 1433.007574][ T4317] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1433.062990][ T4317] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1433.079586][T16032] loop2: detected capacity change from 0 to 7 [ 1433.097250][ T4317] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1433.105344][ T4317] usb 3-1: Manufacturer: syz [ 1433.107586][T16030] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1433.117030][T16032] Dev loop2: unable to read RDB block 7 [ 1433.124138][T16032] loop2: AHDI p1 p2 p3 [ 1433.136889][T16032] loop2: partition table partially beyond EOD, truncated [ 1433.147509][ T4317] usb 3-1: config 0 descriptor?? [ 1433.163094][T16030] ext4 filesystem being mounted at /535/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1433.169109][T16032] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1433.231414][T16032] loop2: p3 start 335544320 is beyond EOD, truncated [ 1433.596704][ T4317] rc_core: IR keymap rc-hauppauge not found [ 1433.602742][ T4317] Registered IR keymap rc-empty [ 1433.628252][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1433.666705][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1433.719672][ T4317] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1433.805417][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2740'. [ 1433.907880][ T4317] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input38 [ 1433.981242][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1434.068491][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1434.094963][T16047] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2737: bg 0: block 112: padding at end of block bitmap is not set [ 1434.115452][T16047] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 1434.128018][T16047] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1434.128018][T16047] [ 1434.137780][T16047] EXT4-fs (loop5): Total free blocks count 0 [ 1434.143876][T16047] EXT4-fs (loop5): Free/Dirty block details [ 1434.149845][T16047] EXT4-fs (loop5): free_blocks=0 [ 1434.154827][T16047] EXT4-fs (loop5): dirty_blocks=64 [ 1434.160019][T16047] EXT4-fs (loop5): Block reservation details [ 1434.166074][T16047] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 1434.174903][T16047] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm syz.5.2737: lblock 0 mapped to illegal pblock 0 (length 1) [ 1434.434719][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1434.547267][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1434.565832][ T4561] EXT4-fs (loop5): unmounting filesystem. [ 1434.607188][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1434.657088][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1434.954916][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1435.057319][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1435.098192][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1435.099491][T16054] device syzkaller0 entered promiscuous mode [ 1435.148219][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1435.210287][ T4317] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1435.380709][ T4317] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1435.392550][ T4317] usb 3-1: USB disconnect, device number 36 [ 1435.947121][T16067] netlink: 'syz.1.2736': attribute type 12 has an invalid length. [ 1436.048908][T16067] netlink: 'syz.1.2736': attribute type 29 has an invalid length. [ 1436.175207][T16067] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2736'. [ 1436.622292][T16073] device syzkaller0 entered promiscuous mode [ 1437.618141][T16095] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2752'. [ 1438.996595][T13681] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1439.216622][T13681] usb 6-1: Using ep0 maxpacket: 16 [ 1439.375262][T13681] usb 6-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 1439.387123][T13681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1439.398752][T13681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1439.538656][T13681] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1439.566639][T13681] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1441.278042][T14255] Bluetooth: hci0: command 0x1003 tx timeout [ 1441.278109][ T9203] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1441.912444][T12204] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1442.315632][T12204] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1442.367265][T12204] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1442.445820][T13681] usb 6-1: string descriptor 0 read error: -71 [ 1442.459198][T12204] usb 2-1: Product: syz [ 1442.533770][T12204] usb 2-1: SerialNumber: syz [ 1442.644688][T12204] usb 2-1: config 0 descriptor?? [ 1443.784216][T13681] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1443.955796][T13681] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1443.977549][T13681] usb 6-1: config 0 descriptor?? [ 1444.006755][T13681] usb 6-1: can't set config #0, error -71 [ 1444.018133][T13681] usb 6-1: USB disconnect, device number 44 [ 1444.466670][T12204] usb 2-1: USB disconnect, device number 63 [ 1447.586626][T13681] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 1447.830043][T16173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2772'. [ 1447.912131][T13681] usb 8-1: config 8 has an invalid interface number: 80 but max is 0 [ 1447.993578][T13681] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.025678][T13681] usb 8-1: config 8 has no interface number 0 [ 1448.032885][T12678] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1448.045542][T13681] usb 8-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 1448.056628][T13681] usb 8-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1448.068399][T13681] usb 8-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1448.081642][T13681] usb 8-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1448.092773][T13681] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.140041][T13681] usb 8-1: NFC: intf ffff888019ef4000 id ffffffff8d406400 [ 1448.468360][T12678] usb 2-1: Using ep0 maxpacket: 16 [ 1448.632954][ T27] audit: type=1107 audit(1777689865.387:1518): pid=16159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1450.177429][T12678] usb 2-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 1452.007535][T13681] usb 8-1: USB disconnect, device number 14 [ 1452.013757][T12678] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1452.026901][T12678] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1452.036753][T12678] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1452.046477][T12678] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1452.089341][T12678] usb 2-1: string descriptor 0 read error: -71 [ 1452.095739][T12678] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1452.137482][T12678] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1452.159368][T12678] usb 2-1: config 0 descriptor?? [ 1452.166736][T12678] usb 2-1: can't set config #0, error -71 [ 1452.186926][T12678] usb 2-1: USB disconnect, device number 64 [ 1453.106896][T16195] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2776'. [ 1453.186358][T16191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2777'. [ 1453.407754][T12678] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1453.491118][T16195] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2776'. [ 1453.710511][T16209] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2781'. [ 1454.070505][T16207] device syzkaller0 entered promiscuous mode [ 1454.081195][T12678] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1454.149147][T12678] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1454.199624][T12678] usb 3-1: Product: syz [ 1454.203955][T12678] usb 3-1: SerialNumber: syz [ 1454.283910][T12678] usb 3-1: config 0 descriptor?? [ 1454.633427][T16220] kvm: pic: non byte write [ 1454.638339][ T48] Bluetooth: hci0: command 0x1003 tx timeout [ 1454.646485][ T9203] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1454.685293][T12678] usb 3-1: USB disconnect, device number 37 [ 1455.239715][T16231] kvm: pic: non byte write [ 1455.587221][T16240] loop2: detected capacity change from 0 to 7 [ 1455.608203][T13029] Dev loop2: unable to read RDB block 7 [ 1455.615346][T13029] loop2: AHDI p1 p2 p3 [ 1455.634160][T13029] loop2: partition table partially beyond EOD, truncated [ 1455.649255][T13029] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1455.670603][T13029] loop2: p3 start 335544320 is beyond EOD, truncated [ 1455.836934][T16240] Dev loop2: unable to read RDB block 7 [ 1455.846683][T16240] loop2: AHDI p1 p2 p3 [ 1455.851309][T16240] loop2: partition table partially beyond EOD, truncated [ 1455.860360][T16240] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1455.868715][T16240] loop2: p3 start 335544320 is beyond EOD, truncated [ 1455.956625][T12204] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1457.099544][T12204] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 1457.133474][T12204] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.185075][T12204] usb 4-1: config 8 has no interface number 0 [ 1457.206655][T12204] usb 4-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 1457.235945][T12204] usb 4-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1457.256290][T12204] usb 4-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1457.366015][T12204] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1457.376627][T12204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.428529][T12204] usb 4-1: NFC: intf ffff88806102d000 id ffffffff8d406400 [ 1457.670260][T16260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2793'. [ 1459.217545][ T27] audit: type=1107 audit(1777689875.977:1519): pid=16241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1460.571314][T16271] tipc: Enabled bearer , priority 0 [ 1460.646454][T16273] device syzkaller0 entered promiscuous mode [ 1460.700453][T12204] usb 4-1: USB disconnect, device number 54 [ 1460.773572][T16271] tipc: Resetting bearer [ 1460.826102][T16270] tipc: Resetting bearer [ 1460.936926][T16270] tipc: Disabling bearer [ 1461.001545][T16282] device syzkaller0 entered promiscuous mode [ 1461.476629][ T4313] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1461.675016][ T4313] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.706601][ T4313] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1461.746314][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.772740][ T4313] usb 3-1: config 0 descriptor?? [ 1461.793160][ T4313] pwc: Askey VC010 type 2 USB webcam detected. [ 1461.960761][T16303] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2805'. [ 1462.291702][ T4313] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1462.326757][ T4313] pwc: recv_control_msg error -71 req 02 val 2700 [ 1462.345137][ T4313] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1462.357356][ T4313] pwc: recv_control_msg error -71 req 04 val 1000 [ 1462.367204][ T4313] pwc: recv_control_msg error -71 req 04 val 1300 [ 1462.375886][ T4313] pwc: recv_control_msg error -71 req 04 val 1400 [ 1462.387160][ T4313] pwc: recv_control_msg error -71 req 02 val 2000 [ 1462.399587][ T4313] pwc: recv_control_msg error -71 req 02 val 2100 [ 1462.409107][ T4313] pwc: recv_control_msg error -71 req 04 val 1500 [ 1462.418459][ T4313] pwc: recv_control_msg error -71 req 02 val 2500 [ 1462.426696][ T4313] pwc: recv_control_msg error -71 req 02 val 2400 [ 1462.435920][ T4313] pwc: recv_control_msg error -71 req 02 val 2600 [ 1462.444999][ T4313] pwc: recv_control_msg error -71 req 02 val 2900 [ 1462.467053][ T4313] pwc: recv_control_msg error -71 req 02 val 2800 [ 1462.477356][ T4313] pwc: recv_control_msg error -71 req 04 val 1100 [ 1462.489252][ T4313] pwc: recv_control_msg error -71 req 04 val 1200 [ 1462.525322][ T4313] pwc: Registered as video103. [ 1462.545960][ T4313] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input39 [ 1462.605459][ T4313] usb 3-1: USB disconnect, device number 38 [ 1463.268281][T12678] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1463.276790][ T4334] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 1463.287930][T16317] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2810'. [ 1463.586701][ T4334] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 1463.586941][T12678] usb 8-1: Using ep0 maxpacket: 16 [ 1463.595574][ T4334] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.611941][ T4334] usb 2-1: config 8 has no interface number 0 [ 1463.622511][ T4334] usb 2-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 1463.685687][ T4334] usb 2-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1463.708882][ T4334] usb 2-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1463.726604][ T4334] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1463.747991][T12678] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.758561][ T4334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.775578][T12678] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1463.820401][ T4334] usb 2-1: NFC: intf ffff88802416f000 id ffffffff8d406400 [ 1463.841985][T12678] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1463.898544][T12678] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1463.969897][T12678] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1464.002616][T12678] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1464.174491][ T27] audit: type=1107 audit(1777689880.927:1520): pid=16310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1466.856019][T12678] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1467.252579][ T4313] usb 2-1: USB disconnect, device number 65 [ 1467.751044][T12678] usb 8-1: Manufacturer: syz [ 1467.766933][T12678] usb 8-1: config 0 descriptor?? [ 1467.772398][T12678] usb 8-1: can't set config #0, error -71 [ 1467.780477][T12678] usb 8-1: USB disconnect, device number 15 [ 1468.377986][T16339] device syzkaller0 entered promiscuous mode [ 1468.393926][ T4313] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1468.747934][ T4313] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1468.758292][ T4313] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1468.768363][ T4313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.779630][ T4313] usb 4-1: config 0 descriptor?? [ 1468.798664][ T4313] pwc: Askey VC010 type 2 USB webcam detected. [ 1469.603277][T16351] loop2: detected capacity change from 0 to 1024 [ 1469.673061][T16351] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1469.682226][T16351] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1469.695676][T16359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2819'. [ 1469.822234][T16359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2819'. [ 1470.012453][ T4313] pwc: recv_control_msg error -71 req 02 val 2700 [ 1470.019554][ T4313] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1470.026467][ T4313] pwc: recv_control_msg error -71 req 04 val 1000 [ 1470.033461][ T4313] pwc: recv_control_msg error -71 req 04 val 1300 [ 1470.057000][ T4313] pwc: recv_control_msg error -71 req 04 val 1400 [ 1470.071681][ T4313] pwc: recv_control_msg error -71 req 02 val 2000 [ 1470.096794][ T4313] pwc: recv_control_msg error -71 req 02 val 2100 [ 1470.110571][ T4313] pwc: recv_control_msg error -71 req 04 val 1500 [ 1470.127189][ T4313] pwc: recv_control_msg error -71 req 02 val 2500 [ 1470.149406][ T4313] pwc: recv_control_msg error -71 req 02 val 2400 [ 1470.179226][ T4313] pwc: recv_control_msg error -71 req 02 val 2600 [ 1470.215237][ T4313] pwc: recv_control_msg error -71 req 02 val 2900 [ 1470.232593][ T4313] pwc: recv_control_msg error -71 req 02 val 2800 [ 1470.260233][ T4313] pwc: recv_control_msg error -71 req 04 val 1100 [ 1470.284629][ T4313] pwc: recv_control_msg error -71 req 04 val 1200 [ 1470.302241][T16368] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2820: bg 0: block 112: padding at end of block bitmap is not set [ 1470.324589][ T4313] pwc: Registered as video103. [ 1470.349465][ T4313] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input40 [ 1470.379227][T16368] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 1470.414783][ T4313] usb 4-1: USB disconnect, device number 55 [ 1470.499328][T16368] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1470.499328][T16368] [ 1470.555850][T16372] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.2820: lblock 0 mapped to illegal pblock 0 (length 1) [ 1470.694481][T16368] EXT4-fs (loop2): Total free blocks count 0 [ 1470.761032][T16359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2819'. [ 1470.801196][T16368] EXT4-fs (loop2): Free/Dirty block details [ 1470.879254][T16368] EXT4-fs (loop2): free_blocks=0 [ 1470.931367][T16368] EXT4-fs (loop2): dirty_blocks=64 [ 1470.993712][T16368] EXT4-fs (loop2): Block reservation details [ 1471.023681][T16368] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 1471.286589][ T4317] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 1471.488631][ T4317] usb 8-1: config 8 has an invalid interface number: 80 but max is 0 [ 1471.497623][ T4317] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.508021][ T4317] usb 8-1: config 8 has no interface number 0 [ 1471.514268][ T4317] usb 