last executing test programs: 48.33989931s ago: executing program 3 (id=616): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000001c0)=[@acquire={0x40046305, 0x3}, @register_looper], 0x50, 0x0, &(0x7f00000004c0)="af082a1809e47a11e94a1ed6d111d1994786e4184c1ad4302c865178267336d1601626266206170bb201fe9bff5e11507ba4bc518e9536bbb14c4d04820fd29a7235324f0e1bbaaa09d74cb5e5898d1e"}) 48.339525s ago: executing program 3 (id=617): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) clock_adjtime(0x0, &(0x7f0000001100)={0xd77, 0xf423f, 0xfffffffffffffffe, 0x0, 0x0, 0x4b, 0x8, 0x0, 0x0, 0xa12, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefe, 0x4, 0x0, 0x0, 0x2, 0x3, 0x80000000000000}) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @loopback={0xff00000000000000}, 0x4}}, {{0xa, 0x4e00, 0xa3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000cc0)=ANY=[@ANYBLOB="03000000000000000a004e2300000049ff0000000000000000000000000000010800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x590) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00009bf000/0x18000)=nil, &(0x7f0000000580)=[@textreal={0x8, &(0x7f00000004c0)="66b9800000c00f326635010000000f30650f216402ab7100660fc774a466b9800000c00f326635008000000f30b8dc0b8ec80f01c4baa10066edf30fe68400000f16cc", 0x43}], 0x1, 0x12, &(0x7f00000005c0)=[@dstype3, @flags={0x3, 0x44010}], 0x2) syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaa2aa0180c2000000080045", @ANYRESDEC=r2], 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f00009b5000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f0a41d994d9000f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x50}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x80000001, 0x1, 0x0, 0x4c000000, 0x9}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0x0, 0x4}, {0x15}, {0x6, 0x0, 0x1}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x4a, "4b721b782a17a7b6a00d960a64048655bcb0b0ac551fdb8a571f6b3c1cb52ecdf3e8721b8ac2e3bdbbff5ee018d48c7c3b54f8dbdeee0aab7d3d8edaf144e5d524000000000000690000"}}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) read$FUSE(r5, &(0x7f0000002c00)={0x2020}, 0x2020) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r5) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r9, &(0x7f0000000640)="240000001a005f0214f9f407000904001f000000000000000000000008000400010000b6", 0x24) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r8, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xec}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x311}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4805}, 0x40) r10 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r11}, &(0x7f0000000840), &(0x7f0000000880)=r12}, 0x20) 47.511729666s ago: executing program 3 (id=622): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) 47.511361416s ago: executing program 3 (id=623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0xd0009411, &(0x7f0000000180)={{}, 0x0, 0x0, 0xc11, 0x3, 0x1}) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000080)={[{@nombcache}]}, 0x12, 0x51a, &(0x7f0000001740)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000600)={{r0, &(0x7f0000000480)='overlay\x00', 0x204100, &(0x7f0000000140)={@_ha_fsid={[0x8001, 0x80000001]}, {0x7, 0x2, 0x4, 0xf6b}}, 0x100, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x8}, 0x2, &(0x7f00000005c0)=[{0x2, 0x6, &(0x7f0000000240)='nombcache', &(0x7f0000000280)="03137f3dd52f48b18fa822b90b6c9427ae38c6f6c85eea1470d71c0400000000000000b084ee75", 0x27, 0x8}, {0x1, 0x7fffffff, &(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)="462521aa77e46ed383c74ae0b9ea28e0b55c1aa20fdaf867afd75ca4b1678d71f117b35917b91b903c744842f54c94d8ee8b8b676baef0dc95fb9b066ede2745247299003fe0f4fefc954bf8cc75ec2bad19b35aa20f233fb53cd590f97e0e6556f56d0023e9f1193958ec5012b892b5d1098739fd09064c4c7bc27fc720cce4c711170509030a8a1abbccc9d32208781fce8773dce5f8b2ee7795636cf75e4fb59fbe", 0xa3, 0x20}]}) chdir(&(0x7f00000003c0)='./bus\x00') getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sched_setaffinity(r3, 0x8, &(0x7f0000000400)=0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) 47.280325033s ago: executing program 3 (id=624): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/227, 0xb5}], 0x1, 0x1bf, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x48885}, 0xc048810) fcntl$setlease(r1, 0x400, 0x1) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000001a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 47.226450135s ago: executing program 3 (id=625): sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x8, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)={0x0, 0x13000, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 47.194663785s ago: executing program 32 (id=625): sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x8, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)={0x0, 0x13000, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 42.911895139s ago: executing program 5 (id=643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x40001) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x8, 0x3, 0x101, 0x9, 0x3, 0x800, 0x6e9, 0x5}}) r3 = getpgid(r0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x0, r5}) ioprio_get$pid(0x1, r3) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x800, &(0x7f0000001dc0)=ANY=[@ANYBLOB='discard,errors=continue,gid=', @ANYRESHEX=0x0, @ANYRESDEC=r2, @ANYRES16=r0, @ANYBLOB=',umask=00000000000000000006143,allow_utime=00000000000000000000011,errors=remount-ro,utf8,iocharset=iso8859-5,\x00'], 0x1, 0x1540, &(0x7f0000001ec0)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x1000608, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}]}) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2) 41.983861537s ago: executing program 5 (id=646): r0 = getpgid(0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x11c, 0x21, 0x10, 0x70bd2c, 0x25dfdbff, {0x17}, [@nested={0x105, 0x15b, 0x0, 0x1, [@generic="d7a737aa8b01c4897e8a830b4969589048e0dfe329c6e3554fa8f79c415cc59b0716adba4d0df93950ddf2b85a8ac0e9d31499e8a5ccd8262096", @generic="01a8cffc997c21a34cbf664587dda28d3b23b6ae1ca10afc9d71590a6bb020941b6e497996f9cb852038321bd9a5f2f1c7543e3ff84e6a3caac075c499216b1f4b707f67c0dec249b30c58e67fdaebc1af6a6198b8a61d7f01d3b4ef940ab8bf21862445e420b96c618cecf5dd5989bf64cad7ca31f8f467e9bc08d3465d8ee6bee2450e2132232169a493ba564c4877cfab257546508abe462fcb6a1c4f885560c547061852b8", @typed={0x4, 0x35}, @nested={0x4, 0x169}, @typed={0x8, 0x8b, 0x0, 0x0, @pid=r0}, @nested={0x4, 0xeb}, @typed={0x8, 0xf7, 0x0, 0x0, @fd}, @nested={0x4, 0x102}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000180)={[{@oldalloc}, {@nodioread_nolock}, {@sb={'sb', 0x3d, 0x7ff}}, {@nouid32}, {@barrier}, {@grpjquota}, {@noquota}]}, 0x1, 0x5d5, &(0x7f0000000d40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x126) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) truncate(&(0x7f00000000c0)='./file1\x00', 0x46) write$khugepaged_scan(r2, &(0x7f0000000040), 0x8) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) getgroups(0x2, &(0x7f00000026c0)=[0x0, 0x0]) setresgid(r6, 0x0, r5) fsopen(&(0x7f0000000400)='erofs\x00', 0x1) setreuid(0x0, 0xee01) setgid(0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x4, r4}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e1d, @rand_addr=0x1}, 0x10) io_pgetevents(0x0, 0x7cd3, 0x0, 0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={[0x8]}, 0x8}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000001c0)=0x14000, 0x4) syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f0000000b00)=ANY=[], 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$KVM_CAP_XEN_HVM(r7, 0x4068aea3, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/108, 0xfffffffffffffd5b, 0x734, 0x0, 0xfffffffffffffecb) socket$inet6_udp(0xa, 0x2, 0x0) 41.227214801s ago: executing program 5 (id=648): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="fc0000004800071fab092504090007000aab60000a0000000008e293210001c0000a00000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f01", 0xfb) 41.173067962s ago: executing program 5 (id=650): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000400)=[{r1, 0x8000}, {r1, 0x40a8}, {0xffffffffffffffff, 0x4002}], 0x3, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x9, 0x5, 0xd, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0x2000}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus/file0\x00') ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000040)=[0x74a]) 40.326469759s ago: executing program 5 (id=653): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) keyctl$clear(0x3, 0xfffffffffffffffd) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @loopback, 0xfffffffd}, 0x1c, 0x0}, 0xc4) recvmmsg$unix(r1, &(0x7f0000000680), 0x0, 0x2020, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1, 0x8ffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)={0x0, 0x4000}) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1800) fchdir(r4) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x2, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}}, 0x8000) 39.983236849s ago: executing program 5 (id=657): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) 39.983121309s ago: executing program 33 (id=657): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) 15.770726961s ago: executing program 6 (id=808): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x41) r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0}}], 0x1, 0x40000004) 15.750166891s ago: executing program 6 (id=809): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x7}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x165) getdents64(r1, 0x0, 0x0) getdents64(r1, 0xfffffffffffffffe, 0x29) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000001c00)=@vmx={0x0, 0x0, 0x2080, {0x4000, 0x60000, {0x1}, 0x1, 0x8}, {"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", "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"}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15.516763098s ago: executing program 6 (id=813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x40001) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x8, 0x3, 0x101, 0x9, 0x3, 0x800, 0x6e9, 0x5}}) r3 = getpgid(r0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x0, r5}) ioprio_get$pid(0x1, r3) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x800, &(0x7f0000001dc0)=ANY=[@ANYBLOB='discard,errors=continue,gid=', @ANYRESHEX=0x0, @ANYRESDEC=r2, @ANYRES16=r0, @ANYBLOB=',umask=00000000000000000006143,allow_utime=00000000000000000000011,errors=remount-ro,utf8,iocharset=iso8859-5,\x00'], 0x1, 0x1540, &(0x7f0000001ec0)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x1000608, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}]}) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2) 14.48973032s ago: executing program 6 (id=816): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f000000000000000007000000"], 0x14}}, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r6, r4, 0x25, 0x0, @val=@tcx={@void, @value=r6}}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) write$cgroup_pid(r2, &(0x7f0000000300)=r7, 0x12) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@remote, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x0, 0x1, 0x0, @multicast1, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x40, 0x49, 0x0, {0x5, 0x4, 0x1, 0x2, 0x4, 0x65, 0x6, 0x6, 0x1d, 0x6, @local, @rand_addr=0x64010101}}}}}}, 0x0) pread64(r2, &(0x7f0000000100)=""/131, 0x83, 0x10000) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 14.48948655s ago: executing program 6 (id=817): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1, 0x18100}}, 0x3000000, 0x20}, 0x5000) 14.365366714s ago: executing program 6 (id=821): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x2, 0x25dfdbfe, {0x2}, [@NHA_ID={0x8, 0x6, 0xf7ffffff}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) 14.337766935s ago: executing program 34 (id=821): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x2, 0x25dfdbfe, {0x2}, [@NHA_ID={0x8, 0x6, 0xf7ffffff}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) 9.188103165s ago: executing program 4 (id=858): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa766}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @tail_call, @map_fd={0x18, 0x6}, @generic={0xb, 0x7, 0x2, 0x1, 0xf89}]}, &(0x7f00000000c0)='GPL\x00', 0xa45, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x1, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000001c0)=[{0x1, 0x5, 0x4, 0x2}, {0x3, 0x5, 0xf, 0xa}], 0x10, 0x2}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x40, 0x8, 0x9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x8000, 0x80, 0xfffffff9, 0x3}}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r1, r2, 0x25, 0x1d, @void}, 0x10) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000480)={&(0x7f00000003c0)=0x645, 0x4, &(0x7f0000000400), &(0x7f0000000440)}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000700)={{r1}, r4, 0x0, @unused=[0x75, 0x3ff, 0x0, 0x7ff], @subvolid}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001740), r0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000001900)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001780)={0x11c, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffc00}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @local, 0x800}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80000000, @mcast1, 0x7ff}}}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x28a34a1e0541ecf6}, 0x8001) socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RSTAT(r6, &(0x7f0000001980)={0x4f, 0x7d, 0x1, {0x0, 0x48, 0x9, 0xa, {0x0, 0x3, 0x4}, 0x40100000, 0x3, 0x8, 0x603e4ad, 0x8, 'ip6gre0\x00', 0x4, 'udp\x00', 0x2, 'ib', 0x7, 'TIPCv2\x00'}}, 0x4f) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000001a00), &(0x7f0000001a40)={'U+'}, 0x16, 0x2) r7 = accept(r0, &(0x7f0000001a80), &(0x7f0000001b00)=0x80) poll(&(0x7f0000001b40)=[{r6, 0x40}, {r7, 0x82a8}, {r3, 0x101}, {r0, 0x1000}], 0x4, 0xfffff9bf) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001bc0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x48, r8, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6b}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) write$P9_RREMOVE(r6, &(0x7f0000001d00)={0x7, 0x7b, 0x1}, 0x7) r9 = pidfd_getfd(0xffffffffffffffff, r7, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r9, 0x40189429, &(0x7f0000001d40)={0x0, 0xe, 0x6}) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r11, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc404}, 0x800) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000001e80)) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000001ec0)=0x2) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x18, 0x24, &(0x7f0000001f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6f648c14, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe11}}, @exit, @ldst={0x3, 0x2, 0x2, 0x9, 0x0, 0x6, 0x43af3dcf65b016b0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x49fb}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002040)='GPL\x00', 0x0, 0x68, &(0x7f0000002080)=""/104, 0x417cbf584c80ffc7, 0x48, '\x00', r2, @fallback=0x2d, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000002100)=[{0x1, 0x3, 0x10, 0x8}, {0x1, 0x5, 0x4, 0xb}, {0x0, 0x3, 0x5, 0x7}], 0x10, 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000024c0)={r12, 0xe0, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000002240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd1, &(0x7f00000022c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000002300), &(0x7f0000002340), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000002380)}}, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000002500)={'dummy0\x00'}) 8.237037104s ago: executing program 4 (id=863): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f0000000200)="07cdd6ef58a02aef4004cb600453284c5c5dd3f6ee7e37e80410f4af6eba4e8e2171fcf8338f2711ea5065f220ec4b852c073cdbab1279f782087b5f0d4373242e20fad420f2754ad312b1d70f05bc0f8ac7815cd37996a3e02fe1ad600abffcbd02c538fdbfad11dd1473845e231987ecfc743f81ef470cee5e835ede0b5d3931e1e64bb7cdb82adf3cad5176390ea633d4d5b6e3e84e9c3339b40422f4fefb0ab1dbbf13d3e28b60c459e54012b6f54254e677583abe99f690a5fba59632b2d3fefe636d8c26d44a7a82cf85f4c29310f2f34276600098818fbd8270", 0xdd}, {&(0x7f0000000300)="7b0a369e59301c179b8a27d4a1270dbfd3d59d99", 0x14}, {&(0x7f0000000340)="726e8f400db232e79f302afc52c63e6a56770eec88b638cecfc74c14a878a22eb10f0a1ca9912f93473c250fb00e03d46145b0ba1174807a252184af597c7b03703b944cd553f013bcfd36d3067bac671caa128326f0f2218e80265b836dc9deb2e1bbb36e1e976f3b30bcc87cf1c3b1384be40d8c6fa42c43d24d52d2ab28ef54b30d81a6e40ab149f72ce97d7e8d337c4bf5116d5055e7a715fdfb36b8f666", 0xa0}], 0x3, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)) 8.156873437s ago: executing program 4 (id=864): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x800080, &(0x7f0000000540)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=ad,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00', @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0x1, 0x105ea, &(0x7f000000d000)="$eJzs3E9vG0UUAPBx0pS2lBIhDty6EkJKpNqqk7SCW4BUgESqiD8HTuDYjuXW/xQ7iSlCBM6IY78InLhz50twQxyQuBWBvDOGprQipcZJmt9PWr+d8e7bN1aU6O1GDsCpNZ/99mshXArnQwizIYSLIeT7hbTlVmN4KYRwOYQwc99WSPN/TZwNIVwIIVwaJY85C+mtz+/ur98brl9IWa8czYqBSak8wbmvhBDavbi/146x24jxVpqv7Dbz2F7ZTTG+0b6dxt0Y9+qbeYa9yvi4WNlyIx7f7e30R3GrVamOYqO5lc/3OvGC/d3GOE9+wq3Kdj6u1TfH5e7n592Jg2GKd/qDuJN+WfY+zdOHwWAc43Xqw3pcT+92HqudQZrvxvpq9eEo7qbYj9Oh2m3V8jo2/9NHfCK82+zsDLPd+na/2e1k10rlV0vl68XydrdWH9RXipV27fpKttBojQ4rDuqV9mqj22206qVqt72YLTSq1WK5nC2s1TeblU5WLpeWS1eL1xbT3pXsrZsfZq1atjCKbzQ7O4Nmq59tdbezeMZitlRafm0xe7mcvb++kW28d+PG+sYHH699dPP19XfeTAf9o6xsYenq0lKxfLW4VF58zAX/fizXP/oTPZ31P+Dck53OaVc46gIATp68/z8fptn/f/b93V/Wvqr8qP+HU+wk9f/N1JA/qv/v1VI+/f9jOyb97/T6/0Os/8vjuP4zqWD9P8eJ/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NT6ae7bt/Od+Th+Ns0/l6ZeSONCCGEmhPDHQ8yGswdyzqY8c484fu6BGn4ohDzD6BrPpO1CCGE1bfeef3jtZyb6SQAAAMDT6bv9y9/Ebj2+zB91QUxTvGkzc/GTCeUrhBDm5n+eULaZ0cuLE0qW/3yfCcMJZctvYJ2bULJ0U+yLCaU7lNkD4dx9oRDDzDSrAQAApuNgJ+CJOgAAwNPr66MugMk7zPO7Qhg/yhw/C87/8/7vB4LnD4wAAACAE6hw1AUAAAAA/7u8/z/J3/8HAAAA/Lv4/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8yc793KgNRHEAfrZxAvmjoCjHSGklNygjJeSYI6KANEEJpIU0QA3sbUtY4RW20WK0aNEyGC36PskejzE/nhGXmUEGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4pLtyOf03+/H3yMvFqTmb6jzp7ggAAAA4tC6X0/pg3PQ/tuc/t6e+tv0sIvKIeG7sXsS7TmbR5pRHri8PavgfUSdsP+N9u32IiJ/t9vDl0t8CAAAA3K7VfDFpl/jr3fjaBdGnZtIm//QrUV4WEeX4PlFavt19SxRW/74H8SdRWj2BNUwU1ky5DVKlnaToNMO9JmuavNdyAACAXnRHAv2OQgAAAOjT773j2RXroGdZ7JYyd2vB9T/vnxYER50eAAAA8AZl1y4AAAAAONPoxSvq8b/n/wEAAMBta57/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCWty+V0NV9Mzs3ZVK/wfdi8uaqqBLcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj+/OOAjAIBmHwj3l3wfsfNizEMrXNTCEfLhYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7YRS442Yk08394Se657VR2ZEmemxJU5cedBn/gbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF725yUFQiAIomDO+N9J3/+wkqBnECECGh5V1KIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC527t9FjioOAPib3Z3ND5CspxzExohKRDF3G38h2KQQDgvBSiyXy15Y3agkV5hwhddYCP4HNtqmEQ4EiUX+ghRWpoxNBLkiioXVypsfySR76kS92d3L5wNv3jezL/O+bw6O+86bOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDS7plwoozb8dDLjqFVnPvx9tZ67G/c10e3BleOxxbjpOG8F00n3qPlWWcBAADAQdcu6/sQws10Zy32rV5W/z9bjok1/9YjeVzW8/fX/WVf1v6xXf3+63fuTNTL50lDCN/2xsPVxlY4165NJpNaA4/91Qe9u2H2LCF/QtPOvmytt7Yf202zu558cf36m90sPPR/JA4A/Denyr4INpJPs5+PNkbjYX+WiQGwuDr//HE5pKz/270G8gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYsd3t8EIZJyGEJzp34+jG7a31vfpbgyvHy3bsvcc/q14zXiINIWyMxsPDDa5lnj1Tc9zFS5c/GIzHwwsPFDz5r/6XQCBYlGCfv0EBAHCgpEWLdf3NdGctnkuWQph8dW/9f7ISh5r1/7XR1ZPVuar1f7+xFc63uvX/yub5j1cuXrr84uj84Nzw3PDD0/2X+6+tvv5K/9WVeD9X8+M+ZwsAAMCi6hatWv+3lqb3/49W4lCz/v/h53d/qc7VVv9PefD9/31OCAAA4CH26Inff032OJ90u+GTwebmhX5+vPPv0/lxBqn+vSPTpw4VrVr/t5dmkBsAAADQuN3t5J79/7OVONTc///u+T++rF6zXTyC2BiNh6fWPxqfbW45c2t6/7+357gmfp24geUCAAAwI0eKVt3/T7P3/1tPxfi3EEIrhPDc0/n44s8A1qr/3+h8fqY6V/X9/5eaXebcaS3n96PO+//Z2OUQOssNJAYAAMCBdLhosf7/Kd1Ze/+bo293vf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sj/3tgkDYRyHX18SJW6TEdJbfMxAQ4VgBUBCsuQZGICFaKhoLRaBFUCCc01nKJ6n+f+KK+4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAt3d9+uIjIopIXaZI0+3f+TMiviLt2nbyfc9ifzk1P49cHI6znL8x/y8jooyij3MAAHpXdZtjvalXg7zDvKO847xV2dTLV34aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAGztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBYAQAA//8zXFtT") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) getdents64(r0, 0xfffffffffffffffe, 0x29) 7.372061281s ago: executing program 7 (id=869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003dfb29877099b3569ae82a37bb80a15b4c73def2ea00419e8d8e1666ee040ea7e6614527ca2ab4766f5a656d869aab98576a168bd4800636b891dffccc0dd2d34b57fa18378bf192a8bdac7a3c52617754c37f67017c71db2df0171350de321867b6a518be29e6bb1fe56c925f12fe91aff23d0e2d1bcac38a25cf9d3f02d1edcfb6449b7a4917fd54de", @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf2532000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 7.288193544s ago: executing program 7 (id=870): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x1, 0x5505, &(0x7f0000002480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x8912, &(0x7f0000000100)={0x28, {0x2, 0x4e24, @multicast2}, {0x4, 0xc, @multicast2}, {0x2, 0x4e25, @empty}, 0x184, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffe}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = accept4(r0, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000380)=0x80, 0x1c0000) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) getsockname(r2, &(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000440)=0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000000c0), 0x2d, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x200100, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getrandom(0x0, 0x0, 0x6) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf971a8f8577"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) fadvise64(r8, 0x2, 0x0, 0x4) socket(0x23, 0x3, 0x0) 7.126475409s ago: executing program 4 (id=871): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r6}, 0x50) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0xa, 0x0, 0x80009, 0x9, 0xffffff7f, 0x8000002}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x486, 0x0, 0xfffffffffffffffe}]}) 4.902874478s ago: executing program 7 (id=879): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) read$FUSE(r6, &(0x7f0000004380)={0x2020}, 0x2020) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = gettid() r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSIGACCEPT(r8, 0x4b4e, 0x34) tkill(r7, 0xb) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x14, r10, 0x1, 0x170bd2b, 0x0, {0x3}}, 0x14}}, 0x8000) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r11 = syz_open_procfs(0x0, &(0x7f0000000240)='net/netstat\x00') ftruncate(r11, 0x7fffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@newchain={0x24, 0x64, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff3, 0x4}, {}, {0xf, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x24001090}, 0x0) 4.51048264s ago: executing program 4 (id=881): syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x4}, {@private=0xa010101}]}, @lsrr={0x83, 0xb, 0x40, [@multicast1, @rand_addr=0x64010102]}, @generic={0x94, 0x2}]}}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fchdir(0xffffffffffffffff) exit(0x9) r2 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r2, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="000342000000020316cd9824134492f729f7b0e24279fecaa286e04e3b8e59bccc74f86d16a750673bc53a56bf195198baf356d9a93f900d05b7f5d252520d0d31b2b6669f57479affa47ed2d885f459ac6c6a28b9f4694b64557fbb6a8a97f8951a3bebcd8515"]}, 0x0) syz_usb_control_io$uac2(r2, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}}, 0x0) syz_usb_control_io$uac3(r2, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @remote}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[], &(0x7f0000000140)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000240)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)="8200047d66", 0x5}], 0x1}, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r8, r8, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) rename(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8700630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r8, @ANYBLOB="2d3869209eb76d2e8266b54193b5f2a2678b76c7b642950161f4d8b844d404671a47a83e7247ed4a1262391031feef81", @ANYRES32=r7], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x22, 0x1517, &(0x7f0000002780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x80741, 0x69) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r11, 0x4) 4.203596259s ago: executing program 0 (id=884): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) exit(0xc1) tkill(r1, 0x12) waitid(0x0, r1, 0x0, 0x4100000c, 0x0) r2 = dup2(r0, r0) recvmmsg(r2, &(0x7f0000005f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2141, 0x0) 3.318417177s ago: executing program 0 (id=888): mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003) r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\x12', 0x3a, '\xf9\xbe\xf5\x85;\x8a4\x94M\xb4R*\xec\xac[\x0f\xc4Z\x99\x06\xeb\xf8;<0\f^t\x1c\xb8W\x1a\xde\xd8\x9cd\x8a\x17/\x0eIU\x80\xcd^\x8a\xcc\r\xfeE\x15$\x8dG\xb5q)c\xe7zDgXPe\xc1\xec\xd1\x98\x17\x8bH}u\xb1\xf0\xc0\xbfC\x17\xd2f\xff\xd5\bE\"\xef\xb9\xba\fa\xcc\xe5\xcd\xfc\xf1v\x91\xab2\x9e*^\x92\xc1oI\xa5\x03]\xfd\xf6\x10\x17\xd6\a\xb2)@\xa4\xa2O\x8bb\x04\xd4\'#\n\xc6\"\x86_\x00d\xd6<\x05\x00\x00\x00}\x98\xa5\r\xa00\x8fp\x8au;l\xaf\r\x80e\x89D\xe5\xc4\xa2\xf2\xd0\xb4\xde\xae\x90\xc0\x86Z\xa5A\xf5\x9fY\x01\x1d\x94\xe9\xe2P\xb1\x0e\xbe\xd7oP\x8c7_[', 0x3a, './cgroup', 0x3a, [0x50, 0x43, 0x43, 0x43]}, 0xee) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x702, 0x43, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047c25d7670ea4a41b8a6800c0de87b6f8e6a725643f7b3ab502617b472091a730e", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$unix(r0, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e21}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008006b99e13905aa93ecc7000000000000090000007311320000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9482, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fgetxattr(r3, &(0x7f0000000240)=@known='trusted.overlay.redirect\x00', 0x0, 0x0) socket$inet6(0xa, 0x4, 0x5) r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x1, 0x80, 0x0, 0x8, {{0x10, 0x4, 0x1, 0xe, 0x40, 0x66, 0x0, 0x2, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @end, @generic={0x86, 0x10, "e6cdd6e9e44a89a9e10630a2ad35"}, @noop, @rr={0x7, 0x17, 0x2c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) getpeername(r4, &(0x7f0000000340)=@x25={0x9, @remote}, &(0x7f00000003c0)=0x80) sendto$packet(r4, &(0x7f0000000080)="f1f164b98285f4", 0x7, 0x48800, &(0x7f0000000300)={0x11, 0x5, r5, 0x1, 0x6}, 0x14) 3.20833371s ago: executing program 0 (id=889): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x165) getdents64(r0, 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 3.20804719s ago: executing program 0 (id=890): syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x486400, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) process_madvise(r0, &(0x7f0000000740)=[{&(0x7f0000000300)="99728ba4ddac83aa19dad86cf176e9181105e4132dfc30d78e1f75c10ed76e5f97ac4c4d99ac0e8a72e0cd07c37940b976c02b7fb17297c5fd0f315f01d4c36621cc54ad685a2a984f90df2eb6186e8e49671a13596ba0c0b4e1062473c906aadff42badf334b6565720e489266ace143a4e9794492ea6a3ecb24ffef0ead1e2e4d8c7c37aad97c06c6d22bf783d2fb221ec3c00fc685687db05371e508ec401745ff6c3a2c819a4f4b246f0d6df59b99fab09a432cd5671ac372282fd0cf026fa77cd89f6dbb030923a0db0e59f9180a14bf885fb6b5eedd8ae3134e3cc4db58e4a5b527863f1238f", 0xe9}, {&(0x7f0000000400)="b38006711aa434e37404492bcae4b2172c25fbede8c89d6b59208c4bde4558f4969e9b8e7e4955d6089624bc84ff14f99d11f35cc448da7cc68142bb1ac71672d999c5519b5f2016c5af76be1bc734e31968273425feb26183ba01e79c62804a9668eaf9d6ee0d86487b53fc27a92c849529575aea", 0x75}, {&(0x7f0000000480)="cab826b1404962b68997b6581b8506ad2927b2e9b41033eddeea34d22dec7bda715d43d1a871b64126e6d8ec2f0245b9244315448aeddeafed7d01f32c77739be06a90d8452fe4ea0bdd6569a2bb969d0bbe17afb9d1f35928d1472367cf7a78d69bec8bee5e8b88fd51deec6520e1dd7836f182f55ad8fc3fb5da773e365d1e659fe5988a06fe0801563e09c595c2372eeb63c8d469138b59", 0x99}, {&(0x7f0000000540)="f159df39983d5c3b724b0058a5e30c7dad198aaaa5fe1538c27c6e8bd63ece698df249b4815a4bca795d76f6991db0e532e778d5ecb86cca79747ff01f1e7095d7c57f57a9be234e40968648fc556ca099aed4093a0ff58aa3aa4fe9f50551846c6292eb32cb266cd6ff161dfb7e416960cebae995fa8fb5d1b60a718ef8f64e0568d29f5938b124ca8218f7671fa3ab93586c2d4d092241e0dad0b816e94cf9b983afae134edb65d4691c95c75c0c4b5b468bcd06812b44ba4b5358b31288445ece688ad1c2156fd09e5a1ac3f6e6", 0xcf}, {&(0x7f0000000640)="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", 0xfe}], 0x5, 0x15, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_SRC={0x8, 0x2, @remote}]}, 0x24}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x1013c1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r3, 0x80045503, &(0x7f0000000240)) 3.20524053s ago: executing program 7 (id=891): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x300, 0x400, 0x0, 0xfffffff9, 0x0}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x1, 0x7}) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000000)={0xffffffffffffffff, 0x1}) ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40809440, &(0x7f00000002c0)={&(0x7f0000000280)=[{&(0x7f0000000040)="5312d2a829ee879ab147e0ea6c69c1fdff43eb461a8091e32eb99e7e", 0x1c}, {&(0x7f0000000100)="a1013e1ecbeeb7b81d4712b90232b99f004f7d08524900042c741631fe8fc34e9b71118db8f33497adf0fa48d9eb0d3f29d9af9f346c7f2bc6f9eb722c10c94294647f31af44f1851ae71c4eefa551c417984eac3db09fac321538bb20a6d69cd8c42e11859f117f9706d38cf289999f8ae290801464f090d03baef3b020a1c5d900c0dddc13b0ef0b6001e0ac6eda5e47a11426200129439708b07125297813feeb60ca3403ac45eaa29d9c05332b9c237c19c09b9d857c74ba4e08759127d0f2ce5825b40be08e16f82169c8fc6500f3f5ca919f20aecc4322f9c13f2f9a4c", 0xe0}, {&(0x7f0000000200)="d675ffaf90a1d7509cffdf571f8d5699163c07630c656c0d0ee0ec5cba4b1ba8ac73d300774c651f9cca7c6aac6264d714478d6530265ff000e99143f2b95dd9b54053164abd6cad2eaf1fc6e7e129d2b54566b2d6fa9baed251ab23c4dcdee10fcb54b13cb1f3cb15675c347af4bee602bed739bac8208afcebe8ce", 0x7c}], 0x3, 0xb156, 0x0, 0x7, 0x5, 0x1, 0x3, 0x8}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct}}) 3.167147512s ago: executing program 7 (id=892): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000040)='./file1\x00', 0x135402, 0x9) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000b41000/0x1000)=nil, 0x1000, 0x8, 0x1010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) fchownat(r0, &(0x7f0000000100)='./file3\x00', 0xee01, r3, 0x100) 3.158891702s ago: executing program 0 (id=893): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) ppoll(&(0x7f0000000000)=[{r1, 0x6220}], 0x1, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 2.928225699s ago: executing program 7 (id=895): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005200010026bd7000fcdbdf250a08000100", @ANYRES32=0x0, @ANYBLOB="000002793e270feeb2c0995e36e762"], 0x1c}, 0x1, 0x0, 0x0, 0xd441}, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000004c0)={0x0, @multicast2}, &(0x7f00000000c0)=0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0900000001000000ff0300000100000000000000", @ANYRES32=0x1, @ANYBLOB="009b82ef31dae2762500"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="00000000040000000500004000"/28], 0x50) getrusage(0x1, &(0x7f0000000740)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) prlimit64(0xffffffffffffffff, 0xd, &(0x7f0000000140)={0xa, 0x400000000008f}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r3, 0x4068aea3, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sched_rr_get_interval(r4, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200), 0x4) r7 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002201000000"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000a40)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.656058859s ago: executing program 1 (id=910): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) tkill(r0, 0x12) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xb) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000640)={0x0, 0xb69, 0x1, [0x2, 0x9, 0x10000, 0x0, 0x2], [0x54, 0x1, 0x2, 0x5, 0xffffffffffffc786, 0x8, 0x10, 0x6, 0x8, 0xb5, 0x101, 0x0, 0x8, 0x8, 0x8, 0x7fff, 0x8, 0x0, 0x8, 0x993, 0xd4e83e9, 0x8, 0x3, 0x4, 0x3, 0x200, 0xb7a, 0x8, 0x96d3, 0x7, 0x9, 0x7ffffffe, 0x7, 0x7, 0x4, 0x0, 0xc8, 0x4bc571d3, 0x5, 0x9007, 0x8, 0x7fffffffffffffff, 0x0, 0x2, 0x6be, 0x3, 0x9, 0xffffffffffff7fff, 0x7, 0x0, 0xff, 0xfffffffffffff23e, 0x8, 0x1, 0x7, 0x1, 0x7, 0x9, 0x5, 0x0, 0x7ff, 0xffff, 0xf, 0x11, 0x8, 0x802, 0x3ff, 0x2, 0x9, 0x4, 0x100, 0xffffffff80000000, 0x5, 0xfc7d, 0x9, 0x3, 0x4, 0x0, 0x3, 0x100, 0x2, 0xffffffffffffffff, 0x3, 0x8, 0x9, 0x8, 0x7fffffffffffffff, 0x735, 0xfa4, 0x6a7f5add, 0xd, 0xfffffffffffffff7, 0x5, 0x6, 0x9, 0x2, 0x4000000000008, 0xfe, 0x2, 0x0, 0x4, 0xe6, 0x80000000, 0x7, 0x8, 0x2, 0x2, 0x2, 0x6a, 0x800, 0x199b2177, 0x3, 0x6, 0x7fffffff, 0x74, 0xf1, 0x6a, 0x3, 0x9, 0x3, 0xd234]}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000a80)={r2, "d2890802db261ff6bf1662bd55c6395f"}) clock_gettime(0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) syz_pidfd_open(r6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)) syslog(0x4, 0xfffffffffffffffc, 0x0) r7 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x80) r9 = openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000001c00), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r10) 1.339977509s ago: executing program 2 (id=911): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xcdf}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4c040) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./file2\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f0000000040)) 1.27823195s ago: executing program 4 (id=912): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) ppoll(&(0x7f0000000000)=[{r0, 0x6220}], 0x1, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 776.330336ms ago: executing program 1 (id=913): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x7}]}) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) 711.699048ms ago: executing program 1 (id=914): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) (fail_nth: 2) 375.570218ms ago: executing program 2 (id=915): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x3) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0xad1, 0x1, 0x0, 0x0, @adapter={0x7, 0x4576, 0xfffffffffffffffb, 0x5, 0x1}}]}) 332.367629ms ago: executing program 1 (id=916): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000100)) 331.813729ms ago: executing program 1 (id=917): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x6, 0x248, 0x9b9a}, 0x3a, [0xfffffff5, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0x40000b4, 0xa, 0x2, 0x4, 0x81, 0xe4, 0x6, 0xfc000000, 0x9, 0xbbf, 0x200, 0x1, 0x48, 0x100d, 0x3, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe768, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x84, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x8, 0x7, 0x5, 0x4007f, 0xffffffff, 0x6], [0x3, 0x16e, 0x6, 0xf6ca, 0x4, 0xda, 0xb8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x5, 0xa7, 0x1000, 0x101, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0xb, 0xffffff7f, 0x401, 0x6, 0x200, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x6, 0x55c, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x1, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40001003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xfffc, 0x6, 0x2, 0x2e6bf783, 0xfffff100, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x5, 0xee4b, 0x2008004, 0x1, 0x691, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x2, 0xd, 0x7, 0x601, 0x101, 0x200dd80, 0x60a0, 0x3, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x4, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xa, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x2, 0x7, 0x1afa, 0xbfc, 0x8, 0x3, 0x7f, 0x55, 0x40, 0xc, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xfffffeff, 0xffbffff7, 0x8, 0x7, 0x3, 0x939, 0x6, 0x80008001, 0x7777, 0x7fffffff, 0x2, 0x100, 0xffffffff, 0x7ffffffe, 0x4009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x6, 0x10000, 0x0, 0x8004, 0x6fff, 0x2, 0x3, 0xf, 0xe, 0x10, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff8, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x0, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x9}], 0x1, 0x1d, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="696e6c696e655f646174612c6163746976655f5b6f67733d342c636865636b706f696e743d64697361626c652c6e6f71756f74612c7573726a71756f74613de3212a2c646174615f666c7573682c6163746976655f6c6f67733d322c6a71666d743d76667376312c657874656e745f63616368652c6772706a71756f74613d232c00"], 0x1, 0x54f9, &(0x7f000000ab40)="$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") r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000600)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0x4f1e, 0xffff, 0x2, 0x8, 0xa5be, 0x9, 0x0, 0xc, 0x6b7, 0x7009a98a, 0x4, 0x8, 0x8000, 0x7, 0xcd, 0x9, 0x10000, 0x6, 0x3, 0x7, 0x26, 0x4, 0x0, 0x2, 0x5, 0x2, 0x7fff, 0x5, 0x2, 0x6, 0x400, 0x5, 0x5, 0xadf3, 0x1, 0x6, 0xfffffe01, 0xb, 0x8001, 0x1, 0x7, 0x80, 0xa, 0x3, 0x9, 0x3, 0x0, 0x1, 0x8, 0x160000, 0x9, 0x4, 0x6, 0x2, 0x3, 0x100007, 0x5, 0x7, 0x4, 0x8, 0x0, 0x6, 0x5, 0x8000, 0x4a, 0xc, 0x52, 0x8, 0x8, 0xb, 0x1, 0x4, 0x3, 0x8a3, 0x7f, 0x2, 0x5, 0x0, 0xb25, 0x7, 0x8001, 0x2b3c58df, 0xfffffff7, 0x2, 0x2000, 0x7f, 0x0, 0x401, 0x135b5821, 0xb, 0x2, 0x10, 0xf1e7, 0x5, 0x7fffffff, 0x5, 0xd, 0x8, 0x3ff, 0x7, 0x2, 0xf0000000, 0x1, 0x7, 0x1, 0x9, 0x3, 0xb, 0x0, 0x8, 0x7, 0xf, 0x7ff, 0x20000000, 0x1, 0x9, 0x1, 0x10000, 0x0, 0x9, 0x4, 0x2, 0x400, 0x0, 0xd, 0x2, 0xc5a, 0x9b, 0xa0d0, 0xfffffffc, 0x9, 0x2, 0x6, 0x101, 0x4, 0x7, 0x1, 0xd, 0x80000001, 0x6, 0x4, 0xffffffff, 0x400, 0xffffffff, 0x2, 0x1, 0x2, 0x5, 0x400, 0x5, 0x4, 0x80000000, 0x4, 0x4, 0x6, 0x2223, 0xac, 0x7ff, 0x6, 0x3, 0x9, 0x9, 0x9, 0x8, 0x30, 0x800, 0x7b, 0x1, 0x358, 0x800, 0x5, 0x7, 0xe, 0x3, 0x9, 0x9, 0x7fff, 0x3, 0xf, 0x4, 0x9c, 0x3000000, 0xfffffffb, 0x9, 0x0, 0x1, 0x3, 0x101, 0x0, 0x32, 0x80, 0x9, 0x80, 0xfffffff8, 0x4, 0x6, 0x80, 0x8, 0x4, 0x2, 0x9, 0x68, 0x8, 0x9, 0x3e8, 0x5c64, 0x6, 0x2030, 0x5d, 0x40, 0x2, 0x75b, 0xee4b, 0x5, 0xe16, 0x765, 0x7, 0x9, 0x9, 0x3, 0x2, 0x8, 0x3b, 0x2, 0x0, 0x1, 0x6, 0x2, 0xd, 0x9, 0x7, 0x80000001, 0x8001, 0x8, 0x6, 0x1000, 0x401, 0x1, 0x80000001, 0x3759, 0x0, 0x5, 0x2, 0xd, 0x4000, 0x3, 0xfdb, 0x1000, 0x3, 0x0, 0x7, 0x3, 0x1, 0x9, 0x400000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x7, 0x6, 0x9, 0x5, {0x3, 0x2, 0x6, 0x5, 0xfffe, 0x1da}, {0x0, 0x0, 0x4, 0x4, 0x5, 0xff}, 0x5, 0x1, 0x8}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x7e17, 0x6, 0x401, 0x91f, 0xfffffffe, 0x4, 0x7fff, 0xbc, 0x95, 0xc, 0x7fff, 0x7, 0x8, 0x10, 0x9, 0x6a3, 0x1, 0x401, 0xa, 0xfffffffa, 0x8, 0x10001, 0x7f, 0x1, 0x282, 0x6, 0x2, 0x7, 0x1, 0x9b41, 0x7, 0x1, 0x1, 0x8, 0x4, 0x4, 0x5, 0x3, 0x8, 0x1000, 0xff, 0x7, 0xc7, 0xfc2b, 0x40, 0x100, 0xb3de, 0x9ae, 0x3, 0xb1, 0x1, 0x8000, 0x1ff, 0x6, 0x2, 0x1e1ecc02, 0x0, 0x6, 0x6, 0x8, 0x19, 0x7fffffff, 0x88aa, 0x3d, 0x4, 0xe, 0x7a9, 0xe, 0x1, 0xd, 0x6fe0, 0x0, 0x1, 0x1, 0x80000001, 0x5d, 0x9, 0x6, 0x40, 0x4ab09ae, 0x9, 0x7, 0x2, 0xf, 0xffffff25, 0x75, 0x200, 0x33a, 0x9e, 0x4, 0x1000, 0xf, 0x2, 0x5, 0x1c, 0x8, 0x1, 0x2, 0x81, 0x8, 0x200, 0x6, 0xdf2, 0x9, 0xfffffffe, 0x8, 0x1, 0x3, 0x9, 0x3, 0x8001, 0x7, 0x3, 0x2e5, 0x2, 0x35cc, 0xff, 0x800, 0x7, 0x81, 0xc1, 0x69c78076, 0xc30, 0x3, 0x0, 0x0, 0x3, 0x6, 0x5, 0xffffffff, 0x6, 0x366, 0x3, 0x8d3, 0x2e2f, 0xfffffffb, 0x8, 0x18be, 0xa76, 0x1, 0x6, 0x9, 0xf96, 0xffffff01, 0xe0, 0x1, 0x4, 0x10000, 