8-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 1471.525245][ T4317] usb 8-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1471.553327][ T4317] usb 8-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1471.589874][ T4317] usb 8-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1471.607967][ T4317] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.626298][ T4317] usb 8-1: NFC: intf ffff88805abb0000 id ffffffff8d406400 [ 1471.979958][ T27] audit: type=1107 audit(1777689888.737:1521): pid=16379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1472.550936][T16392] device syzkaller0 entered promiscuous mode [ 1475.056779][ T4317] usb 8-1: USB disconnect, device number 16 [ 1476.266987][T16407] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2834'. [ 1477.359434][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 1477.686919][T12678] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1477.886712][T12678] usb 6-1: Using ep0 maxpacket: 16 [ 1477.894076][T12678] usb 6-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 1477.990784][T12678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1478.004827][T12678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1478.026752][T12678] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1478.037052][T12678] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1478.109482][T12678] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1478.150517][T12678] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1478.158709][T12678] usb 6-1: Manufacturer: syz [ 1478.915370][T12678] usb 6-1: config 0 descriptor?? [ 1478.985542][T16438] tipc: Started in network mode [ 1479.057612][T16438] tipc: Node identity 7aed585e251f, cluster identity 4711 [ 1479.066925][T15971] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1479.109642][T16438] tipc: Enabled bearer , priority 0 [ 1479.257379][T16434] tipc: Resetting bearer [ 1479.316619][T15971] usb 4-1: Using ep0 maxpacket: 16 [ 1479.352286][T16439] device syzkaller0 entered promiscuous mode [ 1479.365064][T15971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.375539][T12678] rc_core: IR keymap rc-hauppauge not found [ 1479.381559][T12678] Registered IR keymap rc-empty [ 1479.400271][T12678] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1479.404975][T16439] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1479.427835][T16442] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2843'. [ 1479.440191][T15971] usb 4-1: config 0 has no interfaces? [ 1479.440351][T16431] tipc: Resetting bearer [ 1479.445735][T15971] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1479.486638][T12678] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1479.523141][T15971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.534025][T16431] tipc: Disabling bearer [ 1479.543075][T12678] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1479.599604][T15971] usb 4-1: config 0 descriptor?? [ 1479.616730][T12678] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input41 [ 1479.634075][T12678] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1479.676654][T12678] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1479.757243][T12678] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1479.866870][T12678] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1479.916697][T12678] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1480.016721][T12678] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1480.076700][T12678] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1480.126620][T12678] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1480.167335][T12678] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1480.216753][T12678] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1480.251043][T12678] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1480.265180][T12678] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1480.284727][T12678] usb 6-1: USB disconnect, device number 45 [ 1480.740597][T16462] kvm: pic: non byte write [ 1480.922087][ T4317] usb 4-1: USB disconnect, device number 56 [ 1481.725731][T14255] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1481.738353][T14255] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1481.749854][T14255] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1481.759546][T14255] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1481.767470][T14255] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1481.774918][T14255] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1482.441418][T16467] chnl_net:caif_netlink_parms(): no params data found [ 1482.906405][T13389] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.021718][T13389] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.107380][T16467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.176601][T16467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.214397][T16467] device bridge_slave_0 entered promiscuous mode [ 1483.237932][T16467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.254107][T16467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.297509][T16467] device bridge_slave_1 entered promiscuous mode [ 1483.851360][T12678] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1483.860766][ T9203] Bluetooth: hci0: command 0x0409 tx timeout [ 1484.381993][T13389] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.456717][T16467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.491568][T16467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.506734][T12678] usb 2-1: Using ep0 maxpacket: 16 [ 1484.518130][T12678] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.577372][T12678] usb 2-1: config 0 has no interfaces? [ 1484.582958][T12678] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1484.621960][T16467] team0: Port device team_slave_0 added [ 1484.653709][T12678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.692357][T12678] usb 2-1: config 0 descriptor?? [ 1484.730804][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.738714][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.851881][T13389] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.885043][T16467] team0: Port device team_slave_1 added [ 1485.106463][T16467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1485.123217][T16467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1485.156148][T16467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1485.274644][T16467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1485.289861][T16467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1485.409589][T16467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1485.916568][T14255] Bluetooth: hci0: command 0x041b tx timeout [ 1485.969956][T16467] device hsr_slave_0 entered promiscuous mode [ 1486.006401][ T29] Bluetooth: hci3: Frame reassembly failed (-84) [ 1486.021465][ T29] Bluetooth: hci3: Frame reassembly failed (-84) [ 1486.033833][T16467] device hsr_slave_1 entered promiscuous mode [ 1486.208477][T13389] tipc: Left network mode [ 1486.377199][T12204] usb 2-1: USB disconnect, device number 66 [ 1486.446729][ T4334] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1486.663405][ T4334] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1486.781038][ T4334] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1486.810886][ T4334] usb 3-1: Product: syz [ 1486.815244][ T4334] usb 3-1: SerialNumber: syz [ 1486.889439][ T4334] usb 3-1: config 0 descriptor?? [ 1487.977765][T16467] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1487.996751][ T9203] Bluetooth: hci0: command 0x040f tx timeout [ 1488.076817][T14255] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1488.083614][ T9203] Bluetooth: hci3: command 0x1003 tx timeout [ 1488.118272][ T4334] usb 3-1: USB disconnect, device number 39 [ 1488.277137][T16467] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1488.326274][T16467] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1488.487193][ T26] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 1488.596086][T16467] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1488.708228][ T26] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 1488.716411][ T26] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1488.728621][T13389] device hsr_slave_0 left promiscuous mode [ 1488.764870][T13389] device hsr_slave_1 left promiscuous mode [ 1488.782341][T13389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1488.805983][T13389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1488.835764][ T26] usb 6-1: config 8 has no interface number 0 [ 1488.865524][ T26] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 1488.924198][ T26] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1488.963050][ T26] usb 6-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1489.011070][ T26] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1489.046750][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.072731][T13389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1489.104634][T13389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1489.132124][T13389] device bridge_slave_1 left promiscuous mode [ 1489.161926][T13389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.181700][ T26] usb 6-1: NFC: intf ffff88814433d000 id ffffffff8d406400 [ 1489.206372][T13389] device bridge_slave_0 left promiscuous mode [ 1489.233513][T13389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.542627][ T27] audit: type=1107 audit(1777689906.297:1522): pid=16536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1490.076629][T14255] Bluetooth: hci0: command 0x0419 tx timeout [ 1490.958262][T13389] device veth1_macvtap left promiscuous mode [ 1491.041650][T13389] device veth0_macvtap left promiscuous mode [ 1492.611737][ T4334] usb 6-1: USB disconnect, device number 46 [ 1493.352823][T16577] loop2: detected capacity change from 0 to 1024 [ 1493.370033][T16574] kvm: pic: non byte write [ 1493.524850][T16577] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1493.570857][T16577] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1493.946437][T16577] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.2869: lblock 0 mapped to illegal pblock 0 (length 1) [ 1493.985921][T16577] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1493.998465][T16577] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1493.998465][T16577] [ 1494.137416][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 1494.748844][T13389] team0 (unregistering): Port device team_slave_1 removed [ 1494.806970][T13389] team0 (unregistering): Port device team_slave_0 removed [ 1494.882361][T13389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1495.009603][T13389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1495.125784][T16599] kvm: pic: non byte write [ 1495.520167][T13389] bond0 (unregistering): Released all slaves [ 1495.685418][T16586] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2867'. [ 1496.071594][T16467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1496.114448][ T5645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1496.131350][ T5645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1496.193994][T16467] 8021q: adding VLAN 0 to HW filter on device team0 [ 1496.239237][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1496.256163][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1496.297593][ T4362] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.304821][ T4362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1496.364029][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1496.416731][ T26] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1496.623829][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1496.641510][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1496.708067][ T4362] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.715412][ T4362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1496.768246][ T26] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 1496.786663][ T26] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.810455][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1496.823097][ T26] usb 2-1: config 8 has no interface number 0 [ 1496.844309][ T26] usb 2-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 1496.880906][ T26] usb 2-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1496.913665][ T26] usb 2-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1496.977680][ T26] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1497.024491][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.094890][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1497.107343][ T26] usb 2-1: NFC: intf ffff88807362c000 id ffffffff8d406400 [ 1497.141522][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1497.175691][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1497.228250][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1497.294567][T16467] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1497.469611][ T27] audit: type=1107 audit(1777689914.227:1523): pid=16619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1498.912417][T16467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1499.060221][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1499.140828][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1499.261703][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1499.388096][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1499.495674][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1499.612824][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1499.738168][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1500.535416][T16123] usb 2-1: USB disconnect, device number 67 [ 1501.983785][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1502.014019][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1502.053693][T16467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1502.217787][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1502.235123][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1502.354793][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1502.370487][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1502.396952][T16467] device veth0_vlan entered promiscuous mode [ 1502.416328][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1502.443525][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1502.470906][T16467] device veth1_vlan entered promiscuous mode [ 1502.520239][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1502.530029][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1502.540636][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1502.803440][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1502.841785][T16467] device veth0_macvtap entered promiscuous mode [ 1502.875980][T16467] device veth1_macvtap entered promiscuous mode [ 1503.182816][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1503.222853][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1503.265800][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1503.295897][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1503.332518][T16467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1503.362845][T13389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1503.382553][T13389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1503.418097][T13389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1503.480375][T13389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1503.596655][T16679] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2886'. [ 1503.628354][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1503.665728][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1503.720807][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1503.791747][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1503.884465][T16467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1503.955737][ T5645] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1503.974293][ T5645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1504.010196][T16467] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.036164][T16467] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.070952][T16467] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.100419][T16467] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.258199][T13681] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1504.405157][ T5642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.431817][ T5642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1504.451706][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1504.466733][T13681] usb 3-1: Using ep0 maxpacket: 16 [ 1504.476387][T13681] usb 3-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 1504.547697][ T5645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.556253][T13681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1504.571135][ T5645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1504.583564][T16703] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2891'. [ 1504.595677][ T5645] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1504.604780][T13681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1504.630146][T13681] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1504.652952][T13681] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1504.720963][T13681] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1504.814221][T13681] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1504.861311][T13681] usb 