0x10, 0x6, 0x80000001, 0x4, 0x54d, 0xe, 0x6, 0x7, 0xfffffffb, 0x80000000, 0x1, 0x3c27, 0xe10, 0x0, 0x98, 0x9, 0x5, 0x7f, 0x1800, 0x5c7, 0xd1, 0x8889, 0xf60, 0x2, 0x80000001, 0x4, 0x2, 0x6, 0x8, 0x8, 0x81, 0x5, 0x40, 0x5691, 0x2, 0x4, 0x4, 0x1, 0x7, 0x2, 0x3, 0x8, 0x7f, 0x5, 0x4, 0x0, 0x80000000, 0x9, 0x80000001, 0xfffffffd, 0x0, 0x2, 0x3, 0xd0000000, 0x7, 0xfe4b, 0x8, 0xfffffff9, 0x891, 0x8, 0xb, 0xffffff01, 0xca4, 0x8, 0x0, 0x0, 0x2, 0x6, 0x3, 0x8, 0x9, 0xc608, 0x3ff, 0x5, 0x6, 0x80000000, 0x80000001, 0x7, 0x4, 0x8, 0x3, 0x200, 0x4, 0x2, 0x200, 0x4, 0x8, 0x5, 0x0, 0x101, 0x100, 0x80000001, 0x9000000, 0x9, 0x3, 0x7fff, 0x2, 0xc5a, 0x3d, 0xa3, 0x1, 0x95, 0x8, 0x101, 0x700000, 0x10]}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000000100)={0x0, 0x1000fe}, 0x20) read$FUSE(r7, &(0x7f0000000600)={0x2020}, 0x2020) ioctl$KVM_RUN(r6, 0xae80, 0x0) 324.58188ms ago: executing program 2 (id=918): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f0000000200)="07cdd6ef58a02aef4004cb600453284c5c5dd3f6ee7e37e80410f4af6eba4e8e2171fcf8338f2711ea5065f220ec4b852c073cdbab1279f782087b5f0d4373242e20fad420f2754ad312b1d70f05bc0f8ac7815cd37996a3e02fe1ad600abffcbd02c538fdbfad11dd1473845e231987ecfc743f81ef470cee5e835ede0b5d3931e1e64bb7cdb82adf3cad5176390ea633d4d5b6e3e84e9c3339b40422f4fefb0ab1dbbf13d3e28b60c459e54012b6f54254e677583abe99f690a5fba59632b2d3fefe636d8c26d44a7a82cf85f4c29310f2f34276600098818fbd8270", 0xdd}, {&(0x7f0000000300)="7b0a369e59301c179b8a27d4a1270dbfd3d59d99", 0x14}, {&(0x7f0000000340)="726e8f400db232e79f302afc52c63e6a56770eec88b638cecfc74c14a878a22eb10f0a1ca9912f93473c250fb00e03d46145b0ba1174807a252184af597c7b03703b944cd553f013bcfd36d3067bac671caa128326f0f2218e80265b836dc9deb2e1bbb36e1e976f3b30bcc87cf1c3b1384be40d8c6fa42c43d24d52d2ab28ef54b30d81a6e40ab149f72ce97d7e8d337c4bf5116d5055e7a715fdfb36b8f666", 0xa0}], 0x3, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000100)) 305.573081ms ago: executing program 2 (id=919): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x7}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x165) getdents64(r1, 0x0, 0x0) getdents64(r1, 0xfffffffffffffffe, 0x29) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000001c00)=@vmx={0x0, 0x0, 0x2080, {0x4000, 0x60000, {0x1}, 0x1, 0x8}, {"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", "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"}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 154.956845ms ago: executing program 2 (id=920): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf250198"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000008}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r2, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x7, @media='ib\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3ff}, [@generic={0x73, 0x1, 0x1, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 143.690066ms ago: executing program 0 (id=921): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) unshare(0x62040200) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x94d12, &(0x7f0000000b40)=ANY=[], 0x9, 0x120d, &(0x7f0000001280)="$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") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) ppoll(&(0x7f0000000000)=[{r1, 0x6220}], 0x1, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 64.152058ms ago: executing program 2 (id=922): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x24, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3, 0x0, {0xfd, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sigaltstack(&(0x7f0000000080)={&(0x7f0000000040)=""/40, 0x80000001, 0x28}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000770c0000000000004094006cbc53d1d8d883cc19cea70f00000000000000252e30fa1a7be281deba4ae14fef5243f49fe27a9aab085d5bcbfa", @ANYRES32=0x0, @ANYRESOCT=r5, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000400009aaa000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000040000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000150000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448e1, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00000000c0)=0xc1, 0x4) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @any, 0x7}, 0xe) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0xe, &(0x7f0000000080)=0x1) 0s ago: executing program 1 (id=923): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp6(0xa, 0x3, 0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'erspan0\x00', 0x100}) write$tun(r3, 0x0, 0x42) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1081, 0x3}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000001020500000000000000000002000003240002800c000280050001101100000014000180080001000000000008000200"], 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000002c0)={'vlan0\x00', {0x2, 0x0, @dev}}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66, 0xfd}]}, 0x10) r6 = socket$inet(0x2, 0x802, 0x1) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f000010b100)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f000010c300)={0x0, 0x0, "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", "8d9cd4b5745c0ecfa079ab752e1af2f92322ff130abf00dd395ee7bf1ebbdb9771c61ed53713abce2b14b131044622c89503fc58fbcaae0fe7ff3d5609bf93e63b8c3dfc9a2a06f91bc0cb2639782ab6723674b5d676c19f1017d27caee839f80c85f0a878fb99abc67ac5ad04855096f9f24a501d1679f83aee18430460afd94cb716cc6b37ad5dd8be3f77ae10cf9c1330824faaa6296c6a8baef7ef4de451089ca52dd5f7da5b817787e6bf7377d18e0da7c55d9b109035a3e248c844b142da561d7c46edbae016eaab15d9e094d285e51da1265a1610d413af849be86dc6e4852727b7c7484b9431e438ab1b987ac09eb1f34ee4b21624d3d8d8bb94705bef3fe898a4a01d090e9e98433c943712b2ddfa2f52d4541a8f2a1587576ee108445bdfb83d3c337ae48f851bf6e9dfa1a64583a28eaa01ed78e5408c7bd661455184f48211310cc1122ff8ba34185f4ebe95bbf2efafee374addae1920a7baf2382638a95347e605a43ad7b71f2358eb0929bdfb6563bc6d8a09439027466db5c3bef896c90418e4ff8a911526ac0f8632300544dfe41695c61469b41400e573397fd11279696ef4033e665364e056b24a2f1cfd6cce6dabce9d0a537bcd596e0fb56e630b0bdf3b2ceac4473f56b61dd49796a55ad187e3264e663ce21419189cdb4a9f28a3213dbc058a0ac699353f47024d84839d56b953a48ec0ad39b93e576b825c0999d396008e3b75e4b0e85a6d885470cc6bb5535e483558a3fd33aeb1f3ef1d346f4ac2a95ee11e7dee31215c74b8bef0e774f41c17ce1f3222e0ce926bf16c629cc7128329c4fd17958f825a1d71450483d2862894373c09427dedea934a2f4ffe7e8fb0f553dd3412a0dd1437394368542420648bfaf573fabbc9b127fff50e1131e8813b3a48d6490f02b8c016f4617814ffe43ce09bd4b9924a126f2da06ee5dd3155913aa32d3eb657aaad35a8893a087f0bd5bb143c9dd963373bd794f806793426944b0fd9cb63526059058b7a8503192a452ec8a8ee2f03d4ea6301dc072e60a266c5144cb1b12d491f2af44652108cc96bfc7957abea3ddbed30237b5ef8d831da8a4e33240a474bfe30dff819290839e2d704b996f3c2b08b049a5e874ccb3e0a5e0f3838d0b993ce9416774a801fd559e37c07eab415a6839c708638330825004f7a3aca9da16c445f3f5014b2ebe55c01809287f07ec243b516e5228ce124c0d774d1415530cae5c29d04a3190eb9c67caa4b151be438f4f077809cce08afe9a7f1df529c610f35ca8e9f0ffeaacdc2c7b61e388f6087ac4328256d3a262edcf615b3340751dfcd611c4f5c1d270f04ab5b4ae730ee7de25688ef7040acbae38cda389589e28cf5373df8b573033d6a2472554681261159f0cf90926a03a4bb5a5475b8756233da2f43e5f39cf4740c1ada153125eaac1a32a35db54613cb30bf605aad5d356df8eb9cf1e909c7763b2e051b8c921afdb9623cebd75556f3fd2a165a6fb3c75a47305e6be66b721aa546412452506c94dd6ebdba99873c246063aa153c29fc18f4071f0dddf286adb4c0fdb3f409f40cefa068d823aab37a21d1e6317ae25d0716b482819a76eb2a5a197b7105ef0623ba02f60c4f65c26d9be5fa987d367859f1b3e05ff490ea207e09d913c0212fcd00a12c2a672282d392bfdf4baebbea7df8f248abf8f462bb661900583121f2e42afdb11bceecce1d62e1df6eebc54426b725bfdd1490a438b4d9ffd5f35f3a0a8ceb454e299df53e78b2fbbc644839e7284d5247a4924e4085572f0d080387d2607a9d28c325f286aeaf4818cc89cf97e1c3bbde653452e98644fbfe33109570458ce4a26b1e305bc14b07d17edff3740244ddc1eff07f9b21c6d3058a7287b2be490d659a470dd9e0ba93f3d57f998cbfd1b50fca2650a820daba55007a05e94917837e06b524603702f421bd3b54f33dce9882022ce39651258b7c243d92e80bb01209cd66b5f5886951b341be83d4b8d17a418d6e3b1b5017ece54c93ddfbf561391892fcb6eb70f844a3b0618d732c40f240dc5208ded51352673b2c7d2d330ed76a38d9182392daeb41ad61ecd7a7c7025434dca694990d2df589d0fd39162fa55bab1d3f8edfa5b95271556e70d41a8b554dd36ab7062ed1344bc4cfe62a5073c082cbc02b379a0b641559e355337dcafa46ea34f6320af93048bb07b1ee6ab32b1e12ee3576607d9187169d8ba7838599166e5c9a8033a04d52a5f14d65d2d5702cf2943bf5753b8c7aeca662e1012e00028ebb19f3bacfc518bf2bb4bf632e6a56def18067803468b235e8fdd4e6096c87cd2c608e3d1e81b4d8390e5579ba6fd7581fe1c16880fb2fec98da19691cf97440815a3cc98ea303ae536043758b14c8ca929c7ffa2d280e49acd202156f160b19aa6bab6dab38ada56e7c14951916eb8fcc2aafbb44cc49993494e2b59072e12303723c0e4bf031b385a7da9ed451baf74a417993a5ab2c012aefecf68e99ec963dbd98b8b87974a0226e120144f277cfa7fd77e6797fef3642c8d973fc6bb4e486264537f23c86083e0d53e59998e6140797d81178e5f58de1bed7ae47c7bbc34aa20f753571f0c2212977edd2ae370badd44d7cef04968c8c199ab7197a027a3219922583448f02be07dc7f2af125f4156ac83cd29c4ee7570d777a41949ea8c777c5637e687848a52d8ab889748bb829edab960f9c60a74c3b53333ba96057f341a8946e0a6eb79e562326cfb64082196114cfbc63239d3b1232f885563a1972b27639502da31432f5ea859375cc2f79e26ea08f69740198ab4bac171b43cf261e4f3b37680adc823f44f5bf5ed896198cdc8ec18dafb4883d7955df61bff6139b596578f23e0afd1f51250f2196a281aeb6dd5c69db01144faf0441214580ae7c10c94db5ac6d6475d7b0dd3544cc08190030799f9e73e0e6d55539ce758da8a1a4050702b6f3c6f8ee7d09f3e4fb522947c8c8a7c75e32f54402421f82a2c3b3021eb03bc96573b76a0e779b45c2a669b49d89999d7357f285a67970dc5aea4774c26d1b57559946782aa660a68dde3dd843f4057f16d44db00f529fe3e752aa214be3614151f4b10d28a3679bf592e8b7e421e8f6141980575226d145fc9c0d1ce495d5224f51fa756162db342c9ada32aba102638b1207dbf3f21b43f88f081f8c214341ad10ee25051cef7363b1e787cf366754a2b69ba961ee349e59f155556a32c53c0215cbb30469a82b51929296868e873beadc0035c03c1a3a410d2d1c6115090f497e28e4c81b2db112aa5d375596964fe001462b6722bf59483f45274c21aa53231aba85a9a6f3c5bfce21354ab03304e0e2b3ee7d16f58922b9eae100413c48eacd44f689f4baef299f3a997c9ea0720c2e4c2a67792b80cce9eba1a6da0fa1dc81abd71e3f6084e4f1c359eca862a9381471f4c0f26223f12fedb30eb5e4c7a0404b3a83be89ab90bb9f26115079eece6b8f6827a2a5e2ce0f240e3a28b1eab51cf6ff82444cc55b66654aee80e3bd7a5cc975b6f50184fca4603db1131a4b08b99dc064687ed36ce63a9f2e2882eb8de9632161ae7d4667a4597cf5daa41ef3f9d9c178172fb7b7bb052512ce5562781447c4395aa4c19e0408cbe6b4319c6ee0c786c8350949b4237ccdabca8a0ba7f5cad4fce35efcd730fa996ebda172d120463bebc5fb5572d41bd3e9dad15fdc61930f640b66e9d85a2787ae3cef3d01ff33d9fe9fad980bd06fc73d6a1d3e5c397c4938aa3a3b9da5b004e7314a0dd68205fc089cbef889e5ea1c1b46788281c3560010ecb4ee2c8595c860ee5e55703103eefdb3d65d751a77b57cb57c43fa95844d7da2402b6e44bdbed74d1adf6186d59de0c3e7688837c3c297d3c62442a7a19c79f220a6b0a2db28b70ad73956c0d5f31c169c8e623a7ca332b792301f566aad12034c652616078682906ad3e03ff78bc4c94a73d84f5b3d9dddd0b93874512be84a5d2b54c5d7e9bae7f0a4b47389a927148fd05c7837b36de917bdaf75bbbb78e37901d9bd4308eeef0c381b961bd0f1eb57c1adbeb8cacfd51244296dc9a72a20645546c82a8606ae17d374a81498790d36b77c6af1ae163578da1a0135f31519d9eea638ecd1dd477967bd841e4465655c4ce5fbdc059a7d802b0f1dad6d1fc8f50737cf0d373ec59a9c9d3c4800a704b174bc4ebbdf7994f23e3823208005f33df81760fc78f7b9fe66103f8c0d4238926acba9de395c77bf260dadb13c170b44b35174d96a9ca675a2a5ee7fc0dbda76059773fcc7d019b3104ec8b495e57e3a8dbe50ed8b58177f33716a90ed6c9cafdc20c53d19d6fc7e393e70a81e2e6aab1882fd5e96654ec885d62e73d36f3510b891b90fc66a9ea56a017de8409f28998b75bcb6e8c7873420764d362023f6b7e5e7135c723070db9a217eb77c7e6e31be65073aada474f4063d022f42bf59d81c104ced3d545b118fe7bc6c4df31dced5bc8436d76248d2e7bae187fd291f628e122206979b6752215c87591a28c362337ddf944bc33bf0524c565999331a1d68db53a2f7120f2576fd304bad0b0dee8acfe4d6691c69d2f43e6bfc1e20b38b48c9862739e215f75aa08c89c5b87c732f0f7badc56ba78596a813aabad8d604cd993c90f4b11528f666fcee8fac90c8a38b2c3c5cb62f6f234151b6b249bcdcafa835066a41d55a79c8f5b80e90adc81d21de841466f0dbdfc0140e88e116d2345046c0f5692b730b2d77caedc590dbc05b6ce2c6d041d7fb2bd67104573bb7fcc5f25fe89f59b85376e0fb49246f5cddfcef9adf029b44bbd9180a7c45c8e10a0ec144d88b742e2c7a8e2e188d1c842ce1e836a7254500c5037165936282ee2b4df338a3c07905825d759c00e1a2203c4b552af487a89f6db777574a057f8510f235a96421d57f19bf16fe83b9976f643006daa9a629e2991e11c9c5ba42c56af5c092ec9f9543ecf5735f1237faa23281b55705815c7cb5debed1ee2b14c9582aec804743ecd394b45680c982cedd3b9ca773ceba4bb1c532aefc95945e0485f2460cb6f1a96ea74761d2bba686b5f310a4adfe233f3c6bb95503fa46221793c60018e18b2617e98d7150269425c924a829b05c9bdece19f9ac38a6c83c9573345734b3e0845225c4e06b578391c9754cb37db8001f8c29be07ce67e5d34c7ca3390870db81d4832c823738e6f1e164076c57aa2754fa045aed629e4d9dd415e6f0aea045cab00142ebb204bcfc0e63e703dcff2bf49a7ccf9396c0f799880850a8c75b656242c1ec6ff4d6b9373dea172de24dd815dbbd1cee59bddc91b480b11e442e04b7b9ca558b5fbce3891781ef2b97f534717cfdce7d7189319a88b454874df36cd37dd83d37"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f000010d300)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f000010e300)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f000010f300)={0xffffffffffff6e44, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "8338b265768693"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000110300)={{0x0, 0xf, 0x3, 0x1, 0x7, 0x7, 0x2, 0x9, 0x3, 0x8001, 0x3, 0x9, 0x5, 0x9, 0x8}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00001103c0)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {r10, r11}, {r12, r13}, {r14}], 0x6d, "b521ffe11890fd"}) ioctl$XFS_IOC_AG_GEOMETRY(r7, 0xc080583d, &(0x7f0000000140)={0x5262, 0xb8202cd, 0x8, 0x1ff, 0x8, 0x7, 0x0, 0x8}) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) write(r6, &(0x7f0000000080)="08008edf773c8000", 0xfd) getsockopt(r1, 0x3, 0x2, &(0x7f0000000200)=""/81, &(0x7f0000000280)=0x51) kernel console output (not intermixed with test programs): k becomes ready [ 98.844401][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.915151][ T2257] fuse: Unknown parameter 'f' [ 98.980754][ T2260] loop0: detected capacity change from 0 to 8192 [ 99.004896][ T2263] futex_wake_op: syz.6.667 tries to shift op by 144; fix this program [ 99.014035][ T2260] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.025708][ T10] device bridge_slave_1 left promiscuous mode [ 99.032883][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.053444][ T10] device bridge_slave_0 left promiscuous mode [ 99.067506][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.092390][ T10] device veth1_macvtap left promiscuous mode [ 99.105115][ T10] device veth0_vlan left promiscuous mode [ 99.234847][ T333] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 99.379972][ T2270] FAULT_INJECTION: forcing a failure. [ 99.379972][ T2270] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 99.393762][ T2270] CPU: 0 PID: 2270 Comm: syz.1.665 Not tainted syzkaller #0 [ 99.401099][ T2270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 99.411187][ T2270] Call Trace: [ 99.414493][ T2270] [ 99.417444][ T2270] __dump_stack+0x21/0x30 [ 99.420206][ T2265] loop0: detected capacity change from 0 to 40427 [ 99.421801][ T2270] dump_stack_lvl+0x110/0x170 [ 99.432921][ T2270] ? show_regs_print_info+0x20/0x20 [ 99.438155][ T2270] dump_stack+0x15/0x20 [ 99.442343][ T2270] should_fail+0x3ab/0x500 [ 99.446768][ T2270] should_fail_alloc_page+0x55/0x80 [ 99.451972][ T2270] prepare_alloc_pages+0x13f/0x590 [ 99.457087][ T2270] ? arch_stack_walk+0xee/0x140 [ 99.461949][ T2270] ? __alloc_pages_bulk+0xab0/0xab0 [ 99.467154][ T2270] __alloc_pages+0x11d/0x460 [ 99.472005][ T2270] ? prep_new_page+0x110/0x110 [ 99.476784][ T2270] handle_pte_fault+0xee5/0x2770 [ 99.481832][ T2270] ? unwind_get_return_address+0x4d/0x90 [ 99.487510][ T2270] ? fault_around_bytes_set+0xc0/0xc0 [ 99.492915][ T2270] ? arch_stack_walk+0xee/0x140 [ 99.497776][ T2270] do_handle_mm_fault+0x1b3b/0x1e30 [ 99.502981][ T2270] ? numa_migrate_prep+0xd0/0xd0 [ 99.507929][ T2270] ? 0xffffffffa000c000 [ 99.512083][ T2270] ? is_bpf_text_address+0x177/0x190 [ 99.517380][ T2270] ? vmacache_update+0xb7/0x120 [ 99.522238][ T2270] ? __find_vma+0x13b/0x150 [ 99.526749][ T2270] do_user_addr_fault+0x808/0x11c0 [ 99.531875][ T2270] ? arch_stack_walk+0xee/0x140 [ 99.536748][ T2270] ? do_kern_addr_fault+0x80/0x80 [ 99.541786][ T2270] ? vsnprintf+0x14e/0x1990 [ 99.546290][ T2270] ? memcpy+0x56/0x70 [ 99.550287][ T2270] ? vsnprintf+0x189d/0x1990 [ 99.554884][ T2270] exc_page_fault+0x51/0xb0 [ 99.559397][ T2270] asm_exc_page_fault+0x27/0x30 [ 99.564550][ T2270] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 99.570903][ T2270] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 99.590514][ T2270] RSP: 0018:ffffc900010c7918 EFLAGS: 00050202 [ 99.596587][ T2270] RAX: ffffffff824e1f01 RBX: ffff88811d376000 RCX: 0000000000000004 [ 99.604568][ T2270] RDX: 0000000000000001 RSI: ffff88811d376000 RDI: 0000200000002580 [ 99.612638][ T2270] RBP: ffffc900010c7a78 R08: 2020202020202020 R09: 1ffff11023a6ec04 [ 99.620622][ T2270] R10: dffffc0000000000 R11: ffffed1023a6ec05 R12: 00002000000025a1 [ 99.628611][ T2270] R13: 0000000000000000 R14: 0000200000002580 R15: 0000000000000021 [ 99.636604][ T2270] ? _copy_to_iter+0x251/0x10b0 [ 99.641477][ T2270] ? _copy_to_iter+0x297/0x10b0 [ 99.646337][ T2270] ? __kmalloc+0x13d/0x2c0 [ 99.650795][ T2270] ? iov_iter_init+0x180/0x180 [ 99.655570][ T2270] ? uid_m_show+0x5d9/0x820 [ 99.660084][ T2270] ? __kasan_check_write+0x14/0x20 [ 99.665199][ T2270] ? m_next+0x80/0x80 [ 99.669186][ T2270] ? __check_object_size+0x2dd/0x3b0 [ 99.674480][ T2270] seq_read_iter+0xb0b/0xce0 [ 99.679100][ T2270] seq_read+0x3d9/0x4f0 [ 99.683268][ T2270] ? seq_open+0x130/0x130 [ 99.687602][ T2270] ? __kasan_check_read+0x11/0x20 [ 99.692637][ T2270] ? fsnotify_perm+0x269/0x5b0 [ 99.697419][ T2270] ? security_file_permission+0x83/0xa0 [ 99.702984][ T2270] ? seq_open+0x130/0x130 [ 99.707316][ T2270] vfs_read+0x28c/0xc20 [ 99.711502][ T2270] ? kernel_read+0x1f0/0x1f0 [ 99.716105][ T2270] ? __kasan_check_write+0x14/0x20 [ 99.721231][ T2270] ? mutex_lock+0x9b/0x1c0 [ 99.725784][ T2270] ? wait_for_completion_killable_timeout+0x10/0x10 [ 99.732411][ T2270] ? __fget_files+0x2e1/0x340 [ 99.737091][ T2270] ? __fdget_pos+0x2d2/0x380 [ 99.741682][ T2270] ? ksys_read+0x70/0x260 [ 99.746010][ T2270] ksys_read+0x14a/0x260 [ 99.750254][ T2270] ? vfs_write+0xfd0/0xfd0 [ 99.754671][ T2270] ? debug_smp_processor_id+0x17/0x20 [ 99.760062][ T2270] __x64_sys_read+0x7b/0x90 [ 99.764581][ T2270] x64_sys_call+0x96d/0x9a0 [ 99.769106][ T2270] do_syscall_64+0x4c/0xa0 [ 99.773546][ T2270] ? clear_bhb_loop+0x50/0xa0 [ 99.778244][ T2270] ? clear_bhb_loop+0x50/0xa0 [ 99.782938][ T2270] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.788841][ T2270] RIP: 0033:0x7f42baed6e59 [ 99.793261][ T2270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.812887][ T2270] RSP: 002b:00007f42b9931028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.821439][ T2270] RAX: ffffffffffffffda RBX: 00007f42bb14ffa0 RCX: 00007f42baed6e59 [ 99.829424][ T2270] RDX: 0000000000002020 RSI: 0000200000002580 RDI: 0000000000000003 [ 99.837405][ T2270] RBP: 00007f42b9931090 R08: 0000000000000000 R09: 0000000000000000 [ 99.845383][ T2270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.853361][ T2270] R13: 00007f42bb150038 R14: 00007f42bb14ffa0 R15: 00007ffeb6c6a028 [ 99.861350][ T2270] [ 99.874704][ T2265] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 99.892682][ T2265] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 99.914099][ T333] usb 5-1: Using ep0 maxpacket: 32 [ 99.968508][ T2265] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.005446][ T2265] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 100.012690][ T2265] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.032564][ T333] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 100.041517][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 100.041534][ T30] audit: type=1400 audit(1782247934.826:315): avc: denied { rename } for pid=2264 comm="syz.0.664" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 100.091606][ T333] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 100.382551][ T26] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 100.443101][ T333] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 100.452132][ T333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.461852][ T333] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 100.471574][ T333] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 100.484731][ T333] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 100.502516][ T333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.515187][ T333] usb 5-1: config 0 descriptor?? [ 100.666219][ T2287] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 100.678205][ T2287] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 100.686662][ T26] usb 7-1: Using ep0 maxpacket: 16 [ 100.692765][ T2287] F2FS-fs (loop2): invalid crc value [ 100.701104][ T2287] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.749061][ T2287] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 100.773108][ T2287] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 100.795714][ T333] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 101.046279][ T30] audit: type=1400 audit(1782247935.836:316): avc: denied { create } for pid=2296 comm="syz.1.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.079568][ T2297] netlink: 'syz.1.672': attribute type 4 has an invalid length. [ 101.096346][ T30] audit: type=1400 audit(1782247935.866:317): avc: denied { setopt } for pid=2296 comm="syz.1.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.137242][ T30] audit: type=1400 audit(1782247935.866:318): avc: denied { write } for pid=2296 comm="syz.1.672" path="socket:[23183]" dev="sockfs" ino=23183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.223287][ T26] usb 7-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 101.232913][ T26] usb 7-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 101.241171][ T26] usb 7-1: Product: syz [ 101.252376][ T26] usb 7-1: Manufacturer: syz [ 101.257390][ T26] usb 7-1: SerialNumber: syz [ 101.262316][ T2297] set_capacity_and_notify: 2 callbacks suppressed [ 101.272201][ T2297] loop1: detected capacity change from 0 to 512 [ 101.321874][ T26] usb 7-1: config 0 descriptor?? [ 101.379894][ T333] usb 5-1: USB disconnect, device number 15 [ 101.385936][ C0] usblp0: nonzero read bulk status received: -71 [ 101.445169][ T26] ums-onetouch 7-1:0.0: USB Mass Storage device detected [ 101.529330][ T2311] loop0: detected capacity change from 0 to 256 [ 101.565751][ T2282] loop6: detected capacity change from 0 to 512 [ 101.572652][ T2311] exfat: Bad value for 'gid' [ 101.583711][ T2261] usblp0: removed [ 101.608568][ T30] audit: type=1400 audit(1782247936.396:319): avc: denied { write } for pid=2312 comm="syz.0.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.619192][ T2313] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.635299][ T2313] IPv6: NLM_F_CREATE should be set when creating new route [ 101.642757][ T2313] IPv6: NLM_F_CREATE should be set when creating new route [ 101.721311][ T26] usb 7-1: USB disconnect, device number 2 [ 101.835344][ T2318] loop0: detected capacity change from 0 to 256 [ 101.872971][ T2318] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.883658][ T2318] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 101.896897][ T2318] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 102.182308][ T20] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 102.255341][ T2322] futex_wake_op: syz.4.678 tries to shift op by 144; fix this program [ 102.422429][ T20] usb 1-1: Using ep0 maxpacket: 16 [ 102.533808][ T2324] loop6: detected capacity change from 0 to 8192 [ 102.542445][ T20] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.561403][ T20] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.583745][ T2324] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.773655][ T333] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 102.792058][ T20] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.959310][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.041878][ T20] usb 1-1: Product: syz [ 103.095254][ T20] usb 1-1: Manufacturer: syz [ 103.720443][ T20] usb 1-1: SerialNumber: syz [ 103.762318][ T333] usb 3-1: Using ep0 maxpacket: 32 [ 103.882459][ T333] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 103.892123][ T333] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 103.900966][ T333] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 103.910353][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 103.920273][ T333] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 103.930232][ T333] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 103.943658][ T333] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 103.962253][ T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.974216][ T333] usb 3-1: config 0 descriptor?? [ 104.022777][ T2333] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 104.105981][ T2333] device veth3 entered promiscuous mode [ 104.245195][ T333] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 104.482428][ T2342] FAULT_INJECTION: forcing a failure. [ 104.482428][ T2342] name failslab, interval 1, probability 0, space 0, times 0 [ 104.495798][ T2342] CPU: 0 PID: 2342 Comm: syz.6.685 Not tainted syzkaller #0 [ 104.503193][ T2342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 104.513290][ T2342] Call Trace: [ 104.516600][ T2342] [ 104.519563][ T2342] __dump_stack+0x21/0x30 [ 104.523935][ T2342] dump_stack_lvl+0x110/0x170 [ 104.528767][ T2342] ? show_regs_print_info+0x20/0x20 [ 104.534006][ T2342] ? __local_bh_enable_ip+0x58/0x80 [ 104.539273][ T2342] dump_stack+0x15/0x20 [ 104.543464][ T2342] should_fail+0x3ab/0x500 [ 104.547926][ T2342] __should_failslab+0xa4/0xe0 [ 104.552729][ T2342] should_failslab+0x9/0x20 [ 104.557273][ T2342] slab_pre_alloc_hook+0x39/0xd0 [ 104.562256][ T2342] ? __alloc_skb+0xe4/0x730 [ 104.566809][ T2342] kmem_cache_alloc+0x44/0x260 [ 104.571613][ T2342] __alloc_skb+0xe4/0x730 [ 104.576240][ T2342] netlink_sendmsg+0x611/0xb80 [ 104.581146][ T2342] ? netlink_getsockopt+0x530/0x530 [ 104.586533][ T2342] ? security_socket_sendmsg+0x82/0xa0 [ 104.592030][ T2342] ? netlink_getsockopt+0x530/0x530 [ 104.597270][ T2342] ____sys_sendmsg+0x5be/0x8f0 [ 104.602073][ T2342] ? __sys_sendmsg_sock+0x40/0x40 [ 104.607152][ T2342] ? import_iovec+0x7c/0xb0 [ 104.611703][ T2342] ___sys_sendmsg+0x236/0x2e0 [ 104.616419][ T2342] ? sysvec_reschedule_ipi+0x78/0x80 [ 104.621744][ T2342] ? __sys_sendmsg+0x280/0x280 [ 104.626543][ T2342] ? vfs_write+0xc64/0xfd0 [ 104.631012][ T2342] ? __fdget+0x1a1/0x230 [ 104.635291][ T2342] __x64_sys_sendmsg+0x201/0x2d0 [ 104.640266][ T2342] ? ___sys_sendmsg+0x2e0/0x2e0 [ 104.645163][ T2342] ? ksys_write+0x1fa/0x260 [ 104.649789][ T2342] ? __kasan_check_write+0x14/0x20 [ 104.654950][ T2342] ? switch_fpu_return+0x15d/0x2c0 [ 104.655327][ T2338] loop2: detected capacity change from 0 to 8192 [ 104.660110][ T2342] x64_sys_call+0x4b/0x9a0 [ 104.660133][ T2342] do_syscall_64+0x4c/0xa0 [ 104.675339][ T2342] ? clear_bhb_loop+0x50/0xa0 [ 104.680057][ T2342] ? clear_bhb_loop+0x50/0xa0 [ 104.684775][ T2342] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.690726][ T2342] RIP: 0033:0x7f17e6c57e59 [ 104.695190][ T2342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.715030][ T2342] RSP: 002b:00007f17e56b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.723492][ T2342] RAX: ffffffffffffffda RBX: 00007f17e6ed0fa0 RCX: 00007f17e6c57e59 [ 104.731601][ T2342] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 104.739612][ T2342] RBP: 00007f17e56b2090 R08: 0000000000000000 R09: 0000000000000000 [ 104.747624][ T2342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.755637][ T2342] R13: 00007f17e6ed1038 R14: 00007f17e6ed0fa0 R15: 00007ffcfa5a3b28 [ 104.763642][ T2342] [ 104.787774][ T2344] loop4: detected capacity change from 0 to 256 [ 104.831443][ T2344] exfat: Bad value for 'gid' [ 104.856527][ T319] usb 3-1: USB disconnect, device number 21 [ 104.862006][ C0] usblp0: nonzero read bulk status received: -71 [ 105.030521][ T2337] loop1: detected capacity change from 0 to 40427 [ 105.047683][ T2337] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 105.076529][ T2337] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 105.085241][ T2327] usblp0: removed [ 105.090303][ T2337] F2FS-fs (loop1): invalid crc value [ 105.098171][ T2349] loop4: detected capacity change from 0 to 16 [ 105.123859][ T2349] erofs: (device loop4): mounted with root inode @ nid 36. [ 105.149694][ T2337] F2FS-fs (loop1): Found nat_bits in checkpoint [ 105.200561][ T2337] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 105.208480][ T2337] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 105.351897][ T26] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 105.443620][ T2359] loop0: detected capacity change from 0 to 1024 [ 105.461997][ T20] usb 1-1: 0:2 : does not exist [ 105.469230][ T20] usb 1-1: USB disconnect, device number 14 [ 105.483691][ T2361] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000001cc4,,errors=continue. Quota mode: none. [ 105.508351][ T2361] fuse: Unknown parameter 'f' [ 105.525402][ T2359] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,debug_want_extra_isize=0x0000000000000084,resgid=0x0000000000000000,commit=0x0000000000000005,barrier,barrier=0x0000000000000005,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 105.552431][ T42] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 105.568723][ T2359] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.692: inline data xattr refers to an external xattr inode [ 105.611905][ T26] usb 7-1: Using ep0 maxpacket: 32 [ 105.637479][ T2372] FAULT_INJECTION: forcing a failure. [ 105.637479][ T2372] name failslab, interval 1, probability 0, space 0, times 0 [ 105.650276][ T2372] CPU: 1 PID: 2372 Comm: syz.0.694 Not tainted syzkaller #0 [ 105.657595][ T2372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.667658][ T2372] Call Trace: [ 105.670956][ T2372] [ 105.673900][ T2372] __dump_stack+0x21/0x30 [ 105.678250][ T2372] dump_stack_lvl+0x110/0x170 [ 105.682936][ T2372] ? show_regs_print_info+0x20/0x20 [ 105.688164][ T2372] dump_stack+0x15/0x20 [ 105.692337][ T2372] should_fail+0x3ab/0x500 [ 105.696776][ T2372] ? netlink_sendmsg+0x611/0xb80 [ 105.701729][ T2372] __should_failslab+0xa4/0xe0 [ 105.706512][ T2372] should_failslab+0x9/0x20 [ 105.711029][ T2372] slab_pre_alloc_hook+0x39/0xd0 [ 105.715988][ T2372] ? netlink_sendmsg+0x611/0xb80 [ 105.720946][ T2372] ? netlink_sendmsg+0x611/0xb80 [ 105.725898][ T2372] __kmalloc_track_caller+0x6c/0x2c0 [ 105.731204][ T2372] ? netlink_sendmsg+0x611/0xb80 [ 105.736162][ T2372] ? netlink_sendmsg+0x611/0xb80 [ 105.741119][ T2372] __alloc_skb+0x210/0x730 [ 105.745559][ T2372] netlink_sendmsg+0x611/0xb80 [ 105.750342][ T2372] ? netlink_getsockopt+0x530/0x530 [ 105.755553][ T2372] ? kasan_set_track+0x4a/0x70 [ 105.760331][ T2372] ? security_socket_sendmsg+0x82/0xa0 [ 105.765803][ T2372] ? netlink_getsockopt+0x530/0x530 [ 105.771018][ T2372] ____sys_sendmsg+0x5be/0x8f0 [ 105.775795][ T2372] ? __sys_sendmsg_sock+0x40/0x40 [ 105.780835][ T2372] ? import_iovec+0x7c/0xb0 [ 105.785367][ T2372] ___sys_sendmsg+0x236/0x2e0 [ 105.790056][ T2372] ? __sys_sendmsg+0x280/0x280 [ 105.794837][ T2372] ? __fdget+0x1a1/0x230 [ 105.799092][ T2372] __x64_sys_sendmsg+0x201/0x2d0 [ 105.804068][ T2372] ? ___sys_sendmsg+0x2e0/0x2e0 [ 105.808935][ T2372] ? ksys_write+0x1fa/0x260 [ 105.813450][ T2372] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 105.819710][ T2372] x64_sys_call+0x4b/0x9a0 [ 105.824185][ T2372] do_syscall_64+0x4c/0xa0 [ 105.828617][ T2372] ? clear_bhb_loop+0x50/0xa0 [ 105.833310][ T2372] ? clear_bhb_loop+0x50/0xa0 [ 105.838006][ T2372] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.843916][ T2372] RIP: 0033:0x7fd5cef15e59 [ 105.848357][ T2372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.867978][ T2372] RSP: 002b:00007fd5cd970028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.876420][ T2372] RAX: ffffffffffffffda RBX: 00007fd5cf18efa0 RCX: 00007fd5cef15e59 [ 105.884416][ T2372] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000004 [ 105.892395][ T2372] RBP: 00007fd5cd970090 R08: 0000000000000000 R09: 0000000000000000 [ 105.900388][ T2372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.908368][ T2372] R13: 00007fd5cf18f038 R14: 00007fd5cf18efa0 R15: 00007ffd1d3967d8 [ 105.916359][ T2372] [ 105.921599][ T477] udevd[477]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.938547][ T30] audit: type=1400 audit(1782247940.727:320): avc: denied { remount } for pid=2371 comm="syz.0.694" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 105.984516][ T2379] futex_wake_op: syz.1.696 tries to shift op by 144; fix this program [ 106.011850][ T26] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 106.021185][ T26] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 106.030746][ T26] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 106.039837][ T26] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 106.050181][ T2381] exfat: Bad value for 'gid' [ 106.055128][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 106.060896][ T26] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 106.070716][ T26] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 106.089528][ T2383] FAT-fs (loop0): Directory bread(block 32) failed [ 106.096394][ T2383] FAT-fs (loop0): Directory bread(block 33) failed [ 106.103353][ T26] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 106.116373][ T2383] FAT-fs (loop0): Directory bread(block 34) failed [ 106.123331][ T2383] FAT-fs (loop0): Directory bread(block 35) failed [ 106.130341][ T2383] FAT-fs (loop0): Directory bread(block 36) failed [ 106.138648][ T2383] FAT-fs (loop0): Directory bread(block 37) failed [ 106.142210][ T26] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.146163][ T2383] FAT-fs (loop0): Directory bread(block 38) failed [ 106.160468][ T2383] FAT-fs (loop0): Directory bread(block 39) failed [ 106.167271][ T2383] FAT-fs (loop0): Directory bread(block 40) failed [ 106.179109][ T2383] FAT-fs (loop0): Directory bread(block 41) failed [ 106.191871][ T26] usb 7-1: config 0 descriptor?? [ 106.269933][ T2383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 106.341837][ T42] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 106.361115][ T42] usb 5-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 106.380906][ T42] usb 5-1: Product: syz [ 106.385378][ T42] usb 5-1: Manufacturer: syz [ 106.390040][ T42] usb 5-1: SerialNumber: syz [ 106.402506][ T42] usb 5-1: config 0 descriptor?? [ 106.452675][ T42] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 106.461265][ T26] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 106.854424][ T2357] set_capacity_and_notify: 3 callbacks suppressed [ 106.854442][ T2357] loop4: detected capacity change from 0 to 512 [ 106.920578][ T2390] loop2: detected capacity change from 0 to 40427 [ 106.932170][ T333] usb 7-1: USB disconnect, device number 3 [ 106.941664][ C0] usblp0: nonzero read bulk status received: -71 [ 106.952678][ T2390] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 106.969906][ T2390] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 107.030138][ T2390] F2FS-fs (loop2): invalid crc value [ 107.037732][ T2390] F2FS-fs (loop2): Found nat_bits in checkpoint [ 107.084014][ T2390] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 107.091884][ T2390] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 107.139100][ T2347] usblp0: removed [ 107.354247][ T42] usb 5-1: USB disconnect, device number 16 [ 107.380405][ T2406] netlink: 'syz.2.703': attribute type 5 has an invalid length. [ 107.389275][ T30] audit: type=1400 audit(1782247942.177:321): avc: denied { accept } for pid=2405 comm="syz.2.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 107.417426][ T2411] loop0: detected capacity change from 0 to 256 [ 107.486258][ T2411] FAT-fs (loop0): Directory bread(block 64) failed [ 107.498021][ T2411] FAT-fs (loop0): Directory bread(block 65) failed [ 107.505283][ T2411] FAT-fs (loop0): Directory bread(block 66) failed [ 107.511967][ T2411] FAT-fs (loop0): Directory bread(block 67) failed [ 107.539845][ T2411] FAT-fs (loop0): Directory bread(block 68) failed [ 107.548516][ T30] audit: type=1400 audit(1782247942.337:322): avc: denied { create } for pid=2417 comm="syz.4.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.569035][ T2418] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 107.577885][ T2411] FAT-fs (loop0): Directory bread(block 69) failed [ 107.588148][ T2411] FAT-fs (loop0): Directory bread(block 70) failed [ 107.598213][ T30] audit: type=1400 audit(1782247942.357:323): avc: denied { connect } for pid=2417 comm="syz.4.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.633528][ T2411] FAT-fs (loop0): Directory bread(block 71) failed [ 107.640299][ T2411] FAT-fs (loop0): Directory bread(block 72) failed [ 107.646928][ T2411] FAT-fs (loop0): Directory bread(block 73) failed [ 107.674252][ T30] audit: type=1400 audit(1782247942.357:324): avc: denied { write } for pid=2417 comm="syz.4.