3-1: Manufacturer: syz [ 1504.918144][T13681] usb 3-1: config 0 descriptor?? [ 1504.943639][T16714] loop7: detected capacity change from 0 to 1024 [ 1505.039749][T16714] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1505.076791][T16714] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1505.200050][ T4431] kworker/dying (4431) used greatest stack depth: 20336 bytes left [ 1505.216605][T16717] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1505.338139][T16714] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: comm syz.7.2893: lblock 0 mapped to illegal pblock 0 (length 1) [ 1505.465711][T12446] EXT4-fs (loop7): unmounting filesystem. [ 1505.566649][T13681] rc_core: IR keymap rc-hauppauge not found [ 1505.572687][T13681] Registered IR keymap rc-empty [ 1505.596715][T13681] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1505.656715][T13681] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1505.697272][T13681] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1505.720529][T13681] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input42 [ 1505.737775][T13681] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1505.781949][T13681] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1505.836661][T13681] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1505.876638][T13681] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1505.928160][T13681] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1505.977400][T13681] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1506.007030][T13681] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1506.076727][T13681] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1506.151925][T13681] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1506.238931][T16633] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1506.266401][T13681] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1506.336924][T13681] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1506.457023][T16633] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1506.478328][T13681] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1506.489192][T16633] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1506.509152][T16633] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1506.529050][T16633] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1506.541492][T16633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.545490][T13681] usb 3-1: USB disconnect, device number 40 [ 1506.630579][T16633] usb 6-1: config 0 descriptor?? [ 1506.690693][T16746] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2899'. [ 1507.071190][T16633] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 1507.092280][T16752] kvm: pic: non byte write [ 1507.124546][T16633] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1507.333036][T16759] loop1: detected capacity change from 0 to 1024 [ 1507.471679][T16759] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1507.487511][T16759] ext4 filesystem being mounted at /599/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1507.771736][T16759] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.2905: lblock 0 mapped to illegal pblock 0 (length 1) [ 1507.795130][T16759] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1507.807676][T16759] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1507.807676][T16759] [ 1507.934728][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 1509.119290][ T5645] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.237450][T15971] usb 6-1: USB disconnect, device number 47 [ 1509.392986][ T5645] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.613184][ T9203] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1509.623940][ T9203] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1509.633480][ T9203] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1509.643175][ T9203] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1509.684451][ T9203] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1509.695071][ T9203] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1509.820020][ T5645] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.303796][ T5645] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.632071][T16801] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2914'. [ 1511.223807][ T5645] tipc: Left network mode [ 1511.312052][T16814] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2912'. [ 1511.756724][T14255] Bluetooth: hci3: command 0x0409 tx timeout [ 1511.805855][T16790] chnl_net:caif_netlink_parms(): no params data found [ 1512.132545][T16814] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2912'. [ 1512.361755][T16790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1512.395725][T16790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.427974][T16790] device bridge_slave_0 entered promiscuous mode [ 1512.727688][T16790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.745310][T16790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.775472][T16790] device bridge_slave_1 entered promiscuous mode [ 1512.984123][T16790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1513.041141][T16790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1513.394428][T16790] team0: Port device team_slave_0 added [ 1513.726664][T16790] team0: Port device team_slave_1 added [ 1513.836965][T14255] Bluetooth: hci3: command 0x041b tx timeout [ 1514.105593][T16845] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2920'. [ 1514.438634][T16790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1514.483552][T16790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1514.591811][T16790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1514.653706][T16790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1514.716622][T16790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1514.795047][T16790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1515.255984][ T5645] device hsr_slave_0 left promiscuous mode [ 1515.281074][ T5645] device hsr_slave_1 left promiscuous mode [ 1515.309398][ T5645] device bridge_slave_1 left promiscuous mode [ 1515.315862][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.333375][ T5645] device bridge_slave_0 left promiscuous mode [ 1515.342581][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.492051][ T5645] device bridge0 left promiscuous mode [ 1515.675933][ T5645] device veth1_macvtap left promiscuous mode [ 1515.780711][ T5645] device veth0_macvtap left promiscuous mode [ 1515.787241][ T5645] device veth1_vlan left promiscuous mode [ 1515.793234][ T5645] device veth0_vlan left promiscuous mode [ 1515.933330][T14255] Bluetooth: hci3: command 0x040f tx timeout [ 1516.924362][T16889] kvm: pic: non byte write [ 1517.997456][ T9203] Bluetooth: hci3: command 0x0419 tx timeout [ 1518.226947][T16633] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1518.441310][T16633] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1518.477987][T16633] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1518.565545][T16633] usb 8-1: Product: syz [ 1518.640843][T16633] usb 8-1: SerialNumber: syz [ 1518.802372][T16633] usb 8-1: config 0 descriptor?? [ 1519.917146][T14255] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1519.917585][ T9203] Bluetooth: hci4: command 0x1003 tx timeout [ 1521.040792][T16633] usb 8-1: USB disconnect, device number 17 [ 1521.256954][ T5645] team0 (unregistering): Port device team_slave_1 removed [ 1521.370914][ T5645] team0 (unregistering): Port device team_slave_0 removed [ 1521.480269][ T5645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1521.652451][ T5645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1522.609863][ T5645] bond0 (unregistering): Released all slaves [ 1522.815168][T16790] device hsr_slave_0 entered promiscuous mode [ 1522.823444][T16790] device hsr_slave_1 entered promiscuous mode [ 1522.856948][T16790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1522.865860][T16790] Cannot create hsr debugfs directory [ 1522.872929][T16871] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2925'. [ 1523.186763][ T4317] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1523.426638][ T4317] usb 8-1: Using ep0 maxpacket: 16 [ 1523.433748][ T4317] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1523.462949][ T4317] usb 8-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1523.492400][ T4317] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1523.505184][ T4317] usb 8-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1523.554082][ T4317] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.644516][ T4317] usb 8-1: config 0 descriptor?? [ 1523.972814][T16937] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 1524.089160][ T4317] usbhid 8-1:0.0: can't add hid device: -71 [ 1524.121096][ T4317] usbhid: probe of 8-1:0.0 failed with error -71 [ 1524.178250][ T4317] usb 8-1: USB disconnect, device number 18 [ 1526.088008][T16790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1526.231565][T16790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1526.301260][T16790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1526.361264][T16790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1526.817058][T16790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1526.901166][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1526.932475][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1526.968418][T16790] 8021q: adding VLAN 0 to HW filter on device team0 [ 1527.002431][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1527.023799][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1527.067518][ T4511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.074798][ T4511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.220964][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1527.265069][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1527.385757][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1527.520205][ T4511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.527412][ T4511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1527.684520][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1527.849477][ T5642] Bluetooth: hci4: Frame reassembly failed (-84) [ 1528.276852][ T5638] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1529.914386][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1529.916971][ T9203] Bluetooth: hci4: command 0x1003 tx timeout [ 1529.923506][T14255] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1530.062359][ T5638] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1530.103637][ T5638] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1530.353937][ T5638] usb 3-1: Product: syz [ 1530.517230][ T5638] usb 3-1: SerialNumber: syz [ 1530.727517][ T5638] usb 3-1: config 0 descriptor?? [ 1531.661589][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1531.885047][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1532.146897][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1532.267944][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1532.295452][ T5638] usb 3-1: USB disconnect, device number 41 [ 1532.417121][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1532.477078][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1532.536981][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1532.576417][T16790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1532.667687][T16790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1532.705608][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1532.745985][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1533.363531][T17003] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2948'. [ 1533.816922][T16633] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1534.036929][T16633] usb 4-1: Using ep0 maxpacket: 16 [ 1534.044254][T16633] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1534.112694][T16633] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1534.208484][T16633] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1534.220981][T16633] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1534.240893][T16633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.257048][T16633] usb 4-1: config 0 descriptor?? [ 1534.623001][T16633] usbhid 4-1:0.0: can't add hid device: -71 [ 1534.629901][T16633] usbhid: probe of 4-1:0.0 failed with error -71 [ 1534.790987][T16633] usb 4-1: USB disconnect, device number 57 [ 1534.817274][T13389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1534.831006][T13389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1535.028592][T16790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1535.044179][T17029] loop2: detected capacity change from 0 to 7 [ 1535.104530][T13029] Dev loop2: unable to read RDB block 7 [ 1535.114821][T13029] loop2: unable to read partition table [ 1535.143407][T13029] loop2: partition table beyond EOD, truncated [ 1535.174293][T17029] Dev loop2: unable to read RDB block 7 [ 1535.195921][T17029] loop2: unable to read partition table [ 1535.226826][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1535.242742][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1535.281391][T17029] loop2: partition table beyond EOD, truncated [ 1535.328758][T16790] device veth0_vlan entered promiscuous mode [ 1535.369645][T17029] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1535.382659][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1535.401056][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1535.421162][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1535.464899][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1535.673019][T16790] device veth1_vlan entered promiscuous mode [ 1535.842606][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1535.880793][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1535.964351][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1535.992752][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1536.076023][T16790] device veth0_macvtap entered promiscuous mode [ 1536.118417][T16790] device veth1_macvtap entered promiscuous mode [ 1536.197619][T16790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1536.236723][T16790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1536.275477][T16790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1536.314248][T16790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1536.361412][T16790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1536.456155][T16790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1536.531084][T16790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1536.581976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1536.600306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1536.668753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1536.756802][T16790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1536.819124][T16790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1536.902956][T16790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1536.968261][ T27] audit: type=1326 audit(1777689953.727:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.3.2956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7533f9cdd9 code=0x7ffc0000 [ 1536.997357][T16790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.035570][T16790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1537.062283][T16790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.106627][ T27] audit: type=1326 audit(1777689953.727:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.3.2956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7533f9cdd9 code=0x7ffc0000 [ 1537.154796][T16790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1537.219929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1537.257335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1537.332250][T16790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.343984][ T27] audit: type=1326 audit(1777689953.747:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.3.2956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f7533f9cdd9 code=0x7ffc0000 [ 1537.387815][T16790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.444881][T16790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.463099][ T27] audit: type=1326 audit(1777689953.747:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.3.2956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7533f9cdd9 code=0x7ffc0000 [ 1537.486654][T16790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.716838][ T27] audit: type=1326 audit(1777689953.747:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.3.2956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7533f9cdd9 code=0x7ffc0000 [ 1537.867773][T13389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.906381][T13389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.946662][ T27] audit: type=1326 audit(1777689953.747:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.3.2956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7533f9cdd9 code=0x7ffc0000 [ 