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.701593][ T333] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 107.824599][ T2434] loop1: detected capacity change from 0 to 256 [ 107.834912][ T2434] exfat: Bad value for 'gid' [ 107.937032][ T2435] kvm: pic: non byte write [ 107.951546][ T333] usb 3-1: Using ep0 maxpacket: 32 [ 108.071648][ T333] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 108.090246][ T333] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 108.121542][ T333] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 108.160910][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.182637][ T333] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 108.206750][ T333] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 108.257194][ T333] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 108.285711][ T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.302981][ T2422] loop4: detected capacity change from 0 to 40427 [ 108.318904][ T333] usb 3-1: config 0 descriptor?? [ 108.340109][ T2422] F2FS-fs (loop4): invalid crc value [ 108.371031][ T2422] F2FS-fs (loop4): Found nat_bits in checkpoint [ 108.491912][ T2422] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 108.506724][ T2440] loop6: detected capacity change from 0 to 40427 [ 108.533856][ T30] audit: type=1400 audit(1782247943.327:325): avc: denied { ioctl } for pid=2421 comm="syz.4.708" path="/156/file0/file1" dev="loop4" ino=10 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 108.558100][ T2441] attempt to access beyond end of device [ 108.558100][ T2441] loop4: rw=2049, want=45104, limit=40427 [ 108.562787][ T2440] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 108.589150][ T2440] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 108.602882][ T333] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 108.615099][ T2440] F2FS-fs (loop6): invalid crc value [ 108.669634][ T2440] F2FS-fs (loop6): Found nat_bits in checkpoint [ 108.719294][ T2440] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 108.726502][ T2440] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 108.759737][ T2446] loop2: detected capacity change from 0 to 8192 [ 108.860657][ T2454] netlink: 'syz.1.717': attribute type 5 has an invalid length. [ 108.870561][ T42] usb 3-1: USB disconnect, device number 22 [ 108.876560][ C1] usblp0: nonzero read bulk status received: -71 [ 109.069787][ T2413] usblp0: removed [ 109.108754][ T2463] futex_wake_op: syz.4.715 tries to shift op by 144; fix this program [ 109.241409][ T333] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 109.491377][ T333] usb 2-1: Using ep0 maxpacket: 16 [ 109.587501][ T2469] loop2: detected capacity change from 0 to 16 [ 109.614211][ T2469] erofs: (device loop2): mounted with root inode @ nid 36. [ 109.624519][ T30] audit: type=1400 audit(1782247944.417:326): avc: denied { unlink } for pid=2468 comm="syz.2.721" name="#2b" dev="tmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 109.646899][ T42] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 109.771524][ T333] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 109.780723][ T333] usb 2-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 109.789149][ T333] usb 2-1: Product: syz [ 109.793424][ T333] usb 2-1: Manufacturer: syz [ 109.798078][ T333] usb 2-1: SerialNumber: syz [ 109.803805][ T333] usb 2-1: config 0 descriptor?? [ 109.841843][ T333] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 109.872327][ T2481] loop2: detected capacity change from 0 to 256 [ 109.872468][ T2482] loop6: detected capacity change from 0 to 16 [ 109.891360][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 109.951964][ T2481] exfat: Bad value for 'gid' [ 109.953011][ T2482] erofs: (device loop6): mounted with root inode @ nid 36. [ 109.973805][ T30] audit: type=1400 audit(1782247944.767:327): avc: denied { map } for pid=2479 comm="syz.6.725" path="/13/file1/file2" dev="loop6" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.998013][ T2482] erofs: (device loop6): z_erofs_readahead: readahead error at page 15 @ nid 89 [ 110.011704][ T42] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 110.022402][ T42] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 110.051604][ T2482] erofs: (device loop6): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 110.052241][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 110.074182][ T2482] attempt to access beyond end of device [ 110.074182][ T2482] loop6: rw=524288, want=136, limit=16 [ 110.076363][ T30] audit: type=1400 audit(1782247944.787:328): avc: denied { execute } for pid=2479 comm="syz.6.725" path="/13/file1/file2" dev="loop6" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.104267][ T2482] attempt to access beyond end of device [ 110.104267][ T2482] loop6: rw=524288, want=88, limit=16 [ 110.119947][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 110.140024][ T42] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 110.152143][ T2482] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 110.163708][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 110.181955][ T42] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 110.192239][ T333] usb 2-1: USB disconnect, device number 10 [ 110.200055][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.213023][ T42] usb 1-1: config 0 descriptor?? [ 110.221463][ T2482] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 110.229794][ T2482] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 110.264208][ T2482] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 110.306291][ T2482] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 110.321330][ T2482] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 110.443532][ T2484] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 110.451552][ T2484] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 110.460695][ T2484] F2FS-fs (loop4): invalid crc value [ 110.470245][ T42] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 110.525114][ T2484] F2FS-fs (loop4): Found nat_bits in checkpoint [ 110.566330][ T2484] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 110.573580][ T2484] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 110.642785][ T2496] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.657276][ T2496] FAULT_INJECTION: forcing a failure. [ 110.657276][ T2496] name failslab, interval 1, probability 0, space 0, times 0 [ 110.670011][ T2496] CPU: 1 PID: 2496 Comm: syz.2.728 Not tainted syzkaller #0 [ 110.677330][ T2496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 110.687420][ T2496] Call Trace: [ 110.690735][ T2496] [ 110.693698][ T2496] __dump_stack+0x21/0x30 [ 110.698063][ T2496] dump_stack_lvl+0x110/0x170 [ 110.702786][ T2496] ? show_regs_print_info+0x20/0x20 [ 110.708011][ T2496] ? kvm_sched_clock_read+0x18/0x40 [ 110.713246][ T2496] ? debug_smp_processor_id+0x17/0x20 [ 110.718657][ T2496] dump_stack+0x15/0x20 [ 110.722853][ T2496] should_fail+0x3ab/0x500 [ 110.727295][ T2496] __should_failslab+0xa4/0xe0 [ 110.732092][ T2496] should_failslab+0x9/0x20 [ 110.736634][ T2496] slab_pre_alloc_hook+0x39/0xd0 [ 110.741613][ T2496] ? xas_create+0x568/0x1560 [ 110.746240][ T2496] kmem_cache_alloc+0x44/0x260 [ 110.751043][ T2496] xas_create+0x568/0x1560 [ 110.755499][ T2496] xas_store+0x91/0x17c0 [ 110.759787][ T2496] ? xas_start+0x2b4/0x3e0 [ 110.764244][ T2496] __add_to_page_cache_locked+0x405/0x880 [ 110.770004][ T2496] ? __alloc_pages_bulk+0xab0/0xab0 [ 110.775247][ T2496] ? put_page+0xb0/0xb0 [ 110.779429][ T2496] ? workingset_activation+0x400/0x400 [ 110.784920][ T2496] ? prep_new_page+0x110/0x110 [ 110.789720][ T2496] add_to_page_cache_lru+0xa7/0x210 [ 110.794946][ T2496] pagecache_get_page+0xb80/0xdd0 [ 110.799998][ T2496] ? page_cache_prev_miss+0x290/0x290 [ 110.805397][ T2496] ? _raw_spin_lock+0x94/0xf0 [ 110.810104][ T2496] ? _raw_spin_trylock_bh+0x150/0x150 [ 110.815508][ T2496] grab_cache_page_write_begin+0x59/0xb0 [ 110.821181][ T2496] cont_write_begin+0x578/0x7b0 [ 110.826060][ T2496] ? _raw_spin_trylock_bh+0x150/0x150 [ 110.831464][ T2496] ? generic_cont_expand_simple+0x1a0/0x1a0 [ 110.837381][ T2496] fat_write_begin+0xa0/0x170 [ 110.842070][ T2496] ? fat_block_truncate_page+0x50/0x50 [ 110.847566][ T2496] pagecache_write_begin+0x91/0xa0 [ 110.852700][ T2496] cont_write_begin+0x263/0x7b0 [ 110.857582][ T2496] ? generic_cont_expand_simple+0x1a0/0x1a0 [ 110.863498][ T2496] ? proc_fail_nth_write+0x180/0x200 [ 110.868806][ T2496] ? proc_fail_nth_read+0x220/0x220 [ 110.874052][ T2496] ? security_file_permission+0x79/0xa0 [ 110.879719][ T2496] fat_write_begin+0xa0/0x170 [ 110.884432][ T2496] ? fat_block_truncate_page+0x50/0x50 [ 110.889921][ T2496] pagecache_write_begin+0x91/0xa0 [ 110.895054][ T2496] generic_cont_expand_simple+0xf0/0x1a0 [ 110.900836][ T2496] ? submit_bh+0x40/0x40 [ 110.905122][ T2496] ? rwsem_write_trylock+0x136/0x300 [ 110.910513][ T2496] ? __mutex_lock_slowpath+0x10/0x10 [ 110.915825][ T2496] ? clear_nonspinnable+0x60/0x60 [ 110.921386][ T2496] ? avc_policy_seqno+0x1b/0x70 [ 110.926253][ T2496] fat_cont_expand+0x69/0x200 [ 110.930955][ T2496] fat_fallocate+0x262/0x320 [ 110.935566][ T2496] vfs_fallocate+0x4b9/0x590 [ 110.940182][ T2496] __x64_sys_fallocate+0xc0/0x110 [ 110.945223][ T2496] x64_sys_call+0x7ec/0x9a0 [ 110.949962][ T2496] do_syscall_64+0x4c/0xa0 [ 110.954418][ T2496] ? clear_bhb_loop+0x50/0xa0 [ 110.959136][ T2496] ? clear_bhb_loop+0x50/0xa0 [ 110.964211][ T2496] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.970357][ T2496] RIP: 0033:0x7f3da60d3e59 [ 110.974814][ T2496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.994460][ T2496] RSP: 002b:00007f3da4b2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 111.002944][ T2496] RAX: ffffffffffffffda RBX: 00007f3da634cfa0 RCX: 00007f3da60d3e59 [ 111.010946][ T2496] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 111.018930][ T2496] RBP: 00007f3da4b2e090 R08: 0000000000000000 R09: 0000000000000000 [ 111.026925][ T2496] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000001 [ 111.035016][ T2496] R13: 00007f3da634d038 R14: 00007f3da634cfa0 R15: 00007ffcb9669568 [ 111.043185][ T2496] [ 111.057215][ T26] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 111.111700][ T42] usb 1-1: USB disconnect, device number 15 [ 111.121174][ C0] usblp0: nonzero read bulk status received: -71 [ 111.142623][ T2500] kvm: pic: non byte write [ 111.147830][ T2500] FAULT_INJECTION: forcing a failure. [ 111.147830][ T2500] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.161057][ T2500] CPU: 0 PID: 2500 Comm: syz.1.731 Not tainted syzkaller #0 [ 111.168404][ T2500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 111.178520][ T2500] Call Trace: [ 111.181825][ T2500] [ 111.184787][ T2500] __dump_stack+0x21/0x30 [ 111.189180][ T2500] dump_stack_lvl+0x110/0x170 [ 111.193916][ T2500] ? show_regs_print_info+0x20/0x20 [ 111.199143][ T2500] dump_stack+0x15/0x20 [ 111.203323][ T2500] should_fail+0x3ab/0x500 [ 111.207767][ T2500] should_fail_usercopy+0x1a/0x20 [ 111.212820][ T2500] __kvm_write_guest_page+0x149/0x380 [ 111.218237][ T2500] kvm_vcpu_write_guest+0xa8/0x1b0 [ 111.223393][ T2500] write_emulate+0x32/0x80 [ 111.227860][ T2500] emulator_read_write_onepage+0x4a1/0x9c0 [ 111.227896][ T2503] FAULT_INJECTION: forcing a failure. [ 111.227896][ T2503] name failslab, interval 1, probability 0, space 0, times 0 [ 111.233704][ T2500] emulator_read_write+0x278/0x640 [ 111.233729][ T2500] emulator_write_emulated+0x3c/0x50 [ 111.233750][ T2500] writeback+0x5a4/0x8f0 [ 111.261097][ T2500] x86_emulate_insn+0x1a03/0x3710 [ 111.266177][ T2500] ? em_salc+0x10/0x10 [ 111.270293][ T2500] x86_emulate_instruction+0xa04/0x1fb0 [ 111.275883][ T2500] kvm_mmu_page_fault+0x4cb/0x650 [ 111.280950][ T2500] handle_ept_violation+0x2de/0x490 [ 111.286209][ T2500] ? handle_desc+0x70/0x70 [ 111.290646][ T2500] vmx_handle_exit+0xc1e/0x19f0 [ 111.295631][ T2500] ? apic_clear_irr+0x2fc/0x4e0 [ 111.300506][ T2500] ? vmx_flush_tlb_guest+0x3a0/0x3a0 [ 111.305812][ T2500] vcpu_enter_guest+0x4ec9/0x6600 [ 111.310876][ T2500] ? avc_has_perm+0x163/0x250 [ 111.315592][ T2500] ? local_bh_enable+0x30/0x30 [ 111.320401][ T2500] ? avc_has_perm_noaudit+0x490/0x490 [ 111.325907][ T2500] ? inode_doinit_with_dentry+0xf6/0xd90 [ 111.331569][ T2500] ? 0xffffffffa000c000 [ 111.335755][ T2500] ? is_bpf_text_address+0x177/0x190 [ 111.341111][ T2500] ? __kernel_text_address+0xa0/0x100 [ 111.346518][ T2500] ? unwind_get_return_address+0x4d/0x90 [ 111.352173][ T2500] ? stack_trace_save+0xf0/0xf0 [ 111.357146][ T2500] ? arch_stack_walk+0xee/0x140 [ 111.362044][ T2500] ? stack_trace_save+0xa6/0xf0 [ 111.366937][ T2500] ? __stack_depot_save+0x34/0x480 [ 111.372076][ T2500] ? path_openat+0x284f/0x2f80 [ 111.376890][ T2500] ? kasan_set_track+0x5b/0x70 [ 111.381691][ T2500] ? find_highest_vector+0x1d2/0x2f0 [ 111.387011][ T2500] ? __kasan_check_read+0x11/0x20 [ 111.392119][ T2500] ? __vmx_interrupt_blocked+0x197/0x1e0 [ 111.397814][ T2500] ? vmx_interrupt_blocked+0xc6/0x130 [ 111.403209][ T2500] ? vmx_check_nested_events+0x15ee/0x2380 [ 111.409046][ T2500] ? handle_ud+0x400/0x400 [ 111.413525][ T2500] ? handle_vmfunc+0xd10/0xd10 [ 111.418838][ T2500] kvm_arch_vcpu_ioctl_run+0xfa7/0x2020 [ 111.424435][ T2500] ? vfs_write+0xc72/0xfd0 [ 111.428960][ T2500] kvm_vcpu_ioctl+0x8ed/0xc00 [ 111.433662][ T2500] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 111.439323][ T2500] ? selinux_file_ioctl+0x3ad/0x4c0 [ 111.444547][ T2500] ? selinux_file_alloc_security+0x120/0x120 [ 111.450683][ T2500] ? mutex_unlock+0x8f/0x230 [ 111.455317][ T2500] ? __mutex_lock_slowpath+0x10/0x10 [ 111.460910][ T2500] ? __fget_files+0x2e1/0x340 [ 111.461289][ T26] usb 7-1: device descriptor read/64, error -71 [ 111.465638][ T2500] ? security_file_ioctl+0x84/0xa0 [ 111.465665][ T2500] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 111.482715][ T2500] __se_sys_ioctl+0x121/0x1a0 [ 111.487446][ T2500] __x64_sys_ioctl+0x7b/0x90 [ 111.492066][ T2500] x64_sys_call+0x2f/0x9a0 [ 111.496510][ T2500] do_syscall_64+0x4c/0xa0 [ 111.501033][ T2500] ? clear_bhb_loop+0x50/0xa0 [ 111.505840][ T2500] ? clear_bhb_loop+0x50/0xa0 [ 111.511117][ T2500] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.517053][ T2500] RIP: 0033:0x7f42baed6e59 [ 111.521512][ T2500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.541147][ T2500] RSP: 002b:00007f42b9931028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.549612][ T2500] RAX: ffffffffffffffda RBX: 00007f42bb14ffa0 RCX: 00007f42baed6e59 [ 111.557622][ T2500] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 111.563455][ T2466] usblp0: removed [ 111.565628][ T2500] RBP: 00007f42b9931090 R08: 0000000000000000 R09: 0000000000000000 [ 111.577263][ T2500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.585272][ T2500] R13: 00007f42bb150038 R14: 00007f42bb14ffa0 R15: 00007ffeb6c6a028 [ 111.593283][ T2500] [ 111.596346][ T2503] CPU: 1 PID: 2503 Comm: syz.4.729 Not tainted syzkaller #0 [ 111.603835][ T2503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 111.613917][ T2503] Call Trace: [ 111.617214][ T2503] [ 111.620166][ T2503] __dump_stack+0x21/0x30 [ 111.624516][ T2503] dump_stack_lvl+0x110/0x170 [ 111.629210][ T2503] ? show_regs_print_info+0x20/0x20 [ 111.634434][ T2503] ? ip6_route_output_flags_noref+0x29e/0x360 [ 111.640531][ T2503] dump_stack+0x15/0x20 [ 111.644706][ T2503] should_fail+0x3ab/0x500 [ 111.649145][ T2503] __should_failslab+0xa4/0xe0 [ 111.653921][ T2503] should_failslab+0x9/0x20 [ 111.658439][ T2503] slab_pre_alloc_hook+0x39/0xd0 [ 111.663401][ T2503] kmem_cache_alloc_trace+0x48/0x270 [ 111.668712][ T2503] ? ip6_setup_cork+0x1be/0x12a0 [ 111.673850][ T2503] ip6_setup_cork+0x1be/0x12a0 [ 111.678913][ T2503] ip6_append_data+0x205/0x330 [ 111.683719][ T2503] ? rawv6_send_hdrinc+0x10d0/0x10d0 [ 111.689054][ T2503] rawv6_sendmsg+0x11e3/0x16c0 [ 111.693837][ T2503] ? compat_rawv6_ioctl+0x10/0x10 [ 111.698969][ T2503] ? inode_doinit_with_dentry+0xf6/0xd90 [ 111.704620][ T2503] ? selinux_socket_sendmsg+0x22f/0x340 [ 111.710189][ T2503] ? unwind_get_return_address+0x4d/0x90 [ 111.715836][ T2503] ? stack_trace_save+0xf0/0xf0 [ 111.720706][ T2503] ? inet_send_prepare+0x60/0x4c0 [ 111.726094][ T2503] inet_sendmsg+0xa5/0xc0 [ 111.731031][ T2503] ? inet_send_prepare+0x4c0/0x4c0 [ 111.736512][ T2503] ____sys_sendmsg+0x5be/0x8f0 [ 111.741460][ T2503] ? __sys_sendmsg_sock+0x40/0x40 [ 111.746529][ T2503] ? import_iovec+0x7c/0xb0 [ 111.751054][ T2503] ___sys_sendmsg+0x236/0x2e0 [ 111.755758][ T2503] ? _kstrtoull+0x3bb/0x4c0 [ 111.760281][ T2503] ? __sys_sendmsg+0x280/0x280 [ 111.765070][ T2503] __sys_sendmmsg+0x2ba/0x4e0 [ 111.769767][ T2503] ? __ia32_sys_sendmsg+0x2d0/0x2d0 [ 111.774985][ T2503] ? __ia32_sys_read+0x90/0x90 [ 111.779857][ T2503] __x64_sys_sendmmsg+0xa0/0xb0 [ 111.784725][ T2503] x64_sys_call+0x6c6/0x9a0 [ 111.789269][ T2503] do_syscall_64+0x4c/0xa0 [ 111.793717][ T2503] ? clear_bhb_loop+0x50/0xa0 [ 111.798427][ T2503] ? clear_bhb_loop+0x50/0xa0 [ 111.803147][ T2503] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.809072][ T2503] RIP: 0033:0x7ff8a484de59 [ 111.813513][ T2503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.833489][ T2503] RSP: 002b:00007ff8a32a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 111.841934][ T2503] RAX: ffffffffffffffda RBX: 00007ff8a4ac6fa0 RCX: 00007ff8a484de59 [ 111.849929][ T2503] RDX: 0000000000000001 RSI: 0000200000003680 RDI: 0000000000000003 [ 111.857911][ T2503] RBP: 00007ff8a32a8090 R08: 0000000000000000 R09: 0000000000000000 [ 111.865898][ T2503] R10: 0000000000000044 R11: 0000000000000246 R12: 0000000000000001 [ 111.873882][ T2503] R13: 00007ff8a4ac7038 R14: 00007ff8a4ac6fa0 R15: 00007ffc1857db38 [ 111.881875][ T2503] [ 111.935823][ T2510] set_capacity_and_notify: 3 callbacks suppressed [ 111.935840][ T2510] loop1: detected capacity change from 0 to 512 [ 112.008593][ T2510] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 112.027155][ T2510] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.161128][ T26] usb 7-1: device descriptor read/64, error -71 [ 112.168551][ T2523] futex_wake_op: syz.2.736 tries to shift op by 144; fix this program [ 112.191032][ T374] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 112.241205][ T2525] loop1: detected capacity change from 0 to 256 [ 112.281280][ T2525] exfat: Bad value for 'gid' [ 112.431003][ T374] usb 5-1: Using ep0 maxpacket: 8 [ 112.441259][ T26] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 112.611009][ T374] usb 5-1: unable to get BOS descriptor or descriptor too short [ 112.711006][ T374] usb 5-1: config 2 has an invalid interface number: 176 but max is 0 [ 112.723633][ T374] usb 5-1: config 2 has no interface number 0 [ 112.736107][ T2527] loop0: detected capacity change from 0 to 40427 [ 112.742897][ T26] usb 7-1: device descriptor read/64, error -71 [ 112.749479][ T374] usb 5-1: config 2 interface 176 altsetting 30 endpoint 0xC has an invalid bInterval 221, changing to 11 [ 112.767298][ T374] usb 5-1: config 2 interface 176 has no altsetting 0 [ 112.823258][ T2527] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 112.831182][ T2527] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 112.840389][ T2527] F2FS-fs (loop0): invalid crc value [ 112.847416][ T2527] F2FS-fs (loop0): Found nat_bits in checkpoint [ 112.906576][ T2527] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 112.913851][ T2527] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 112.941088][ T374] usb 5-1: New USB device found, idVendor=05ac, idProduct=1402, bcdDevice=47.7d [ 112.950430][ T374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.958556][ T374] usb 5-1: Product: syz [ 112.962969][ T374] usb 5-1: Manufacturer: syz [ 112.967601][ T374] usb 5-1: SerialNumber: syz [ 113.011977][ T2539] netlink: 'syz.1.744': attribute type 6 has an invalid length. [ 113.105042][ T2549] loop1: detected capacity change from 0 to 512 [ 113.121931][ T2549] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 113.140981][ T26] usb 7-1: device descriptor read/64, error -71 [ 113.144980][ T2549] FAULT_INJECTION: forcing a failure. [ 113.144980][ T2549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.160943][ T2549] CPU: 0 PID: 2549 Comm: syz.1.747 Not tainted syzkaller #0 [ 113.168277][ T2549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 113.172091][ T2551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25872 sclass=netlink_route_socket pid=2551 comm=syz.0.743 [ 113.178362][ T2549] Call Trace: [ 113.178371][ T2549] [ 113.178379][ T2549] __dump_stack+0x21/0x30 [ 113.201570][ T2549] dump_stack_lvl+0x110/0x170 [ 113.206282][ T2549] ? show_regs_print_info+0x20/0x20 [ 113.211512][ T2549] dump_stack+0x15/0x20 [ 113.215698][ T2549] should_fail+0x3ab/0x500 [ 113.220137][ T2549] should_fail_usercopy+0x1a/0x20 [ 113.221164][ T42] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 113.225179][ T2549] strncpy_from_user+0x24/0x2d0 [ 113.225206][ T2549] ? kmem_cache_alloc+0xf7/0x260 [ 113.242558][ T2549] getname_flags+0xf5/0x510 [ 113.247119][ T2549] __x64_sys_mknodat+0x98/0xc0 [ 113.251947][ T2549] x64_sys_call+0x194/0x9a0 [ 113.256490][ T2549] do_syscall_64+0x4c/0xa0 [ 113.260953][ T2549] ? clear_bhb_loop+0x50/0xa0 [ 113.265660][ T2549] ? clear_bhb_loop+0x50/0xa0 [ 113.270342][ T2549] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.276235][ T2549] RIP: 0033:0x7f42baed6e59 [ 113.280653][ T2549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.300471][ T2549] RSP: 002b:00007f42b9931028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 113.309189][ T2549] RAX: ffffffffffffffda RBX: 00007f42bb14ffa0 RCX: 00007f42baed6e59 [ 113.317171][ T2549] RDX: 0000000000008000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 113.321377][ T26] usb usb7-port1: attempt power cycle [ 113.325151][ T2549] RBP: 00007f42b9931090 R08: 0000000000000000 R09: 0000000000000000 [ 113.325169][ T2549] R10: 0000000000010103 R11: 0000000000000246 R12: 0000000000000001 [ 113.325183][ T2549] R13: 00007f42bb150038 R14: 00007f42bb14ffa0 R15: 00007ffeb6c6a028 [ 113.354460][ T2549] [ 113.509543][ T2562] futex_wake_op: syz.0.750 tries to shift op by 144; fix this program [ 113.520979][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 113.660908][ T319] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 113.738834][ T2566] loop6: detected capacity change from 0 to 256 [ 113.762480][ T2566] exfat: Bad value for 'gid' [ 113.821200][ T42] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 113.830963][ T42] usb 3-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 113.839052][ T42] usb 3-1: Product: syz [ 113.843725][ T42] usb 3-1: Manufacturer: syz [ 113.848524][ T42] usb 3-1: SerialNumber: syz [ 113.900914][ T319] usb 2-1: Using ep0 maxpacket: 32 [ 113.916634][ T42] usb 3-1: config 0 descriptor?? [ 113.922664][ T374] asix: probe of 5-1:2.176 failed with error -22 [ 113.943313][ T374] usb 5-1: USB disconnect, device number 17 [ 113.991786][ T42] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 114.030863][ T319] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 114.050133][ T319] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 114.075540][ T319] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 114.091186][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.101111][ T319] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 114.111477][ T319] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 114.124699][ T319] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 114.133886][ T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.145919][ T319] usb 2-1: config 0 descriptor?? [ 114.186177][ T2568] loop4: detected capacity change from 0 to 40427 [ 114.197651][ T2535] loop2: detected capacity change from 0 to 512 [ 114.202482][ T2568] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 114.219358][ T2568] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 114.228553][ T2568] F2FS-fs (loop4): invalid crc value [ 114.236098][ T2568] F2FS-fs (loop4): Found nat_bits in checkpoint [ 114.274900][ T2568] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 114.282133][ T2568] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 114.373293][ T2571] usb 3-1: USB disconnect, device number 23 [ 114.423363][ T319] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 114.435919][ T30] audit: type=1400 audit(1782247949.228:329): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 114.480332][ T30] audit: type=1400 audit(1782247949.268:330): avc: denied { ioctl } for pid=2582 comm="syz.0.757" path="socket:[25166]" dev="sockfs" ino=25166 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.532180][ T2585] loop6: detected capacity change from 0 to 512 [ 114.540636][ T30] audit: type=1400 audit(1782247949.328:331): avc: denied { bind } for pid=2582 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.560946][ T2585] EXT4-fs (loop6): Ignoring removed oldalloc option [ 114.574726][ T2585] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 114.578106][ T30] audit: type=1400 audit(1782247949.328:332): avc: denied { setopt } for pid=2582 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.595285][ T2585] EXT4-fs (loop6): can't mount with commit=248, fs mounted w/o journal [ 114.633137][ T30] audit: type=1400 audit(1782247949.398:333): avc: denied { append } for pid=2582 comm="syz.0.757" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 114.719049][ T2331] usb 2-1: USB disconnect, device number 11 [ 114.725056][ C0] usblp0: nonzero read bulk status received: -71 [ 114.743595][ T2585] SELinux: failed to load policy [ 114.760798][ T30] audit: type=1400 audit(1782247949.538:334): avc: denied { load_policy } for pid=2584 comm="syz.6.758" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 114.786654][ T2602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.763'. [ 114.827373][ T2602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.763'. [ 114.919461][ T2556] usblp0: removed [ 114.970751][ T6] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 115.071218][ T2611] futex_wake_op: syz.2.764 tries to shift op by 144; fix this program [ 115.220703][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 115.340845][ T6] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 115.355528][ T6] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 115.383710][ T6] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 115.413400][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.486908][ T6] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 115.524485][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.618319][ T2613] SELinux: failed to load policy [ 115.840647][ T2609] loop6: detected capacity change from 0 to 40427 [ 115.909219][ T6] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 115.918387][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.931876][ T6] usb 5-1: config 0 descriptor?? [ 115.943829][ T2609] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 115.952164][ T2609] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 115.960984][ T2616] loop0: detected capacity change from 0 to 1024 [ 115.976794][ T2609] F2FS-fs (loop6): invalid crc value [ 115.987291][ T2609] F2FS-fs (loop6): Found nat_bits in checkpoint [ 116.026039][ T2616] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 2: comm syz.0.767: lblock 2 mapped to illegal pblock 2 (length 1) [ 116.050476][ T2609] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 116.057783][ T2609] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 116.066403][ T2616] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 116.099366][ T2616] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 48: comm syz.0.767: lblock 0 mapped to illegal pblock 48 (length 1) [ 116.118994][ T2616] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 116.127967][ T2616] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.767: Failed to acquire dquot type 0 [ 116.143475][ T2616] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 116.153845][ T2616] EXT4-fs error (device loop0): ext4_evict_inode:285: inode #11: comm syz.0.767: mark_inode_dirty error [ 116.165428][ T2616] EXT4-fs warning (device loop0): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 116.176851][ T2616] EXT4-fs (loop0): 1 orphan inode deleted [ 116.182992][ T2616] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 116.206295][ T6] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 116.207617][ T348] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.258198][ T348] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 116.275024][ T348] EXT4-fs error (device loop0): ext4_release_dquot:6263: comm kworker/u4:4: Failed to release dquot type 0 [ 116.312611][ T30] audit: type=1400 audit(1782247951.108:335): avc: denied { create } for pid=2615 comm="syz.0.767" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 116.346498][ T348] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.407198][ T2627] exfat: Bad value for 'gid' [ 116.431072][ T348] EXT4-fs error (device loop0): ext4_release_dquot:6263: comm kworker/u4:4: Failed to release dquot type 0 [ 116.468151][ T287] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 116.495618][ T287] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 116.506044][ T287] EXT4-fs error (device loop0): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error [ 116.531735][ T2629] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 116.546895][ T6] usb 5-1: USB disconnect, device number 18 [ 116.552914][ C0] usblp0: nonzero read bulk status received: -71 [ 116.579634][ T2629] EXT4-fs (loop1): Unrecognized mount option "hash" or missing value [ 116.639528][ T2631] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 2: comm syz.0.770: lblock 2 mapped to illegal pblock 2 (length 1) [ 116.725927][ T2635] netlink: 12 bytes leftover after parsing attributes in process `syz.6.769'. [ 116.735430][ T2631] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 48: comm syz.0.770: lblock 0 mapped to illegal pblock 48 (length 1) [ 116.749871][ T2595] usblp0: removed [ 116.754259][ T2631] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.770: Failed to acquire dquot type 0 [ 116.765701][ T2631] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 116.775384][ T2631] EXT4-fs error (device loop0): ext4_evict_inode:285: inode #11: comm syz.0.770: mark_inode_dirty error [ 116.786808][ T2631] EXT4-fs warning (device loop0): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 116.797183][ T2631] EXT4-fs (loop0): 1 orphan inode deleted [ 116.803259][ T2631] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 116.826142][ T487] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.840630][ T487] EXT4-fs error (device loop0): ext4_release_dquot:6263: comm kworker/u4:5: Failed to release dquot type 0 [ 116.869655][ T2634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.769'. [ 116.872966][ T2631] FAULT_INJECTION: forcing a failure. [ 116.872966][ T2631] name failslab, interval 1, probability 0, space 0, times 0 [ 116.891277][ T2631] CPU: 0 PID: 2631 Comm: syz.0.770 Not tainted syzkaller #0 [ 116.898591][ T2631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.908675][ T2631] Call Trace: [ 116.911990][ T2631] [ 116.914952][ T2631] __dump_stack+0x21/0x30 [ 116.919313][ T2631] dump_stack_lvl+0x110/0x170 [ 116.924032][ T2631] ? show_regs_print_info+0x20/0x20 [ 116.929267][ T2631] ? file_end_write+0x1b0/0x1b0 [ 116.934161][ T2631] dump_stack+0x15/0x20 [ 116.938353][ T2631] should_fail+0x3ab/0x500 [ 116.942805][ T2631] __should_failslab+0xa4/0xe0 [ 116.947621][ T2631] should_failslab+0x9/0x20 [ 116.952163][ T2631] slab_pre_alloc_hook+0x39/0xd0 [ 116.957140][ T2631] ? getname_flags+0xba/0x510 [ 116.961852][ T2631] kmem_cache_alloc+0x44/0x260 [ 116.966707][ T2631] getname_flags+0xba/0x510 [ 116.971237][ T2631] __x64_sys_mknodat+0x98/0xc0 [ 116.976036][ T2631] x64_sys_call+0x194/0x9a0 [ 116.980573][ T2631] do_syscall_64+0x4c/0xa0 [ 116.985022][ T2631] ? clear_bhb_loop+0x50/0xa0 [ 116.989737][ T2631] ? clear_bhb_loop+0x50/0xa0 [ 116.994451][ T2631] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.000381][ T2631] RIP: 0033:0x7fd5cef15e59 [ 117.004827][ T2631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.024464][ T2631] RSP: 002b:00007fd5cd970028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 117.032914][ T2631] RAX: ffffffffffffffda RBX: 00007fd5cf18efa0 RCX: 00007fd5cef15e59 [ 117.040918][ T2631] RDX: 0000000000001000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 117.048922][ T2631] RBP: 00007fd5cd970090 R08: 0000000000000000 R09: 0000000000000000 [ 117.056925][ T2631] R10: 00000000fffffff7 R11: 0000000000000246 R12: 0000000000000001 [ 117.064926][ T2631] R13: 00007fd5cf18f038 R14: 00007fd5cf18efa0 R15: 00007ffd1d3967d8 [ 117.072937][ T2631] [ 117.093799][ T287] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 117.117683][ T287] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 117.127365][ T374] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 117.135425][ T287] EXT4-fs error (device loop0): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error [ 117.149274][ T2641] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 117.168735][ T2641] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 117.178269][ T2641] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 117.186794][ T2641] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 117.195557][ T2641] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 117.204004][ T2641] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 117.212544][ T2641] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 117.230350][ T2641] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 117.239482][ T2641] pit: kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 117.248728][ T2641] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 117.510447][ T374] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 117.517811][ T374] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.530932][ T26] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 117.680386][ T319] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 117.690538][ T374] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 117.699675][ T374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.707787][ T374] usb 2-1: Product: syz [ 117.712024][ T374] usb 2-1: Manufacturer: syz [ 117.716679][ T374] usb 2-1: SerialNumber: syz [ 117.760992][ T374] rtl8150 2-1:1.0: couldn't find required endpoints [ 117.767672][ T374] rtl8150: probe of 2-1:1.0 failed with error -5 [ 117.774193][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 117.920401][ T319] usb 5-1: Using ep0 maxpacket: 32 [ 117.965026][ T6] usb 2-1: USB disconnect, device number 12 [ 118.040355][ T319] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 118.048899][ T319] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 118.057630][ T26] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 118.079538][ T2664] futex_wake_op: syz.6.778 tries to shift op by 144; fix this program [ 118.088906][ T26] usb 3-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 118.097027][ T319] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 118.106295][ T26] usb 3-1: Product: syz [ 118.111113][ T26] usb 3-1: Manufacturer: syz [ 118.115754][ T26] usb 3-1: SerialNumber: syz [ 118.121111][ T319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 118.132473][ T26] usb 3-1: config 0 descriptor?? [ 118.137512][ T319] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 118.147484][ T319] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 118.161227][ T319] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 118.170670][ T319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.183310][ T26] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 118.191040][ T319] usb 5-1: config 0 descriptor?? [ 118.314569][ T2666] set_capacity_and_notify: 4 callbacks suppressed [ 118.314588][ T2666] loop0: detected capacity change from 0 to 40427 [ 118.340881][ T2666] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 118.351963][ T2666] F2FS-fs (loop0): invalid crc value [ 118.357570][ T2666] F2FS-fs (loop0): invalid crc value [ 118.363065][ T2666] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 118.380275][ T6] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 118.390311][ T2648] loop2: detected capacity change from 0 to 512 [ 118.451092][ T319] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 118.531161][ T319] usb 3-1: USB disconnect, device number 24 [ 118.552787][ T2666] loop0: detected capacity change from 0 to 512 [ 118.580836][ T2666] EXT4-fs (loop0): Value of option "test_dummy_encryption=discard" is unrecognized [ 118.630412][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 118.686959][ T2331] usb 5-1: USB disconnect, device number 19 [ 118.690287][ C1] usblp0: nonzero read bulk status received: -71 [ 118.750302][ T6] usb 2-1: config 1 interface 0 altsetting 132 bulk endpoint 0x1 has invalid maxpacket 1023 [ 118.760735][ T6] usb 2-1: config 1 interface 0 altsetting 132 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.773839][ T6] usb 2-1: config 1 interface 0 has no altsetting 0 [ 118.887146][ T2651] usblp0: removed [ 118.940267][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 118.949413][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.957455][ T6] usb 2-1: Product: syz [ 118.961690][ T6] usb 2-1: Manufacturer: syz [ 118.966315][ T6] usb 2-1: SerialNumber: syz [ 118.990289][ T2662] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 119.045892][ T2678] loop2: detected capacity change from 0 to 1024 [ 119.070286][ T319] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 119.082180][ T2678] EXT4-fs (loop2): test_dummy_encryption requires encrypt feature [ 119.212670][ T2662] loop1: detected capacity change from 0 to 512 [ 119.261663][ T2662] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 119.269997][ T2662] EXT4-fs (loop1): orphan cleanup on readonly fs [ 119.276626][ T2662] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 119.285386][ T2662] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.780: attempt to clear invalid blocks 2 len 1 [ 119.298744][ T2662] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 119.313913][ T2662] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.780: invalid indirect mapped block 1819239214 (level 0) [ 119.320484][ T319] usb 7-1: Using ep0 maxpacket: 8 [ 119.329409][ T2662] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.780: invalid indirect mapped block 1819239214 (level 1) [ 119.347461][ T2662] EXT4-fs (loop1): 1 truncate cleaned up [ 119.353384][ T2662] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 119.372823][ T333] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 119.450237][ T319] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.453988][ T6] usb 2-1: USB disconnect, device number 13 [ 119.488887][ T319] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 119.507981][ T319] usb 7-1: config 0 interface 0 has no altsetting 0 [ 119.516176][ T319] usb 7-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 119.526537][ T319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.544128][ T2683] loop4: detected capacity change from 0 to 256 [ 119.555183][ T319] usb 7-1: config 0 descriptor?? [ 119.565091][ T2683] exfat: Bad value for 'gid' [ 119.740151][ T333] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 119.750478][ T333] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 119.759549][ T333] usb 3-1: config 220 interface 0 has no altsetting 0 [ 119.862978][ T319] wacom 0003:056A:0315.0004: ignoring exceeding usage max [ 119.872271][ T319] wacom 0003:056A:0315.0004: unknown main item tag 0x0 [ 119.879264][ T319] wacom 0003:056A:0315.0004: unknown main item tag 0x0 [ 119.886472][ T319] wacom 0003:056A:0315.0004: unknown main item tag 0x0 [ 119.893429][ T319] wacom 0003:056A:0315.0004: unknown main item tag 0x0 [ 119.900437][ T319] wacom 0003:056A:0315.0004: unknown main item tag 0x0 [ 119.907338][ T319] wacom 0003:056A:0315.0004: unknown main item tag 0x0 [ 119.914539][ T319] wacom 0003:056A:0315.0004: unknown main item tag 0x0 [ 119.921765][ T319] wacom 0003:056A:0315.0004: unknown main item tag 0x0 [ 119.930981][ T319] wacom 0003:056A:0315.0004: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 119.941420][ T319] wacom 0003:056A:0315.0004: hidraw0: USB HID v0.03 Device [HID 056a:0315] on usb-dummy_hcd.6-1/input0 [ 119.953204][ T319] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0315.0004/input/input15 [ 119.960750][ T333] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 119.974707][ T333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.982896][ T333] usb 3-1: Product: syz [ 119.987139][ T333] usb 3-1: Manufacturer: syz [ 120.000666][ T2685] loop1: detected capacity change from 0 to 16 [ 120.007546][ T333] usb 3-1: SerialNumber: syz [ 120.020654][ T2685] erofs: dax options not supported [ 120.060681][ T2686] UDC core: couldn't find an available UDC or it's busy: -16 [ 120.068701][ T2686] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 120.087390][ T2331] usb 7-1: USB disconnect, device number 7 [ 120.100409][ T2685] binder: 2684:2685 ioctl c0306201 200000000040 returned -22 [ 120.124259][ T2689] loop1: detected capacity change from 0 to 512 [ 120.131703][ T2689] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 120.140847][ T2689] EXT4-fs (loop1): orphan cleanup on readonly fs [ 120.147333][ T2689] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 120.156227][ T2689] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.787: attempt to clear invalid blocks 2 len 1 [ 120.169345][ T2689] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 120.184118][ T2689] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.787: invalid indirect mapped block 1819239214 (level 0) [ 120.198489][ T2689] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.787: invalid indirect mapped block 1819239214 (level 1) [ 120.213046][ T2689] EXT4-fs (loop1): 1 truncate cleaned up [ 120.218816][ T2689] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 120.251381][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 120.251397][ T30] audit: type=1400 audit(1782247955.038:338): avc: denied { create } for pid=2677 comm="syz.2.