1538.003627][T11839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1538.046825][T13389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1538.067826][T11839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1538.117170][T13389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1538.124934][ T27] audit: type=1326 audit(1777689953.757:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.3.2956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7533f9cdd9 code=0x7ffc0000 [ 1538.301848][ T27] audit: type=1326 audit(1777689953.757:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.3.2956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7533f9cdd9 code=0x7ffc0000 [ 1538.546621][T16123] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1538.626667][ T27] audit: type=1326 audit(1777689953.757:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.3.2956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7533f5d60e code=0x7ffc0000 [ 1538.788330][T16123] usb 4-1: Using ep0 maxpacket: 16 [ 1538.806255][T16123] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1538.828487][ T27] audit: type=1326 audit(1777689953.767:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17046 comm="syz.3.2956" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7533f9e0d7 code=0x7ffc0000 [ 1540.476617][T14255] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1540.476675][ T9203] Bluetooth: hci4: command 0x1003 tx timeout [ 1540.524197][T16123] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1540.849603][T16123] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1540.881699][T16123] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1540.944573][T16123] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.973956][T16123] usb 4-1: config 0 descriptor?? [ 1541.270363][T16123] usbhid 4-1:0.0: can't add hid device: -71 [ 1541.276824][T16633] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1541.286824][T16123] usbhid: probe of 4-1:0.0 failed with error -71 [ 1541.314051][T16123] usb 4-1: USB disconnect, device number 58 [ 1541.481188][T16633] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1541.526641][T16633] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1541.555098][T16633] usb 3-1: Product: syz [ 1541.565258][T16633] usb 3-1: SerialNumber: syz [ 1541.590207][T16633] usb 3-1: config 0 descriptor?? [ 1541.735998][T17086] kvm: pic: non byte write [ 1541.832082][T16633] usb 3-1: USB disconnect, device number 42 [ 1542.745963][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 1542.745980][ T27] audit: type=1326 audit(1777689959.497:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17100 comm="syz.5.2967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f999cdd9 code=0x7ffc0000 [ 1542.945925][ T27] audit: type=1326 audit(1777689959.537:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17100 comm="syz.5.2967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f999cdd9 code=0x7ffc0000 [ 1543.006325][ T27] audit: type=1326 audit(1777689959.537:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17100 comm="syz.5.2967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7ff9f999cdd9 code=0x7ffc0000 [ 1543.196773][ T27] audit: type=1326 audit(1777689959.537:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17100 comm="syz.5.2967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f999cdd9 code=0x7ffc0000 [ 1543.240775][ T27] audit: type=1326 audit(1777689959.537:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17100 comm="syz.5.2967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f999cdd9 code=0x7ffc0000 [ 1543.273927][ T27] audit: type=1326 audit(1777689959.537:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17100 comm="syz.5.2967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff9f999cdd9 code=0x7ffc0000 [ 1543.695657][ T27] audit: type=1326 audit(1777689959.537:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17100 comm="syz.5.2967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f999cdd9 code=0x7ffc0000 [ 1543.866208][ T9203] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1543.888804][ T9203] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1543.900489][ T9203] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1543.911138][ T9203] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1543.939847][ T9203] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1543.950528][ T9203] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1543.967447][ T27] audit: type=1326 audit(1777689959.537:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17100 comm="syz.5.2967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f999cdd9 code=0x7ffc0000 [ 1544.004531][ T27] audit: type=1326 audit(1777689959.537:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17100 comm="syz.5.2967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9f995d60e code=0x7ffc0000 [ 1544.089274][ T27] audit: type=1326 audit(1777689959.537:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17100 comm="syz.5.2967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff9f999e0d7 code=0x7ffc0000 [ 1544.422469][ T5645] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.106645][T16123] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1546.007977][ T9203] Bluetooth: hci2: command 0x0409 tx timeout [ 1546.159402][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.165900][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.716684][T14255] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1546.716721][ T9203] Bluetooth: hci4: command 0x1003 tx timeout [ 1546.868889][T16123] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1547.029748][T16123] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1547.254693][T16123] usb 4-1: Product: syz [ 1547.295180][T16123] usb 4-1: SerialNumber: syz [ 1547.384773][T16123] usb 4-1: config 0 descriptor?? [ 1548.076629][T14255] Bluetooth: hci2: command 0x041b tx timeout [ 1548.344615][ T5645] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.914623][ T5645] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.205818][T16123] usb 4-1: USB disconnect, device number 59 [ 1549.319959][ T5645] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.357224][T14255] Bluetooth: hci2: command 0x040f tx timeout [ 1550.673233][ T5645] tipc: Left network mode [ 1550.779899][ T5638] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1551.026847][ T5638] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 1551.042572][ T5638] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.053349][ T5638] usb 6-1: config 8 has no interface number 0 [ 1551.065681][ T5638] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 1551.087377][ T5638] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1551.106633][ T5638] usb 6-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1551.138682][ T5638] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1551.148877][ T5638] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.173136][T17117] chnl_net:caif_netlink_parms(): no params data found [ 1551.196271][ T5638] usb 6-1: NFC: intf ffff888057805000 id ffffffff8d406400 [ 1551.266718][ T27] kauditd_printk_skb: 43 callbacks suppressed [ 1551.266736][ T27] audit: type=1326 audit(1777689968.017:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17150 comm="syz.3.2980" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7533f9cdd9 code=0x7ffc0000 [ 1551.326821][ T27] audit: type=1326 audit(1777689968.027:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17150 comm="syz.3.2980" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7533f9cdd9 code=0x7ffc0000 [ 1551.382153][ T27] audit: type=1326 audit(1777689968.027:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17150 comm="syz.3.2980" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f7533f9cdd9 code=0x7ffc0000 [ 1552.213538][ T27] audit: type=1326 audit(1777689968.027:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17150 comm="syz.3.2980" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7533f9cdd9 code=0x7ffc0000 [ 1552.396640][T14255] Bluetooth: hci2: command 0x0419 tx timeout [ 1553.072415][ T27] audit: type=1326 audit(1777689968.027:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17150 comm="syz.3.2980" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7533f9cdd9 code=0x7ffc0000 [ 1553.451501][ T27] audit: type=1326 audit(1777689968.027:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17150 comm="syz.3.2980" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7533f9cdd9 code=0x7ffc0000 [ 1553.803089][ T27] audit: type=1326 audit(1777689968.027:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17150 comm="syz.3.2980" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7533f5d60e code=0x7ffc0000 [ 1554.134992][ T27] audit: type=1326 audit(1777689968.067:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17150 comm="syz.3.2980" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7533f9e0d7 code=0x7ffc0000 [ 1554.475494][ T27] audit: type=1326 audit(1777689968.067:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17150 comm="syz.3.2980" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7533f9cdd9 code=0x7ffc0000 [ 1554.672322][T16123] usb 6-1: USB disconnect, device number 48 [ 1554.956209][ T27] audit: type=1326 audit(1777689968.067:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17150 comm="syz.3.2980" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7533f9e0d7 code=0x7ffc0000 [ 1555.304247][T17117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1555.316758][T17117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.325107][T17117] device bridge_slave_0 entered promiscuous mode [ 1555.669239][T17117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.684963][T17117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.693407][T17117] device bridge_slave_1 entered promiscuous mode [ 1556.567180][ T5645] IPVS: stopping master sync thread 5880 ... [ 1556.573889][T17117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1556.596216][T17117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1556.922429][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 1556.922447][ T27] audit: type=1326 audit(1777689973.677:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17207 comm="syz.7.2991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0019cdd9 code=0x7ffc0000 [ 1556.961573][ T27] audit: type=1326 audit(1777689973.687:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17207 comm="syz.7.2991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0019cdd9 code=0x7ffc0000 [ 1557.120453][T17117] team0: Port device team_slave_0 added [ 1557.144117][T17117] team0: Port device team_slave_1 added [ 1557.164080][ T27] audit: type=1326 audit(1777689973.717:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17207 comm="syz.7.2991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7efe0019cdd9 code=0x7ffc0000 [ 1557.202478][ T27] audit: type=1326 audit(1777689973.717:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17207 comm="syz.7.2991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0019cdd9 code=0x7ffc0000 [ 1557.235814][ T27] audit: type=1326 audit(1777689973.717:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17207 comm="syz.7.2991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0019cdd9 code=0x7ffc0000 [ 1557.267986][ T27] audit: type=1326 audit(1777689973.717:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17207 comm="syz.7.2991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe0019cdd9 code=0x7ffc0000 [ 1557.300536][ T27] audit: type=1326 audit(1777689973.717:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17207 comm="syz.7.2991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0019cdd9 code=0x7ffc0000 [ 1557.348862][ T27] audit: type=1326 audit(1777689973.717:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17207 comm="syz.7.2991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0019cdd9 code=0x7ffc0000 [ 1557.501971][ T27] audit: type=1326 audit(1777689973.717:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17207 comm="syz.7.2991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe0015d60e code=0x7ffc0000 [ 1557.635701][T17117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1557.655999][T17117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1557.691772][T17117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1557.724960][ T5645] device hsr_slave_0 left promiscuous mode [ 1557.724957][ T27] audit: type=1326 audit(1777689973.717:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17207 comm="syz.7.2991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7efe0019e0d7 code=0x7ffc0000 [ 1557.922611][ T5645] device hsr_slave_1 left promiscuous mode [ 1557.939471][ T5645] device bridge_slave_1 left promiscuous mode [ 1557.960925][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.978693][ T5645] device bridge_slave_0 left promiscuous mode [ 1557.985177][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.033829][ T5645] device veth1_macvtap left promiscuous mode [ 1558.043749][ T5645] device veth0_macvtap left promiscuous mode [ 1558.161513][T12678] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1558.186854][T16123] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1558.220305][ T5638] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1558.325151][T12678] usb 8-1: device descriptor read/64, error -71 [ 1558.416634][T16123] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1558.444853][T16123] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1558.448169][ T5638] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 1558.462032][T16123] usb 6-1: can't read configurations, error -71 [ 1558.481538][ T5638] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.552958][ T5638] usb 2-1: config 8 has no interface number 0 [ 1558.559734][ T5638] usb 2-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 1558.575429][ T5638] usb 2-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1558.593113][ T5638] usb 2-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1558.606872][ T5638] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1558.616018][ T5638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.637253][T12678] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1558.654708][ T5638] usb 2-1: NFC: intf ffff88807be70000 id ffffffff8d406400 [ 1558.814078][T12678] usb 8-1: device descriptor read/64, error -71 [ 1558.940811][T12678] usb usb8-port1: attempt power cycle [ 1560.457896][T12678] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1560.518184][T12678] usb 8-1: device descriptor read/8, error -71 [ 1560.836689][T12678] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1561.411445][T12678] usb 8-1: device descriptor read/8, error -71 [ 1561.547257][T12678] usb usb8-port1: unable to enumerate USB device [ 1562.541158][T16983] usb 2-1: USB disconnect, device number 68 [ 1562.556362][ T5645] team0 (unregistering): Port device team_slave_1 removed [ 1563.837499][ T5645] team0 (unregistering): Port device team_slave_0 removed [ 1563.990136][ T5645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1564.074923][ T5645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1564.852713][ T5645] bond0 (unregistering): Released all slaves [ 1565.037148][T17117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1565.044189][T17117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1565.121699][T17117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1565.164338][T17237] device syzkaller0 entered promiscuous mode [ 1565.366191][T17117] device hsr_slave_0 entered promiscuous mode [ 1565.464958][T17117] device hsr_slave_1 entered promiscuous mode [ 1565.480167][T17117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1565.501639][T17117] Cannot create hsr debugfs directory [ 1565.698757][ T27] kauditd_printk_skb: 35 callbacks suppressed [ 1565.698773][ T27] audit: type=1326 audit(1777689982.457:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.5.3005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f999cdd9 code=0x7ffc0000 [ 1565.889523][ T27] audit: type=1326 audit(1777689982.487:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.5.3005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f999cdd9 code=0x7ffc0000 [ 1565.961606][ T27] audit: type=1326 audit(1777689982.487:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.5.3005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7ff9f999cdd9 code=0x7ffc0000 [ 1566.032470][ T27] audit: type=1326 audit(1777689982.487:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.5.3005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f999cdd9 code=0x7ffc0000 [ 1566.150859][ T27] audit: type=1326 audit(1777689982.487:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.5.3005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f999cdd9 code=0x7ffc0000 [ 1566.285358][ T27] audit: type=1326 audit(1777689982.527:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.5.3005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff9f999cdd9 code=0x7ffc0000 [ 1566.411080][ T27] audit: type=1326 audit(1777689982.527:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.5.3005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f999cdd9 code=0x7ffc0000 [ 1566.573710][ T27] audit: type=1326 audit(1777689982.527:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.5.3005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f999cdd9 code=0x7ffc0000 [ 1566.744695][ T27] audit: type=1326 audit(1777689982.527:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.5.3005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9f995d60e code=0x7ffc0000 [ 1566.853499][ T27] audit: type=1326 audit(1777689982.527:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.5.3005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff9f999e0d7 code=0x7ffc0000 [ 1566.946772][T16633] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 1567.160101][T16633] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 1567.176432][T16633] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.212137][T17117] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1567.214001][T16633] usb 6-1: config 8 has no interface number 0 [ 1567.355378][T16633] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 1567.366924][T16633] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1567.380819][T16633] usb 6-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1567.401111][T16633] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1567.420899][T16633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.144122][T16633] usb 6-1: NFC: intf ffff888068bc5000 id ffffffff8d406400 [ 1568.172094][T17117] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1568.198776][T17117] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1568.250085][T17117] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1570.911684][T17117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1571.191631][T17004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1571.242026][T17004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1571.359086][T17117] 8021q: adding VLAN 0 to HW filter on device team0 [ 1571.550657][T17004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1571.573419][T16633] usb 6-1: USB disconnect, device number 51 [ 1571.635734][T17004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1571.810627][T17004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.817858][T17004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1572.066422][T17004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1572.159848][T17004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1572.169937][T17004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1572.179585][T17004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.186793][T17004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1572.232913][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1572.267444][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1572.348345][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1572.385309][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1572.411018][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1572.507893][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1572.543942][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1572.607442][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1572.626690][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1572.667106][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1572.702888][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1572.789269][T17117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1572.822042][T17328] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3014'. [ 1573.142985][T17335] netlink: 65536 bytes leftover after parsing attributes in process `syz.1.3015'. [ 1573.762363][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1573.783006][ T27] kauditd_printk_skb: 47 callbacks suppressed [ 1573.783023][ T27] audit: type=1326 audit(1777689990.537:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.7.3017" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0019cdd9 code=0x7ffc0000 [ 1573.828428][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1573.873552][T17117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1573.919116][ T27] audit: type=1326 audit(1777689990.537:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.7.3017" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0019cdd9 code=0x7ffc0000 [ 1573.965582][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1573.991145][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1574.001265][ T27] audit: type=1326 audit(1777689990.547:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.7.3017" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7efe0019cdd9 code=0x7ffc0000 [ 1574.085327][T17117] device veth0_vlan entered promiscuous mode [ 1574.095065][ T27] audit: type=1326 audit(1777689990.547:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.7.3017" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0019cdd9 code=0x7ffc0000 [ 1574.128592][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1574.147762][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1574.193599][T17117] device veth1_vlan entered promiscuous mode [ 1574.200968][ T27] audit: type=1326 audit(1777689990.547:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.7.3017" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0019cdd9 code=0x7ffc0000 [ 1574.234448][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1574.243482][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1574.259088][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1574.307146][ T27] audit: type=1326 audit(1777689990.547:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.7.3017" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe0019cdd9 code=0x7ffc0000 [ 1574.401184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1574.413945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1574.424265][ T27] audit: type=1326 audit(1777689990.547:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.7.3017" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0019cdd9 code=0x7ffc0000 [ 1574.462685][T17117] device veth0_macvtap entered promiscuous mode [ 1574.481692][T17117] device veth1_macvtap entered promiscuous mode [ 1574.501276][ T27] audit: type=1326 audit(1777689990.547:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.7.3017" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe0015d60e code=0x7ffc0000 [ 1574.576800][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1574.642906][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1574.711384][ T27] audit: type=1326 audit(1777689990.547:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.7.3017" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7efe0019e0d7 code=0x7ffc0000 [ 1574.746319][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1574.814512][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1574.903085][ T27] audit: type=1326 audit(1777689990.547:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17347 comm="syz.7.3017" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe0019cdd9 code=0x7ffc0000 [ 1574.941550][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1575.050745][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.114443][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1575.347542][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.547400][T17117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1575.589320][ T5638] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1575.623878][ T5645] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1575.647538][ T5645] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1575.670169][ T5645] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1575.696142][ T5009] Bluetooth: hci4: Frame reassembly failed (-84) [ 1575.745341][ T5645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1575.788265][ T5638] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 1575.820904][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1575.846283][ T5638] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.860468][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.888882][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1575.923228][ T5638] usb 2-1: config 8 has no interface number 0 [ 1575.929668][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.980349][ T5638] usb 2-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 1575.987012][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1576.017751][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1576.041988][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1576.059577][ T5638] usb 2-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1576.090749][ T5638] usb 2-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1576.102702][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1576.134229][ T5638] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1576.150662][ T5638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.164059][T17117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1576.194636][ T5645] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1576.214290][ T5645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1576.251864][ T5638] usb 2-1: NFC: intf ffff8880770f6000 id ffffffff8d406400 [ 1576.272553][T17117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.331119][T17117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.384817][T17117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.396620][T12678] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1576.429357][T17117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.176103][T12678] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1577.698477][T12678] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1577.756658][ T9203] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1577.756766][T14255] Bluetooth: hci4: command 0x1003 tx timeout [ 1577.891191][T12678] usb 4-1: Product: syz [ 1577.964890][T12678] usb 4-1: SerialNumber: syz [ 1578.068869][T12678] usb 4-1: config 0 descriptor?? [ 1578.371153][T12678] usb 4-1: USB disconnect, device number 60 [ 1579.642320][T13681] usb 2-1: USB disconnect, device number 69 [ 1580.267213][T13389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.275082][T13389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.357172][T13389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1580.380821][T17397] loop3: detected capacity change from 0 to 1024 [ 1580.418813][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.496674][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.514205][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1580.622018][T17397] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1580.636792][T17397] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1581.008739][T17414] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.3025: lblock 0 mapped to illegal pblock 0 (length 1) [ 1581.022716][T17414] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1581.035166][T17414] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1581.035166][T17414] [ 1581.046354][T17414] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: comm syz.3.3025: lblock 0 mapped to illegal pblock 0 (length 1) [ 1581.510900][T16467] EXT4-fs (loop3): unmounting filesystem. [ 1584.043706][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.088117][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1584.099470][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1584.108066][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1584.116169][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1584.135591][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1584.143184][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1584.230232][T17454] device syzkaller0 entered promiscuous mode [ 1584.390078][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.436576][T15971] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1584.568880][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.632506][T15971] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 1584.653644][T15971] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1584.675072][T15971] usb 4-1: config 8 has no interface number 0 [ 1584.700738][T15971] usb 4-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 1584.762550][T15971] usb 4-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1584.824396][T15971] usb 4-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1584.858736][T15971] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1584.920750][T15971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.995577][T15971] usb 4-1: NFC: intf ffff888059e03000 id ffffffff8d406400 [ 1585.037994][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.413775][ T27] kauditd_printk_skb: 43 callbacks suppressed [ 1585.413793][ T27] audit: type=1107 audit(1777690002.167:1798): pid=17455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1586.236611][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 1588.500170][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 1588.555875][T16633] usb 4-1: USB disconnect, device number 61 [ 1589.292729][ T9] tipc: Left network mode [ 1589.612699][T17456] chnl_net:caif_netlink_parms(): no params data found [ 1590.053592][T17456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.061232][T17456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.071243][T17456] device bridge_slave_0 entered promiscuous mode [ 1590.089181][T17456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.103267][T17456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.120560][T17456] device bridge_slave_1 entered promiscuous mode [ 1590.281630][T17456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1590.558087][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 1590.924431][T17456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1591.019281][T17516] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3045'. [ 1591.218053][T17456] team0: Port device team_slave_0 added [ 1591.392241][T17456] team0: Port device team_slave_1 added [ 1591.497788][T17528] loop2: detected capacity change from 0 to 7 [ 1591.505480][T13029] Dev loop2: unable to read RDB block 7 [ 1591.532135][T13029] loop2: unable to read partition table [ 1591.542529][T13029] loop2: partition table beyond EOD, truncated [ 1591.558652][T17456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1591.576304][T17456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1591.616056][T17528] Dev loop2: unable to read RDB block 7 [ 1591.637597][T17528] loop2: unable to read partition table [ 1591.643566][T17528] loop2: partition table beyond EOD, truncated [ 1591.686660][T17528] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1591.716224][T17456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1591.954766][T17456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1591.967540][T17456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1592.106935][T17456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1592.600691][T17456] device hsr_slave_0 entered promiscuous mode [ 1592.636741][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 1592.706736][T17456] device hsr_slave_1 entered promiscuous mode [ 1592.724073][T17456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1592.742368][T17456] Cannot create hsr debugfs directory [ 1592.790500][ T9] device hsr_slave_0 left promiscuous mode [ 1592.798761][ T9] device hsr_slave_1 left promiscuous mode [ 1592.832831][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1592.848610][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1592.858333][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1592.865833][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1592.897872][T15971] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 1592.919206][ T9] device bridge_slave_1 left promiscuous mode [ 1592.935942][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.958396][T16983] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1592.968557][ T9] device bridge_slave_0 left promiscuous mode [ 1592.974927][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.034141][ T9] device veth1_macvtap left promiscuous mode [ 1593.053923][ T9] device veth0_macvtap left promiscuous mode [ 1593.067511][ T9] device veth1_vlan left promiscuous mode [ 1593.087491][ T9] device veth0_vlan left promiscuous mode [ 1593.098860][T15971] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 1593.118085][T15971] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.150164][T15971] usb 4-1: config 8 has no interface number 0 [ 1593.156347][T15971] usb 4-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 1593.167386][T16983] usb 2-1: Using ep0 maxpacket: 16 [ 1593.174351][T16983] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1593.196890][T16983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.226773][T15971] usb 4-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1593.246803][T16983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1593.266877][T15971] usb 4-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1593.280467][T16983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1593.296744][T16983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1593.307601][T15971] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1593.320168][T16983] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1593.333508][T15971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.366889][T15971] usb 4-1: NFC: intf ffff888079732000 id ffffffff8d406400 [ 1593.375691][T16983] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1593.405555][T16983] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1593.413956][T16983] usb 2-1: Manufacturer: syz [ 1593.436014][T16983] usb 2-1: config 0 descriptor?? [ 1593.708492][ T27] audit: type=1107 audit(1777690010.467:1799): pid=17549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1596.776627][T16983] rc_core: IR keymap rc-hauppauge not found [ 1596.782726][T16983] Registered IR keymap rc-empty [ 1596.805691][T16538] usb 4-1: USB disconnect, device number 62 [ 1597.318305][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1597.346601][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1597.397188][T16983] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1597.418157][T16983] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input43 [ 1597.480100][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1597.526617][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1597.685902][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1597.845711][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1598.126788][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1598.186610][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1598.216589][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1598.256664][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1598.286596][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1598.340115][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1598.407848][T16983] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1598.444560][T16983] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1598.542577][T16983] usb 2-1: USB disconnect, device number 70 [ 1600.123908][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1600.359286][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1600.499301][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1600.609405][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1601.583765][ T9] bond0 (unregistering): Released all slaves [ 1601.740072][T15971] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1602.008458][T15971] usb 3-1: Using ep0 maxpacket: 16 [ 1602.054886][T17618] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3066'. [ 1602.127971][T15971] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1602.167818][T15971] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.232467][T17580] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3057'. [ 1602.284219][T15971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1602.312486][T15971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1602.327060][T15971] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1602.336969][T15971] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1602.351461][T15971] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1602.381045][T15971] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1602.394820][T15971] usb 3-1: Manufacturer: syz [ 1602.408494][T15971] usb 3-1: config 0 descriptor?? [ 1602.976690][T15971] rc_core: IR keymap rc-hauppauge not found [ 1602.984010][T15971] Registered IR keymap rc-empty [ 1603.003741][T15971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1603.060142][T15971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1603.147423][T15971] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1603.212623][T15971] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input44 [ 1603.345612][T15971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1603.426897][T15971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1603.487438][T15971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1603.529378][T15971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1603.566951][T15971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1603.619580][T15971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1603.657822][T15971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1603.696696][T15971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1603.736654][T15971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1603.776639][T15971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1603.806281][T17456] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1603.837476][T15971] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1603.860218][T15971] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1603.894432][T17456] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1603.905492][T15971] usb 3-1: USB disconnect, device number 43 [ 1603.952606][T17456] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1603.983166][T17456] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1604.304023][T17456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1604.331586][T17519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1604.349502][T17519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1604.384103][T17456] 8021q: adding VLAN 0 to HW filter on device team0 [ 1604.427198][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1604.452925][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1604.505785][ T4625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.513035][ T4625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1604.556607][T17388] Bluetooth: hci0: command 0x0406 tx timeout [ 1604.612910][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1604.649225][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1604.731272][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1604.802522][ T4625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.809767][ T4625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1604.882319][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1604.931223][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1605.002363][T17519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1605.051681][T17519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1605.109391][T17519] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1605.154398][T17519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1605.198382][T17519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1605.241921][T17519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1605.283714][T17519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1605.338575][T17456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1605.393152][T17456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1605.431121][T17519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1605.452563][T17519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1607.613088][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.644356][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.828796][T17680] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3076'. [ 1609.079755][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1609.126326][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1609.170845][T17456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1610.795236][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1610.830267][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1610.871341][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1610.881494][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1610.893756][T17456] device veth0_vlan entered promiscuous mode [ 1610.904734][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1610.915323][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1610.940387][T17456] device veth1_vlan entered promiscuous mode [ 1611.045227][T11839] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1611.058566][T11839] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1611.104268][T11839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1611.121219][T11839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1611.136240][T17456] device veth0_macvtap entered promiscuous mode [ 1611.176171][T17456] device veth1_macvtap entered promiscuous mode [ 1611.203743][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1611.223571][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1611.250760][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1611.302963][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1611.336770][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1611.380072][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1611.410863][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1611.463097][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1611.499006][T17456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1611.518581][T11839] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1611.532218][T11839] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1611.556070][T11839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1611.587287][T11839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1611.630455][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1611.651834][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1611.676384][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1611.730492][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1611.760309][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1611.790729][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1611.801067][T17456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1611.823162][T17456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1611.844838][T17456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1611.874916][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1611.898268][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1611.958185][T17456] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.004457][T17456] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.023397][T17456] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.053741][T17456] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.460355][ T5645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.488008][ T5645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.578047][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1612.639311][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.675552][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.744510][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1613.901929][ T27] audit: type=1326 audit(1777690030.657:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17749 comm="syz.5.3029" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ac79cdd9 code=0x7ffc0000 [ 1613.952990][ T27] audit: type=1326 audit(1777690030.687:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17749 comm="syz.5.3029" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ac79cdd9 code=0x7ffc0000 [ 1614.117818][T17751] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3089'. [ 1614.554070][ T27] audit: type=1326 audit(1777690030.737:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17749 comm="syz.5.3029" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f34ac79cdd9 code=0x7ffc0000 [ 1614.590118][ T27] audit: type=1326 audit(1777690030.747:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17749 comm="syz.5.3029" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ac79cdd9 code=0x7ffc0000 [ 1614.830873][ T27] audit: type=1326 audit(1777690030.757:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17749 comm="syz.5.3029" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34ac79cdd9 code=0x7ffc0000 [ 1614.949869][ T27] audit: type=1326 audit(1777690030.757:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17749 comm="syz.5.3029" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ac79cdd9 code=0x7ffc0000 [ 1615.023527][ T27] audit: type=1326 audit(1777690030.757:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17749 comm="syz.5.3029" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ac79cdd9 code=0x7ffc0000 [ 1615.103196][ T27] audit: type=1326 audit(1777690030.757:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17749 comm="syz.5.3029" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34ac75d60e code=0x7ffc0000 [ 1615.205953][ T27] audit: type=1326 audit(1777690030.767:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17749 comm="syz.5.3029" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f34ac79e0d7 code=0x7ffc0000 [ 1615.292618][ T27] audit: type=1326 audit(1777690030.767:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17749 comm="syz.5.3029" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f34ac79cdd9 code=0x7ffc0000 [ 1625.356876][ T5638] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 1625.552877][ T5638] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 1625.574685][ T5638] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1625.631932][ T5638] usb 6-1: config 8 has no interface number 0 [ 1625.654157][ T5638] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 1625.697873][ T5638] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1625.738481][ T5638] usb 6-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1625.790937][ T5638] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1625.823530][ T5638] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.875277][ T5638] usb 6-1: NFC: intf ffff888029777000 id ffffffff8d406400 [ 1626.234422][ T27] kauditd_printk_skb: 104 callbacks suppressed [ 1626.234440][ T27] audit: type=1107 audit(1777690042.987:1914): pid=17869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1629.457889][T15971] usb 6-1: USB disconnect, device number 52 [ 1631.286626][T12204] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1631.538175][T12204] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1631.545151][T12204] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1631.581818][T17900] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3129'. [ 1631.751154][T12204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.897321][T12204] usb 4-1: config 0 descriptor?? [ 1632.553978][T17906] loop2: detected capacity change from 0 to 1024 [ 1632.655235][T17906] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1632.675533][T17906] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1632.746749][T12678] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1632.920327][T12204] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 1632.986812][T17913] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.3131: lblock 0 mapped to illegal pblock 0 (length 1) [ 1633.006370][T17913] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1633.019155][T17913] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1633.019155][T17913] [ 1633.030771][T17913] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.3131: lblock 0 mapped to illegal pblock 0 (length 1) [ 1633.616810][T12678] usb 2-1: Using ep0 maxpacket: 16 [ 1633.635778][T12678] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1633.654880][T12204] usb 4-1: USB disconnect, device number 63 [ 1633.688955][T12678] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1633.762563][T12678] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1633.791500][T12678] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1633.833198][T12678] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1633.889492][T12678] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1633.901175][T17117] EXT4-fs (loop2): unmounting filesystem. [ 1633.910368][T12678] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1633.919601][T12678] usb 2-1: Manufacturer: syz [ 1633.930620][T12678] usb 2-1: config 0 descriptor?? [ 1634.456715][T12678] rc_core: IR keymap rc-hauppauge not found [ 1634.466253][T12678] Registered IR keymap rc-empty [ 1634.496571][T12678] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1634.537485][T12678] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1634.648269][T12678] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1634.704696][T12678] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input45 [ 1634.733246][T12678] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1634.773457][T12678] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1634.806602][T12678] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1634.847061][T12678] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1634.895584][T12678] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1634.927430][T12678] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1634.966689][T12678] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1635.006694][T12678] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1635.016695][ T7] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 1635.057413][T12678] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1635.086722][T12678] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1635.117980][T12678] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1635.137170][T12678] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1635.163003][T12678] usb 2-1: USB disconnect, device number 71 [ 1635.332025][ T7] usb 8-1: config 8 has an invalid interface number: 80 but max is 0 [ 1635.355498][ T7] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.381527][ T7] usb 8-1: config 8 has no interface number 0 [ 1635.388516][ T7] usb 8-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 1635.399999][ T7] usb 8-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1635.436582][ T7] usb 8-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1635.451221][ T7] usb 8-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1635.460493][ T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.676819][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 1636.084422][ T7] usb 8-1: NFC: intf ffff888057080000 id ffffffff8d406400 [ 1636.453521][ T27] audit: type=1107 audit(1777690053.207:1915): pid=17923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1639.325552][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 1639.607972][T15971] usb 8-1: USB disconnect, device number 23 [ 1639.686800][T12678] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1640.412546][T17950] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3140'. [ 1640.876470][T12678] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1640.885715][T12678] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1640.906616][T12678] usb 2-1: Product: syz [ 1640.941540][T12678] usb 2-1: SerialNumber: syz [ 1640.973311][T12678] usb 2-1: config 0 descriptor?? [ 1641.177406][T17956] loop7: detected capacity change from 0 to 1024 [ 1641.302484][T17956] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1641.313776][T17956] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1641.356969][ T48] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1641.363987][T17388] Bluetooth: hci4: command 0x1003 tx timeout [ 1641.530233][T12678] usb 2-1: USB disconnect, device number 72 [ 1643.034672][T17961] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1643.534635][ T27] audit: type=1800 audit(1777690060.257:1916): pid=17966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3142" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1643.644414][T12446] EXT4-fs (loop7): unmounting filesystem. [ 1645.068417][T17990] kvm: pic: non byte write [ 1645.337088][T12678] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1645.366557][T16633] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1645.556578][T16633] usb 8-1: Using ep0 maxpacket: 16 [ 1645.564116][T16633] usb 8-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 1645.582468][T12678] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 1645.613273][T12678] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.620874][T16633] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1645.656878][T16633] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1645.685734][T16633] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1645.699085][T12678] usb 3-1: config 8 has no interface number 0 [ 1645.705273][T12678] usb 3-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 1645.731190][T16633] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1645.775161][T16633] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1645.801196][T16633] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1645.832093][T16633] usb 8-1: Manufacturer: syz [ 1645.863430][T16633] usb 8-1: config 0 descriptor?? [ 1645.876612][T12678] usb 3-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1645.914999][T12678] usb 3-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1645.974936][T12678] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1646.019124][T12678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.119719][T12678] usb 3-1: NFC: intf ffff888059b4a000 id ffffffff8d406400 [ 1646.464876][ T27] audit: type=1107 audit(1777690063.217:1917): pid=17997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1647.236652][T16633] rc_core: IR keymap rc-hauppauge not found [ 1647.254500][T16633] Registered IR keymap rc-empty [ 1647.825232][T16633] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1647.919052][T16633] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1647.994036][T16633] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1648.177852][T16633] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input46 [ 1648.400965][T16633] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1648.507102][T16633] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1648.636755][T16633] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1648.757108][T16633] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1648.866831][T16633] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1648.947009][T16633] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1649.036770][T16633] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1649.096676][T16633] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1649.156654][T16633] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1649.229370][T16633] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1649.292730][T16633] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1649.358679][T16633] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1649.494338][T16633] usb 8-1: USB disconnect, device number 24 [ 1649.638139][T12204] usb 3-1: USB disconnect, device number 44 [ 1650.746592][ T4334] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1650.939170][ T4334] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1650.950217][ T4334] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1650.981254][ T4334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.998735][ T4334] usb 2-1: config 0 descriptor?? [ 1651.744100][ T5000] Bluetooth: hci4: Frame reassembly failed (-84) [ 1652.037873][ T4334] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 1652.206567][T15971] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1652.276755][T12204] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1652.495054][T12204] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1652.590600][T12204] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1652.741806][T12204] usb 8-1: Product: syz [ 1652.796529][T12204] usb 8-1: SerialNumber: syz [ 1652.893795][T12204] usb 8-1: config 0 descriptor?? [ 1652.971485][T17076] usb 2-1: USB disconnect, device number 73 [ 1653.756599][ T48] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1654.616565][T15971] usb 6-1: Using ep0 maxpacket: 16 [ 1654.921129][T15971] usb 6-1: device descriptor read/all, error -71 [ 1655.152200][T12204] usb 8-1: USB disconnect, device number 25 [ 1655.376535][ T7] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1655.578803][ T7] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 1655.596914][ T7] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.626498][ T7] usb 2-1: config 8 has no interface number 0 [ 1655.636712][ T7] usb 2-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 1655.666653][ T7] usb 2-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1655.696493][ T7] usb 2-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1655.720025][ T7] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1655.745914][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.785061][ T7] usb 2-1: NFC: intf ffff888055ac6000 id ffffffff8d406400 [ 1655.916628][ T5638] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1656.150143][ T27] audit: type=1107 audit(1777690072.907:1918): pid=18054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W' [ 1656.865440][ T5638] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.017727][ T5638] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1659.252216][T16538] usb 2-1: USB disconnect, device number 74 [ 1659.764929][ T5638] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.787027][ T5638] usb 8-1: config 0 descriptor?? [ 1659.792442][ T5638] usb 8-1: can't set config #0, error -71 [ 1659.799375][ T5638] usb 8-1: USB disconnect, device number 26 [ 1661.036761][T16633] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1661.226580][T16633] usb 3-1: Using ep0 maxpacket: 16 [ 1661.235554][T16633] usb 3-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 1661.299668][T16633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1661.319797][T16633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1661.338844][T16633] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1661.365215][T16633] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1661.432820][T16633] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1661.448348][T16633] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1661.502203][T16633] usb 3-1: Manufacturer: syz [ 1661.532769][T16633] usb 3-1: config 0 descriptor?? [ 1662.006841][T16633] rc_core: IR keymap rc-hauppauge not found [ 1662.013212][T16633] Registered IR keymap rc-empty [ 1662.041955][T16633] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1662.086696][T16633] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1662.117174][T16633] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1662.168039][T16633] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input47 [ 1662.244081][T16633] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1662.296632][T16633] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1662.346659][T16633] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1662.386616][T16633] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1662.418924][T16633] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1662.466698][T16633] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1662.506561][T16633] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1662.566595][T16633] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1662.606661][T16633] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1662.656664][T16633] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1662.727800][T16633] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1662.772869][T16633] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1664.958199][ T48] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1664.958256][T17388] Bluetooth: hci4: command 0x1003 tx timeout [ 1665.386540][T12678] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1665.517552][ T5638] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1665.655818][T12678] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1665.730752][ T5638] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.761540][T12678] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1665.848872][ T5638] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1665.932954][T12678] usb 8-1: Product: syz [ 1666.000841][T12678] usb 8-1: SerialNumber: syz [ 1666.029757][ T5638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.139359][T16633] usb 3-1: USB disconnect, device number 45 [ 1667.077599][T12678] usb 8-1: config 0 descriptor?? [ 1667.099090][ T5638] usb 4-1: config 0 descriptor?? [ 1667.141325][ T5638] usb 4-1: can't set config #0, error -71 [ 1667.359868][ T5638] usb 4-1: USB disconnect, device number 64 [ 1668.100104][T12678] usb 8-1: USB disconnect, device number 27 [ 1668.501219][T18142] binder: 18141:18142 ioctl 4018620d 0 returned -22 [ 1669.040357][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.054637][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.508718][ T5638] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1669.717181][ T5638] usb 8-1: Using ep0 maxpacket: 16 [ 1669.728035][ T5638] usb 8-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 1669.755369][ T5638] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1669.772484][ T5638] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1669.785172][ T5638] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1669.799275][ T5638] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1669.830042][ T5638] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1669.839433][ T5638] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1669.849896][ T5638] usb 8-1: Manufacturer: syz [ 1669.861434][ T5638] usb 8-1: config 0 descriptor?? [ 1670.196521][ T5638] rc_core: IR keymap rc-hauppauge not found [ 1670.202528][ T5638] Registered IR keymap rc-empty [ 1670.214309][ T5638] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1670.246743][T16633] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1670.256659][ T5638] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1670.298276][ T5638] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1670.319252][ T5638] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input48 [ 1670.347310][ T5638] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1670.396833][ T5638] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1670.446651][ T5638] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1670.477063][ T5638] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1670.516800][ T5638] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1670.558892][ T5638] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1670.597060][ T5638] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1670.642892][T16633] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.724307][T16633] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1670.786048][T16633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.884813][T16633] usb 6-1: config 0 descriptor?? [ 1670.980505][T16633] pwc: Askey VC010 type 2 USB webcam detected. [ 1671.136769][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 1671.356547][ T5638] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1671.395438][ T5638] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1671.456563][ T5638] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1671.487621][ T5638] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1671.516691][ T5638] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1671.551052][T16633] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1671.569657][T16633] pwc: recv_control_msg error -32 req 02 val 2700 [ 1671.576738][ T5638] usb 8-1: USB disconnect, device number 28 [ 1671.592162][T16633] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1671.608865][T16633] pwc: recv_control_msg error -71 req 04 val 1000 [ 1671.619085][T16633] pwc: recv_control_msg error -71 req 04 val 1300 [ 1671.626226][T16633] pwc: recv_control_msg error -71 req 04 val 1400 [ 1671.643761][T16633] pwc: recv_control_msg error -71 req 02 val 2000 [ 1671.672661][T16633] pwc: recv_control_msg error -71 req 02 val 2100 [ 1671.680743][T16633] pwc: recv_control_msg error -71 req 04 val 1500 [ 1671.699575][T16633] pwc: recv_control_msg error -71 req 02 val 2500 [ 1671.707610][T16633] pwc: recv_control_msg error -71 req 02 val 2400 [ 1671.715173][T16633] pwc: recv_control_msg error -71 req 02 val 2600 [ 1671.728806][T16633] pwc: recv_control_msg error -71 req 02 val 2900 [ 1671.739300][T16633] pwc: recv_control_msg error -71 req 02 val 2800 [ 1671.747432][T16633] pwc: recv_control_msg error -71 req 04 val 1100 [ 1671.755047][T16633] pwc: recv_control_msg error -71 req 04 val 1200 [ 1671.768355][T16633] pwc: Registered as video103. [ 1671.775613][T16633] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input49 [ 1671.826341][T16633] usb 6-1: USB disconnect, device number 55 [ 1672.387432][T12204] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1672.644782][T12204] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1672.753666][T12204] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1672.909121][T12204] usb 3-1: Product: syz [ 1672.991544][T12204] usb 3-1: SerialNumber: syz [ 1673.175109][T12204] usb 3-1: config 0 descriptor?? [ 1673.918629][T17388] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1673.918731][ T48] Bluetooth: hci4: command 0x1003 tx timeout [ 1675.285960][T12204] usb 3-1: USB disconnect, device number 46 [ 1675.863854][T18200] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3206'. [ 1676.946734][T13681] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1677.757181][T18231] binder: 18230:18231 ioctl 4018620d 0 returned -22 [ 1677.859062][T18231] binder: 18230:18231 ioctl c0306201 0 returned -14 [ 1677.867136][T13681] usb 8-1: Using ep0 maxpacket: 16 [ 1677.882370][T13681] usb 8-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 1677.949170][T13681] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1678.010443][T13681] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1678.026943][T13681] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1678.043113][T13681] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1678.091431][T13681] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1678.130599][T13681] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1678.160528][T13681] usb 8-1: Manufacturer: syz [ 1678.207325][T13681] usb 8-1: config 0 descriptor?? [ 1678.436733][T12204] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1678.626603][T13681] rc_core: IR keymap rc-hauppauge not found [ 1678.632656][T13681] Registered IR keymap rc-empty [ 1678.646839][T12204] usb 4-1: Using ep0 maxpacket: 8 [ 1678.658443][T12204] usb 4-1: config 0 has no interfaces? [ 1678.676769][T12204] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1678.696326][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1678.713949][T12204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.761609][T12204] usb 4-1: config 0 descriptor?? [ 