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 120.353048][ T2701] xt_hashlimit: size too large, truncated to 1048576 [ 120.370305][ T333] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 120.377641][ T333] usb 3-1: No valid video chain found. [ 120.407575][ T333] usb 3-1: USB disconnect, device number 25 [ 120.635236][ T2716] netlink: 'syz.6.794': attribute type 7 has an invalid length. [ 120.643307][ T2716] netlink: 20 bytes leftover after parsing attributes in process `syz.6.794'. [ 120.680546][ T2719] futex_wake_op: syz.4.793 tries to shift op by 144; fix this program [ 120.695051][ T2718] loop6: detected capacity change from 0 to 4096 [ 120.741942][ T2718] EXT4-fs (loop6): dax option not supported [ 120.771375][ T30] audit: type=1400 audit(1782247955.558:339): avc: denied { read write } for pid=2720 comm="syz.2.797" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 120.772893][ T2718] input: syz1 as /devices/virtual/input/input18 [ 120.798737][ T30] audit: type=1400 audit(1782247955.588:340): avc: denied { open } for pid=2720 comm="syz.2.797" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 120.830272][ T2718] input: failed to attach handler leds to device input18, error: -6 [ 120.832475][ T374] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.848324][ T30] audit: type=1400 audit(1782247955.628:341): avc: denied { map } for pid=2720 comm="syz.2.797" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 120.872556][ T374] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 120.889969][ T333] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 121.130031][ T333] usb 2-1: Using ep0 maxpacket: 32 [ 121.140010][ T2331] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 121.148257][ T2728] loop2: detected capacity change from 0 to 256 [ 121.190522][ T2728] exfat: Bad value for 'gid' [ 121.250130][ T333] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 121.258785][ T333] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 121.267565][ T333] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 121.277414][ T333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 121.287542][ T333] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 121.297398][ T333] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 121.310686][ T333] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 121.319844][ T333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.331513][ T333] usb 2-1: config 0 descriptor?? [ 121.510101][ T2331] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 121.520653][ T2331] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.600140][ T2331] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 121.609463][ T2331] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.618605][ T2331] usb 7-1: SerialNumber: syz [ 121.620072][ T2732] EXT4-fs (loop4): Invalid want_extra_isize 9 [ 121.724808][ T2737] FAULT_INJECTION: forcing a failure. [ 121.724808][ T2737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.738286][ T2737] CPU: 1 PID: 2737 Comm: syz.4.801 Not tainted syzkaller #0 [ 121.745603][ T2737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.755700][ T2737] Call Trace: [ 121.758976][ T2737] [ 121.761917][ T2737] __dump_stack+0x21/0x30 [ 121.766293][ T2737] dump_stack_lvl+0x110/0x170 [ 121.770983][ T2737] ? show_regs_print_info+0x20/0x20 [ 121.776186][ T2737] dump_stack+0x15/0x20 [ 121.780345][ T2737] should_fail+0x3ab/0x500 [ 121.784758][ T2737] should_fail_usercopy+0x1a/0x20 [ 121.789772][ T2737] _copy_from_user+0x20/0xd0 [ 121.794366][ T2737] __se_sys_mount+0x176/0x390 [ 121.799046][ T2737] ? release_firmware_map_entry+0x190/0x190 [ 121.804958][ T2737] ? __x64_sys_mount+0xd0/0xd0 [ 121.809716][ T2737] ? __kasan_check_write+0x14/0x20 [ 121.814845][ T2737] __x64_sys_mount+0xbf/0xd0 [ 121.819451][ T2737] x64_sys_call+0x6bf/0x9a0 [ 121.823962][ T2737] do_syscall_64+0x4c/0xa0 [ 121.828404][ T2737] ? clear_bhb_loop+0x50/0xa0 [ 121.833110][ T2737] ? clear_bhb_loop+0x50/0xa0 [ 121.833307][ T333] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 121.837835][ T2737] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.854442][ T2737] RIP: 0033:0x7ff8a484de59 [ 121.854943][ T333] usb 2-1: USB disconnect, device number 14 [ 121.858878][ T2737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.884498][ T2737] RSP: 002b:00007ff8a32a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 121.892954][ T2737] RAX: ffffffffffffffda RBX: 00007ff8a4ac6fa0 RCX: 00007ff8a484de59 [ 121.900964][ T2737] RDX: 0000200000001200 RSI: 0000200000000000 RDI: 0000000000000000 [ 121.908964][ T2737] RBP: 00007ff8a32a8090 R08: 0000200000001240 R09: 0000000000000000 [ 121.916961][ T2737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.918876][ T333] usblp0: removed [ 121.924967][ T2737] R13: 00007ff8a4ac7038 R14: 00007ff8a4ac6fa0 R15: 00007ffc1857db38 [ 121.924992][ T2737] [ 122.063025][ T30] audit: type=1400 audit(1782247956.849:342): avc: denied { mount } for pid=2717 comm="syz.6.796" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 122.139841][ T30] audit: type=1400 audit(1782247956.899:343): avc: denied { sys_admin } for pid=2741 comm="syz.0.803" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 122.152514][ T2331] usb 7-1: 0:2 : does not exist [ 122.176996][ T2331] usb 7-1: USB disconnect, device number 8 [ 122.197265][ T477] udevd[477]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 122.221717][ T30] audit: type=1400 audit(1782247956.979:344): avc: denied { unmount } for pid=2244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 122.287418][ T30] audit: type=1400 audit(1782247957.069:345): avc: denied { write } for pid=2748 comm="syz.6.805" name="usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 122.332274][ T2749] create_pit_timer: 35 callbacks suppressed [ 122.332294][ T2749] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 122.357665][ T30] audit: type=1400 audit(1782247957.139:346): avc: denied { map } for pid=2748 comm="syz.6.805" path="socket:[26434]" dev="sockfs" ino=26434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.384240][ T30] audit: type=1400 audit(1782247957.169:347): avc: denied { read accept } for pid=2748 comm="syz.6.805" path="socket:[26434]" dev="sockfs" ino=26434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.499795][ T6] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 122.519851][ T20] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 122.540825][ T2758] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 122.551097][ T2758] EXT4-fs (loop6): Test dummy encryption mode enabled [ 122.558887][ T2758] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 122.567382][ T2758] System zones: 0-5 [ 122.594795][ T2758] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 122.739802][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 122.769788][ T20] usb 3-1: Using ep0 maxpacket: 32 [ 122.859795][ T6] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 122.868623][ T6] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 122.877485][ T6] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 122.888866][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.899581][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.910798][ T6] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 122.927447][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.945044][ T2776] FAULT_INJECTION: forcing a failure. [ 122.945044][ T2776] name failslab, interval 1, probability 0, space 0, times 0 [ 122.957920][ T2776] CPU: 1 PID: 2776 Comm: syz.4.814 Not tainted syzkaller #0 [ 122.965248][ T2776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 122.975334][ T2776] Call Trace: [ 122.978644][ T2776] [ 122.981602][ T2776] __dump_stack+0x21/0x30 [ 122.985962][ T2776] dump_stack_lvl+0x110/0x170 [ 122.990667][ T2776] ? show_regs_print_info+0x20/0x20 [ 122.995912][ T2776] ? release_firmware_map_entry+0x190/0x190 [ 123.001832][ T2776] dump_stack+0x15/0x20 [ 123.006013][ T2776] should_fail+0x3ab/0x500 [ 123.010462][ T2776] __should_failslab+0xa4/0xe0 [ 123.015263][ T2776] should_failslab+0x9/0x20 [ 123.019787][ T2776] slab_pre_alloc_hook+0x39/0xd0 [ 123.024752][ T2776] ? __alloc_file+0x28/0x2a0 [ 123.029380][ T2776] kmem_cache_alloc+0x44/0x260 [ 123.034168][ T2776] ? irqentry_exit+0x37/0x40 [ 123.038781][ T2776] __alloc_file+0x28/0x2a0 [ 123.043221][ T2776] alloc_empty_file+0x97/0x180 [ 123.048019][ T2776] path_openat+0xf4/0x2f80 [ 123.052460][ T2776] ? compat_start_thread+0x20/0x20 [ 123.057594][ T2776] ? plist_del+0x3ec/0x400 [ 123.062038][ T2776] ? _raw_spin_unlock+0x4d/0x70 [ 123.066920][ T2776] ? finish_task_switch+0x16b/0x790 [ 123.072147][ T2776] ? switch_mm_irqs_off+0x730/0x960 [ 123.077369][ T2776] ? __schedule+0xbd7/0x14a0 [ 123.081982][ T2776] ? do_filp_open+0x400/0x400 [ 123.086709][ T2776] do_filp_open+0x1df/0x400 [ 123.091248][ T2776] ? vfs_tmpfile+0x2d0/0x2d0 [ 123.095874][ T2776] do_sys_openat2+0x15e/0x7f0 [ 123.100589][ T2776] ? __schedule+0xbd7/0x14a0 [ 123.105204][ T2776] ? do_sys_open+0xe0/0xe0 [ 123.109650][ T2776] ? release_firmware_map_entry+0x190/0x190 [ 123.115568][ T2776] ? ksys_write+0x1fa/0x260 [ 123.120098][ T2776] __x64_sys_openat+0x136/0x160 [ 123.124969][ T2776] x64_sys_call+0x219/0x9a0 [ 123.129495][ T2776] do_syscall_64+0x4c/0xa0 [ 123.133948][ T2776] ? clear_bhb_loop+0x50/0xa0 [ 123.138675][ T2776] ? clear_bhb_loop+0x50/0xa0 [ 123.143379][ T2776] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.149301][ T2776] RIP: 0033:0x7ff8a480e68e [ 123.153737][ T2776] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 123.173367][ T2776] RSP: 002b:00007ff8a3265ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 123.181819][ T2776] RAX: ffffffffffffffda RBX: 00007ff8a32666c0 RCX: 00007ff8a480e68e [ 123.189811][ T2776] RDX: 0000000000000002 RSI: 00007ff8a3265f90 RDI: ffffffffffffff9c [ 123.197806][ T2776] RBP: 00007ff8a3266090 R08: 0000000000000000 R09: 0000000000000000 [ 123.205804][ T2776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.213815][ T2776] R13: 00007ff8a4ac7218 R14: 00007ff8a4ac7180 R15: 00007ffc1857db38 [ 123.222247][ T2776] [ 123.330013][ T2775] exfat: Bad value for 'gid' [ 123.336409][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 123.351249][ T20] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 123.360903][ T6] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 123.371984][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.381876][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.515942][ T20] usb 3-1: config 0 descriptor?? [ 123.628449][ T6] usb 1-1: config 0 descriptor?? [ 123.628634][ T20] hub 3-1:0.0: USB hub found [ 123.869706][ T20] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 124.252284][ T6] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 124.269409][ T6] usb 1-1: USB disconnect, device number 16 [ 124.275570][ T319] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 124.278669][ T6] usblp0: removed [ 124.298813][ T2746] set_capacity_and_notify: 4 callbacks suppressed [ 124.298830][ T2746] loop2: detected capacity change from 0 to 8192 [ 124.330178][ T356] loop2: p1 p2 < > p3 p4 [ 124.348636][ T356] loop2: partition table partially beyond EOD, truncated [ 124.357249][ T356] loop2: p1 size 1342439424 extends beyond EOD, truncated [ 124.367152][ T356] loop2: p2 start 4059840512 is beyond EOD, truncated [ 124.376096][ T356] loop2: p3 start 67108864 is beyond EOD, truncated [ 124.384937][ T2746] loop2: p1 p2 < > p3 p4 [ 124.389981][ T2746] loop2: partition table partially beyond EOD, truncated [ 124.396013][ T2802] SELinux: failed to load policy [ 124.403323][ T2746] loop2: p1 size 1342439424 extends beyond EOD, truncated [ 124.413983][ T2799] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.421401][ T2799] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.421585][ T2746] loop2: p2 start 4059840512 is beyond EOD, [ 124.428914][ T2799] device bridge_slave_0 entered promiscuous mode [ 124.432056][ T2746] truncated [ 124.437521][ T2799] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.451549][ T2799] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.459052][ T2799] device bridge_slave_1 entered promiscuous mode [ 124.465768][ T2746] loop2: p3 start 67108864 is beyond EOD, truncated [ 124.534127][ T477] udevd[477]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 124.546639][ T2799] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.546651][ T356] udevd[356]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 124.560120][ T319] usb 2-1: Using ep0 maxpacket: 16 [ 124.563502][ T2799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.575875][ T2799] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.578626][ T356] udevd[356]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 124.582985][ T2799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.602134][ T477] udevd[477]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 124.619237][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.619978][ T20] usbhid 3-1:0.0: can't add hid device: -71 [ 124.632968][ T20] usbhid: probe of 3-1:0.0 failed with error -71 [ 124.633097][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.651315][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.662371][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.670979][ T20] usb 3-1: USB disconnect, device number 26 [ 124.674826][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.683992][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.695863][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.704715][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.711837][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.719768][ T319] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.731352][ T319] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.747357][ T319] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.754367][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.762204][ T319] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 124.769298][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.771317][ T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.788866][ T319] usb 2-1: config 0 descriptor?? [ 124.799652][ T374] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 124.807656][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.818852][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.827095][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.835751][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.843744][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.852131][ T2799] device veth0_vlan entered promiscuous mode [ 124.866553][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.874855][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.884318][ T2799] device veth1_macvtap entered promiscuous mode [ 124.896874][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.904598][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.912934][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.922599][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.930968][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.966747][ T2811] loop7: detected capacity change from 0 to 1024 [ 125.031098][ T2811] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,discard,barrier=0x000000002cb525b5,norecovery,noload,grpjquota=,noauto_da_alloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none. [ 125.060379][ T374] usb 5-1: Using ep0 maxpacket: 32 [ 125.126568][ T2817] loop2: detected capacity change from 0 to 256 [ 125.150176][ T2817] exfat: Bad value for 'gid' [ 125.199670][ T374] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 125.218723][ T374] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 125.247716][ T374] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 125.263956][ T374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 125.274471][ T374] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 125.284529][ T374] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 125.297725][ T374] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 125.306895][ T374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.316937][ T487] device bridge_slave_1 left promiscuous mode [ 125.324403][ T487] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.330481][ T374] usb 5-1: config 0 descriptor?? [ 125.338272][ T487] device bridge_slave_0 left promiscuous mode [ 125.371154][ T487] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.409439][ T487] device veth1_macvtap left promiscuous mode [ 125.415940][ T487] device veth0_vlan left promiscuous mode [ 125.670197][ T1524] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 125.852624][ T374] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 125.898580][ T374] usb 5-1: USB disconnect, device number 20 [ 125.914629][ T374] usblp0: removed [ 125.998645][ T2832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2832 comm=syz.2.831 [ 126.016863][ T2832] loop2: detected capacity change from 0 to 1024 [ 126.049689][ T1524] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.062823][ T1524] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 126.085631][ T30] audit: type=1400 audit(1782248216.877:348): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 126.122371][ T2835] loop2: detected capacity change from 0 to 1024 [ 126.180670][ T2835] EXT4-fs (loop2): test_dummy_encryption requires encrypt feature [ 126.220967][ T2835] capability: warning: `syz.2.832' uses 32-bit capabilities (legacy support in use) [ 126.239807][ T1524] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.248970][ T1524] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.257096][ T1524] usb 8-1: Product: syz [ 126.261810][ T1524] usb 8-1: Manufacturer: syz [ 126.266441][ T1524] usb 8-1: SerialNumber: syz [ 126.499838][ T30] audit: type=1400 audit(1782248217.297:349): avc: denied { ioctl } for pid=2844 comm="syz.0.836" path="/dev/fuse" dev="devtmpfs" ino=91 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 126.599993][ T2850] kvm: pic: non byte write [ 126.621273][ T30] audit: type=1400 audit(1782248217.417:350): avc: denied { accept } for pid=2852 comm="syz.2.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.650541][ T26] kernel write not supported for file /358/oom_adj (pid: 26 comm: kworker/1:0) [ 126.879680][ T319] usbhid 2-1:0.0: can't add hid device: -71 [ 126.934751][ T319] usbhid: probe of 2-1:0.0 failed with error -71 [ 126.949646][ T20] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 126.986976][ T319] usb 2-1: USB disconnect, device number 15 [ 127.040649][ T2864] loop1: detected capacity change from 0 to 256 [ 127.063092][ T2864] exfat: Unknown parameter '' [ 127.199654][ T20] usb 3-1: Using ep0 maxpacket: 32 [ 127.280310][ T30] audit: type=1400 audit(1782248218.077:351): avc: denied { create } for pid=2867 comm="syz.1.843" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 127.301124][ T30] audit: type=1400 audit(1782248218.077:352): avc: denied { read } for pid=2867 comm="syz.1.843" name="file0" dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 127.323520][ T20] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 127.329908][ T30] audit: type=1400 audit(1782248218.077:353): avc: denied { watch } for pid=2867 comm="syz.1.843" path="/180/file0" dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 127.333732][ T20] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 127.356681][ T30] audit: type=1400 audit(1782248218.077:354): avc: denied { setattr } for pid=2867 comm="syz.1.843" name="file0" dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 127.363578][ T20] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 127.394934][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 127.404635][ T20] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 127.414349][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 127.427353][ T20] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 127.436421][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.445436][ T20] usb 3-1: config 0 descriptor?? [ 127.621990][ T2872] loop4: detected capacity change from 0 to 40427 [ 127.702302][ T2872] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 127.710488][ T20] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 127.726694][ T2872] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 127.737484][ T2872] F2FS-fs (loop4): fault_type options not supported [ 127.749741][ T2872] F2FS-fs (loop4): invalid crc value [ 127.758030][ T2872] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 127.783131][ T2872] F2FS-fs (loop4): Start checkpoint disabled! [ 127.790223][ T2872] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 127.797350][ T2872] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 127.808168][ T374] usb 3-1: USB disconnect, device number 27 [ 127.809695][ C0] usblp0: nonzero read bulk status received: -71 [ 128.008469][ T2856] usblp0: removed [ 128.030018][ T2879] netlink: 44 bytes leftover after parsing attributes in process `syz.4.846'. [ 128.035313][ T30] audit: type=1400 audit(1782248218.827:355): avc: denied { unlink } for pid=286 comm="syz-executor" name="file0" dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 128.064923][ T2879] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.154117][ T2889] loop1: detected capacity change from 0 to 128 [ 128.296355][ T2893] loop1: detected capacity change from 0 to 256 [ 128.349915][ T2893] exfat: Bad value for 'gid' [ 128.599732][ T1524] usb 8-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 128.659748][ T1524] usb 8-1: failed to enable PITCH for EP 0x8 [ 128.679659][ T1524] usb 8-1: 0:2 : does not exist [ 128.708117][ T1524] usb 8-1: USB disconnect, device number 2 [ 128.803740][ T2901] loop7: detected capacity change from 0 to 40427 [ 128.822432][ T2901] F2FS-fs (loop7): fault_injection options not supported [ 128.829895][ T2901] F2FS-fs (loop7): fault_type options not supported [ 128.837360][ T2901] F2FS-fs (loop7): invalid crc value [ 128.844422][ T2901] F2FS-fs (loop7): Found nat_bits in checkpoint [ 128.849966][ T374] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 128.889386][ T2901] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 128.909954][ T30] audit: type=1400 audit(1782248219.707:356): avc: denied { setopt } for pid=2900 comm="syz.7.