1678.806531][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1678.847097][T13681] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1678.896684][T13681] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input50 [ 1678.949124][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1678.996561][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1679.018358][T18240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3216'. [ 1679.037202][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1679.064016][T18240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3216'. [ 1679.097557][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1679.146591][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1679.203431][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1679.214038][T12204] usb 4-1: USB disconnect, device number 65 [ 1679.266589][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1679.306606][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1679.336797][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1679.408890][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1679.465724][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 1681.406112][T13681] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1681.516588][T17388] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1681.524337][ T48] Bluetooth: hci4: command 0x1003 tx timeout [ 1681.648135][T13681] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1682.007574][T13681] usb 8-1: USB disconnect, device number 29 [ 1682.116564][ T5706] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1682.456828][ T5706] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1682.527665][ T5706] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1682.671297][ T5706] usb 6-1: Product: syz [ 1682.777748][ T5706] usb 6-1: SerialNumber: syz [ 1682.955776][ T5706] usb 6-1: config 0 descriptor?? [ 1683.941236][ T5706] usb 6-1: USB disconnect, device number 56 [ 1684.149900][T18266] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3221'. [ 1686.936554][ T5706] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1687.136545][ T5706] usb 2-1: Using ep0 maxpacket: 16 [ 1687.147926][ T5706] usb 2-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 1687.174410][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1687.264740][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1687.314173][ T5706] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1687.392637][ T5706] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1687.513809][ T5706] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1687.576114][T18314] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3235'. [ 1687.789092][ T5706] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1687.879554][ T5706] usb 2-1: Manufacturer: syz [ 1687.941468][ T5706] usb 2-1: config 0 descriptor?? [ 1688.466681][ T5706] rc_core: IR keymap rc-hauppauge not found [ 1688.472752][ T5706] Registered IR keymap rc-empty [ 1688.495474][ T5706] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1688.547069][ T5706] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1688.644572][ T5706] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1688.756121][ T5706] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input51 [ 1689.312416][ T5706] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1689.350600][ T5706] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1689.386596][ T5706] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1689.426575][ T5706] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1689.466636][ T5706] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1689.517633][ T5706] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1689.550518][ T5706] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1689.591783][ T5706] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1689.666612][ T5706] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1689.706647][ T5706] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1689.757732][ T5706] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1689.783289][ T5706] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1689.842194][ T5706] usb 2-1: USB disconnect, device number 75 [ 1691.338693][T18351] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3246'. [ 1691.836738][T16983] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1692.037848][T16983] usb 2-1: Using ep0 maxpacket: 16 [ 1692.054933][T16983] usb 2-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 1692.104034][T16983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1692.143779][T16983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1692.165755][T16983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1692.220936][T16983] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1692.280689][T16983] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1692.370314][T16983] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1692.393703][T16983] usb 2-1: Manufacturer: syz [ 1692.421237][T16983] usb 2-1: config 0 descriptor?? [ 1692.806669][T16983] rc_core: IR keymap rc-hauppauge not found [ 1692.812701][T16982] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1692.824703][T16983] Registered IR keymap rc-empty [ 1692.843714][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1692.876981][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1692.917752][T16983] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1692.954572][T16983] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input52 [ 1693.007273][T16982] usb 8-1: Using ep0 maxpacket: 8 [ 1693.017639][T16982] usb 8-1: config 0 has no interfaces? [ 1693.023160][T16982] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1693.055666][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1693.101281][T16982] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.109513][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1693.146561][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1693.155711][T16982] usb 8-1: config 0 descriptor?? [ 1693.176638][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1693.227808][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1693.266560][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1693.296628][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1693.366565][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1693.385842][T18390] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3257'. [ 1693.416573][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1693.426539][T18390] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3257'. [ 1693.466528][T16983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1693.508349][T16983] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1693.533623][T16983] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1693.586811][T16983] usb 2-1: USB disconnect, device number 76 [ 1693.624837][T13681] usb 8-1: USB disconnect, device number 30 [ 1694.479657][T12204] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1695.218494][T12204] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.236551][T12204] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1695.247001][T12204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.271061][T12204] usb 3-1: config 0 descriptor?? [ 1695.283564][T12204] pwc: Askey VC010 type 2 USB webcam detected. [ 1695.426238][T18407] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3261'. [ 1696.188571][T12204] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1696.211606][T12204] pwc: recv_control_msg error -32 req 02 val 2700 [ 1696.285339][T12204] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1696.346145][T12204] pwc: recv_control_msg error -32 req 04 val 1000 [ 1696.375656][T12204] pwc: recv_control_msg error -32 req 04 val 1300 [ 1696.384945][T12204] pwc: recv_control_msg error -32 req 04 val 1400 [ 1696.454105][T12204] pwc: recv_control_msg error -32 req 02 val 2000 [ 1696.495863][T12204] pwc: recv_control_msg error -32 req 02 val 2100 [ 1696.544395][T12204] pwc: recv_control_msg error -71 req 04 val 1500 [ 1696.606832][T12204] pwc: recv_control_msg error -71 req 02 val 2500 [ 1696.640474][T12204] pwc: recv_control_msg error -71 req 02 val 2400 [ 1696.660103][T12204] pwc: recv_control_msg error -71 req 02 val 2600 [ 1696.676340][T12204] pwc: recv_control_msg error -71 req 02 val 2900 [ 1696.706517][T12204] pwc: recv_control_msg error -71 req 02 val 2800 [ 1696.720374][T12204] pwc: recv_control_msg error -71 req 04 val 1100 [ 1696.734358][T12204] pwc: recv_control_msg error -71 req 04 val 1200 [ 1696.751011][T12204] pwc: Registered as video103. [ 1696.771291][T12204] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input53 [ 1696.856220][T12204] usb 3-1: USB disconnect, device number 47 [ 1697.673096][T18442] Cannot find add_set index 0 as target [ 1698.786491][ T4334] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1699.016767][ T4334] usb 4-1: Using ep0 maxpacket: 16 [ 1699.034389][ T4334] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1699.045471][ T4334] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 11 [ 1699.059640][ T4334] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1699.072202][ T4334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.561113][T18456] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3273'. [ 1700.946967][ T4334] usb 4-1: USB disconnect, device number 66 Stopping sshd: stopped /usr/sbin/sshd (pid 4022) OK Stopping crond: stopped /usr/sbin/crond (pid 4010) OK [ 1705.138065][T18531] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3289'. Stopping dhcpcd... [ 1706.738141][T18546] Cannot find add_set index 0 as target [ 1706.747793][T16982] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1706.956519][T17388] Bluetooth: hci1: command 0x0406 tx timeout [ 1706.996710][T16982] usb 6-1: Using ep0 maxpacket: 16 [ 1707.004184][T16982] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config stopped /sbin/dhcpcd (pid 3931) [ 1707.080504][T16982] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 11 [ 1707.140757][T16982] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1707.181289][T16982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 Stopping network: [ 1708.049988][T18556] kvm: pic: non byte write [ 1709.466335][ T4334] usb 6-1: USB disconnect, device number 57 OK Stopping iptables: OK Stopping system message bus: done killall: can't kill pid 13563: No such process [ 1718.926755][T16982] usb 2-1: new high-speed USB device number 77 using dummy_hcd Stopping klogd: [ 1719.116839][T16982] usb 2-1: Using ep0 maxpacket: 16 [ 1719.133003][T16982] usb 2-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 1719.158339][T16982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1719.173392][T16982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1719.189955][T16982] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1719.222607][T16982] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1719.283228][T16982] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1719.311220][T16982] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1719.337229][T16982] usb 2-1: Manufacturer: syz [ 1719.361568][T16982] usb 2-1: config 0 descriptor?? OK [ 1719.666646][T13681] usb 8-1: new high-speed USB device number 31 using dummy_hcd Stopping acpid: [ 1719.806459][T16982] rc_core: IR keymap rc-hauppauge not found [ 1719.812589][T16982] Registered IR keymap rc-empty [ 1719.826713][ T5706] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1719.836777][T16982] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1719.866666][T16982] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1719.873973][T13681] usb 8-1: Using ep0 maxpacket: 16 [ 1719.881340][T13681] usb 8-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 1719.912950][T16982] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1719.947068][T13681] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1719.967541][T16982] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input54 [ 1719.986324][T13681] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1720.009225][T13681] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1720.020658][T16982] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1720.041814][ T5706] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1720.069261][ T5706] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1720.083375][T13681] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1720.106552][T16982] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1720.114093][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.132271][T13681] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1720.145294][ T5706] usb 3-1: config 0 descriptor?? [ 1720.150721][T16982] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1720.173086][T13681] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1720.181567][ T5706] pwc: Askey VC010 type 2 USB webcam detected. [ 1720.188288][T16982] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1720.206667][T13681] usb 8-1: Manufacturer: syz [ 1720.227439][T16982] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1720.255452][T13681] usb 8-1: config 0 descriptor?? [ 1720.261083][T16982] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1720.345712][T16982] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1720.392916][T16982] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1720.513852][T16982] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1720.613998][ T5706] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1720.684868][ T5706] pwc: recv_control_msg error -32 req 02 val 2700 [ 1720.771565][T16982] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1720.905713][ T5706] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1721.024260][T16982] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1721.111123][ T5706] pwc: recv_control_msg error -32 req 04 val 1000 [ 1721.118076][T16982] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1721.127781][ T5706] pwc: recv_control_msg error -32 req 04 val 1300 [ 1721.135559][ T5706] pwc: recv_control_msg error -32 req 04 val 1400 [ 1721.147320][T16982] usb 2-1: USB disconnect, device number 77 [ 1721.154578][ T5706] pwc: recv_control_msg error -32 req 02 val 2000 [ 1721.520250][ T5706] pwc: recv_control_msg error -71 req 04 val 1500 [ 1721.528048][ T5706] pwc: recv_control_msg error -71 req 02 val 2500 [ 1721.535710][ T5706] pwc: recv_control_msg error -71 req 02 val 2400 [ 1721.553555][ T5706] pwc: recv_control_msg error -71 req 02 val 2600 [ 1721.560612][T13681] rc_core: IR keymap rc-hauppauge not found [ 1721.566813][T13681] Registered IR keymap rc-empty [ 1721.577094][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1721.585595][ T5706] pwc: recv_control_msg error -71 req 02 val 2900 [ 1721.592579][ T5706] pwc: recv_control_msg error -71 req 02 val 2800 [ 1722.333468][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 OK [ 1722.367961][ T5706] pwc: recv_control_msg error -71 req 04 val 1100 [ 1722.377463][T13681] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc1 [ 1722.396753][ T5706] pwc: recv_control_msg error -71 req 04 val 1200 [ 1722.405162][ T5706] pwc: Registered as video103. [ 1722.411310][ T5706] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input56 [ 1722.447514][T13681] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc1/input55 [ 1722.496987][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1722.511273][ T5706] usb 3-1: USB disconnect, device number 48 [ 1722.533108][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1722.586677][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1722.626714][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1722.660602][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1722.706542][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 Stopping syslogd: [ 1722.736785][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1722.776629][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1722.826610][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1722.856530][T13681] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1722.907616][T13681] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1722.938880][T13681] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1722.979569][T13681] usb 8-1: USB disconnect, device number 31 stopped /sbin/syslogd (pid 3619) OK [ 1723.400333][ T56] Bluetooth: hci4: Frame reassembly failed (-84) [ 1723.856605][T13681] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1724.078282][T13681] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1724.170072][T13681] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1724.280765][T13681] usb 3-1: Product: syz [ 1724.331334][T13681] usb 3-1: SerialNumber: syz [ 1724.966714][T13681] usb 3-1: config 0 descriptor?? [ 1725.447392][T17388] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1726.056756][ T5706] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1726.344511][ T5706] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1726.643992][ T5706] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1726.799412][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.044451][ T5706] usb 4-1: config 0 descriptor?? [ 1727.238554][ T5706] pwc: Askey VC010 type 2 USB webcam detected. serialport: VM disconnected.