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.934301][ T2903] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 128.943904][ T2901] overlayfs: conflicting lowerdir path [ 128.948069][ T2903] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 128.966245][ T2799] attempt to access beyond end of device [ 128.966245][ T2799] loop7: rw=2049, want=45104, limit=40427 [ 129.060889][ T30] audit: type=1400 audit(1782248219.857:357): avc: denied { connect } for pid=2909 comm="syz.4.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.146691][ T2914] FAT-fs (loop7): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 129.169696][ T374] usb 3-1: Using ep0 maxpacket: 32 [ 129.349938][ T374] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 129.368586][ T374] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 129.393493][ T2918] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 129.408820][ T374] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 129.420278][ T2918] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.431862][ T374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.442723][ T374] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 129.576133][ T374] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 129.590151][ T374] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 129.599278][ T374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.608344][ T374] usb 3-1: config 0 descriptor?? [ 129.618480][ T2926] set_capacity_and_notify: 2 callbacks suppressed [ 129.618492][ T2926] loop0: detected capacity change from 0 to 128 [ 129.712190][ T2928] loop1: detected capacity change from 0 to 256 [ 129.728363][ T2926] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.740449][ T2926] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.760291][ T2928] exfat: Bad value for 'gid' [ 129.990558][ T2933] loop7: detected capacity change from 0 to 1024 [ 130.039778][ T2933] EXT4-fs (loop7): Ignoring removed bh option [ 130.072133][ T2933] EXT4-fs error (device loop7): ext4_map_blocks:632: inode #3: block 2: comm syz.7.861: lblock 2 mapped to illegal pblock 2 (length 1) [ 130.106529][ T2933] EXT4-fs error (device loop7): __ext4_get_inode_loc:4365: comm syz.7.861: Invalid inode table block 1 in block_group 0 [ 130.120882][ T374] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 130.140492][ T374] usb 3-1: USB disconnect, device number 28 [ 130.146861][ T2933] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 130.174146][ T374] usblp0: removed [ 130.190273][ T2933] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #3: comm syz.7.861: mark_inode_dirty error [ 130.201754][ T2933] EXT4-fs error (device loop7): ext4_acquire_dquot:6227: comm syz.7.861: Failed to acquire dquot type 0 [ 130.214187][ T2933] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 130.224416][ T2933] EXT4-fs error (device loop7): ext4_evict_inode:285: inode #11: comm syz.7.861: mark_inode_dirty error [ 130.240113][ T2943] loop0: detected capacity change from 0 to 1024 [ 130.246654][ T2933] EXT4-fs warning (device loop7): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 130.269128][ T2943] EXT4-fs (loop0): Ignoring removed oldalloc option [ 130.280660][ T2933] EXT4-fs (loop7): 1 orphan inode deleted [ 130.286482][ T2933] EXT4-fs (loop7): mounted filesystem without journal. Opts: inlinecrypt,noblock_validity,bh,max_batch_time=0x00000000000008c9,inlinecrypt,inlinecrypt,,errors=continue. Quota mode: none. [ 130.305310][ T487] EXT4-fs error (device loop7): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 130.330610][ T2943] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,nodioread_nolock,sb=0x00000000000007ff,nouid32,barrier,grpjquota=,noquota,,errors=continue. Quota mode: none. [ 130.357441][ T487] EXT4-fs error (device loop7): ext4_release_dquot:6263: comm kworker/u4:5: Failed to release dquot type 0 [ 130.369348][ T2943] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.400333][ T2943] EXT4-fs error (device loop0): ext4_map_blocks:742: inode #15: block 3: comm syz.0.865: lblock 3 mapped to illegal pblock 3 (length 3) [ 130.453645][ T2943] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 130.476461][ T2949] xt_hashlimit: size too large, truncated to 1048576 [ 130.484797][ T2799] EXT4-fs error (device loop7): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 130.507975][ T2799] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 130.534975][ T2943] EXT4-fs (loop0): This should not happen!! Data will be lost [ 130.534975][ T2943] [ 130.551379][ T2799] EXT4-fs error (device loop7): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error [ 130.565200][ T2951] loop1: detected capacity change from 0 to 256 [ 130.586527][ T10] EXT4-fs error (device loop0): ext4_map_blocks:742: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 130.623831][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 130.653717][ T10] EXT4-fs (loop0): This should not happen!! Data will be lost [ 130.653717][ T10] [ 130.681942][ T2953] loop7: detected capacity change from 0 to 4096 [ 130.686246][ T2951] FAT-fs (loop1): Directory bread(block 64) failed [ 130.704891][ T2951] FAT-fs (loop1): Directory bread(block 65) failed [ 130.712812][ T2953] EXT4-fs (loop7): Invalid log cluster size: 117440518 [ 130.725454][ T2951] FAT-fs (loop1): Directory bread(block 66) failed [ 130.751053][ T2951] FAT-fs (loop1): Directory bread(block 67) failed [ 130.773041][ T2951] FAT-fs (loop1): Directory bread(block 68) failed [ 130.791949][ T2951] FAT-fs (loop1): Directory bread(block 69) failed [ 130.810310][ T2951] FAT-fs (loop1): Directory bread(block 70) failed [ 130.828794][ T2951] FAT-fs (loop1): Directory bread(block 71) failed [ 130.853094][ T2938] loop4: detected capacity change from 0 to 131072 [ 130.869760][ T2951] FAT-fs (loop1): Directory bread(block 72) failed [ 130.880158][ T2938] F2FS-fs (loop4): invalid crc value [ 130.898687][ T2951] FAT-fs (loop1): Directory bread(block 73) failed [ 130.914174][ T2938] F2FS-fs (loop4): Found nat_bits in checkpoint [ 130.918189][ T2962] page size migration: [2962 (syz.0.868)] madvise_vma_pad_pages:289: Invalid attempt to madvise padding on MAP_SHARED vma [ 130.980507][ T2938] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 130.990153][ T2955] loop0: detected capacity change from 0 to 512 [ 131.006146][ T2938] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 131.061321][ T2955] EXT4-fs (loop0): Ignoring removed orlov option [ 131.120901][ T2955] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,orlov,,errors=continue. Quota mode: writeback. [ 131.180788][ T2955] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #12: comm syz.0.868: checksumming directory block 0 [ 131.356827][ T2964] loop7: detected capacity change from 0 to 40427 [ 131.386520][ T2964] F2FS-fs (loop7): invalid crc value [ 131.406598][ T2969] loop0: detected capacity change from 0 to 256 [ 131.434093][ T2969] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 131.448982][ T2964] F2FS-fs (loop7): Found nat_bits in checkpoint [ 131.529059][ T2964] F2FS-fs (loop7): Start checkpoint disabled! [ 131.561126][ T2964] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 131.660013][ T2978] exfat: Bad value for 'uid' [ 131.776115][ T2983] exfat: Deprecated parameter 'namecase' [ 131.782007][ T2983] exfat: Deprecated parameter 'namecase' [ 132.762855][ T2986] attempt to access beyond end of device [ 132.762855][ T2986] loop7: rw=1, want=80216, limit=40427 [ 132.800765][ T2986] attempt to access beyond end of device [ 132.800765][ T2986] loop7: rw=1, want=81920, limit=40427 [ 132.841451][ T2986] attempt to access beyond end of device [ 132.841451][ T2986] loop7: rw=1, want=51200, limit=40427 [ 132.883810][ T2986] attempt to access beyond end of device [ 132.883810][ T2986] loop7: rw=1, want=53248, limit=40427 [ 132.956476][ T2986] attempt to access beyond end of device [ 132.956476][ T2986] loop7: rw=1, want=61432, limit=40427 [ 133.016783][ T2986] attempt to access beyond end of device [ 133.016783][ T2986] loop7: rw=1, want=65536, limit=40427 [ 133.028076][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 133.028105][ T30] audit: type=1400 audit(1782248223.807:361): avc: denied { mounton } for pid=2977 comm="syz.2.876" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 133.061679][ T2986] attempt to access beyond end of device [ 133.061679][ T2986] loop7: rw=1, want=69640, limit=40427 [ 133.072898][ T2986] attempt to access beyond end of device [ 133.072898][ T2986] loop7: rw=1, want=69648, limit=40427 [ 133.084059][ T2986] attempt to access beyond end of device [ 133.084059][ T2986] loop7: rw=1, want=69656, limit=40427 [ 133.114183][ T30] audit: type=1400 audit(1782248223.907:362): avc: denied { create } for pid=2963 comm="syz.7.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 133.165867][ T2983] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 133.649923][ T30] audit: type=1400 audit(1782248224.427:363): avc: denied { remove_name } for pid=2980 comm="syz.0.877" name="file1" dev="loop0" ino=1048649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.673037][ T30] audit: type=1400 audit(1782248224.447:364): avc: denied { unlink } for pid=2980 comm="syz.0.877" name="file1" dev="loop0" ino=1048649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.697209][ T2983] exFAT-fs (loop0): invalid start cluster (4278190088) [ 133.742296][ T30] audit: type=1400 audit(1782248224.527:365): avc: denied { mount } for pid=2980 comm="syz.0.877" name="/" dev="configfs" ino=1446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 133.810348][ T2996] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.882: inode has both inline data and extents flags [ 133.835943][ T30] audit: type=1400 audit(1782248224.527:366): avc: denied { search } for pid=2980 comm="syz.0.877" name="/" dev="configfs" ino=1446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 133.858662][ T2996] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.882: couldn't read orphan inode 15 (err -117) [ 133.879778][ T30] audit: type=1400 audit(1782248224.527:367): avc: denied { read } for pid=2980 comm="syz.0.877" name="/" dev="configfs" ino=1446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 133.901918][ T30] audit: type=1400 audit(1782248224.527:368): avc: denied { open } for pid=2980 comm="syz.0.877" path="/" dev="configfs" ino=1446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 133.933035][ T2996] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,debug_want_extra_isize=0x0000000000000006,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 133.958914][ T30] audit: type=1400 audit(1782248224.747:369): avc: denied { ioctl } for pid=2995 comm="syz.0.882" path="socket:[27378]" dev="sockfs" ino=27378 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 134.008043][ T30] audit: type=1400 audit(1782248224.787:370): avc: denied { getopt } for pid=2995 comm="syz.0.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.035142][ T3004] page size migration: [3004 (syz.2.883)] madvise_vma_pad_pages:289: Invalid attempt to madvise padding on MAP_SHARED vma [ 134.099631][ T1524] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 134.463364][ T3004] EXT4-fs (loop2): Ignoring removed orlov option [ 134.619802][ T3004] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,orlov,,errors=continue. Quota mode: writeback. [ 134.639646][ T1524] usb 5-1: Using ep0 maxpacket: 16 [ 134.808600][ T3025] set_capacity_and_notify: 4 callbacks suppressed [ 134.808615][ T3025] loop2: detected capacity change from 0 to 40427 [ 134.899947][ T3025] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 134.907907][ T3025] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 134.929825][ T1524] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 134.931693][ T3025] F2FS-fs (loop2): invalid crc value [ 134.949145][ T1524] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.964731][ T1524] usb 5-1: Product: syz [ 134.968959][ T1524] usb 5-1: Manufacturer: syz [ 134.979605][ T1524] usb 5-1: SerialNumber: syz [ 135.017543][ T3025] F2FS-fs (loop2): Found nat_bits in checkpoint [ 135.045546][ T3036] usb usb9: usbfs: process 3036 (syz.7.891) did not claim interface 1 before use [ 135.091148][ T3025] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 135.098399][ T3025] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 135.122373][ T3039] loop7: detected capacity change from 0 to 4096 [ 135.137458][ T3039] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.154551][ T3039] EXT4-fs error (device loop7): ext4_do_update_inode:5260: inode #15: comm syz.7.892: corrupted inode contents [ 135.166614][ T3039] EXT4-fs error (device loop7): ext4_dirty_inode:6108: inode #15: comm syz.7.892: mark_inode_dirty error [ 135.178235][ T3039] EXT4-fs error (device loop7): ext4_do_update_inode:5260: inode #15: comm syz.7.892: corrupted inode contents [ 135.190374][ T3039] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #15: comm syz.7.892: mark_inode_dirty error [ 135.201983][ T3039] EXT4-fs error (device loop7): ext4_do_update_inode:5260: inode #15: comm syz.7.892: corrupted inode contents [ 135.214384][ T3039] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #15: comm syz.7.892: mark_inode_dirty error [ 135.226339][ T3039] EXT4-fs error (device loop7): ext4_do_update_inode:5260: inode #15: comm syz.7.892: corrupted inode contents [ 135.238611][ T3039] EXT4-fs error (device loop7): ext4_truncate:4317: inode #15: comm syz.7.892: mark_inode_dirty error [ 135.250020][ T3039] EXT4-fs error (device loop7): ext4_evict_inode:296: comm syz.7.892: couldn't truncate inode 15 (err -117) [ 135.329529][ T3046] netlink: 8 bytes leftover after parsing attributes in process `syz.7.895'. [ 135.369667][ T374] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 135.483405][ T3054] page size migration: [3054 (syz.2.897)] madvise_vma_pad_pages:289: Invalid attempt to madvise padding on MAP_SHARED vma [ 135.495323][ T3054] loop2: detected capacity change from 0 to 512 [ 135.600183][ T3054] EXT4-fs (loop2): Ignoring removed orlov option [ 135.609643][ T374] usb 1-1: Using ep0 maxpacket: 32 [ 135.619111][ T3054] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,orlov,,errors=continue. Quota mode: writeback. [ 135.739727][ T374] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 135.748210][ T374] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 135.749987][ T20] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 135.757596][ T374] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 135.772957][ T3060] loop2: detected capacity change from 0 to 128 [ 135.773693][ T374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.789377][ T3060] overlayfs: filesystem on './file0' not supported as upperdir [ 135.790255][ T374] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 135.806921][ T374] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 135.820066][ T374] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 135.829188][ T374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.838281][ T374] usb 1-1: config 0 descriptor?? [ 135.901418][ T3067] loop2: detected capacity change from 0 to 4096 [ 135.921622][ T3067] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 135.931248][ T3067] EXT4-fs (loop2): Test dummy encryption mode enabled [ 135.939395][ T3067] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 135.947900][ T3067] System zones: 0-5 [ 135.954940][ T3067] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 136.063755][ T3079] loop2: detected capacity change from 0 to 128 [ 136.100291][ T374] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 136.119708][ T20] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.134045][ T20] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 136.143369][ T20] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.153692][ T6] usb 1-1: USB disconnect, device number 17 [ 136.169811][ T20] usb 8-1: config 0 descriptor?? [ 136.175653][ T6] usblp0: removed [ 136.241666][ T3088] handle_bad_sector: 2025 callbacks suppressed [ 136.241691][ T3088] attempt to access beyond end of device [ 136.241691][ T3088] loop2: rw=2049, want=1041, limit=128 [ 136.290595][ T3089] page size migration: [3089 (syz.1.908)] madvise_vma_pad_pages:289: Invalid attempt to madvise padding on MAP_SHARED vma [ 136.307643][ T3086] loop1: detected capacity change from 0 to 512 [ 136.360238][ T3086] EXT4-fs (loop1): Ignoring removed orlov option [ 136.377190][ T3086] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,orlov,,errors=continue. Quota mode: writeback. [ 136.476121][ T3093] loop1: detected capacity change from 0 to 8192 [ 136.523890][ T3093] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.650374][ T20] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 136.660292][ T20] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0006/input/input19 [ 136.742277][ T20] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 136.979760][ T1524] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 136.987478][ T1524] usb 5-1: USB disconnect, device number 21 [ 137.297743][ T3105] loop2: detected capacity change from 0 to 128 [ 137.440303][ T3108] loop1: detected capacity change from 0 to 4096 [ 137.470839][ T3108] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 137.480649][ T3108] EXT4-fs (loop1): Test dummy encryption mode enabled [ 137.489126][ T3108] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 137.497611][ T3108] System zones: 0-5 [ 137.502733][ T3108] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 137.570972][ T3112] FAULT_INJECTION: forcing a failure. [ 137.570972][ T3112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.584231][ T3112] CPU: 1 PID: 3112 Comm: syz.1.914 Not tainted syzkaller #0 [ 137.591530][ T3112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 137.601620][ T3112] Call Trace: [ 137.604901][ T3112] [ 137.607842][ T3112] __dump_stack+0x21/0x30 [ 137.612194][ T3112] dump_stack_lvl+0x110/0x170 [ 137.616877][ T3112] ? show_regs_print_info+0x20/0x20 [ 137.622095][ T3112] ? format_decode+0x1bb/0x1520 [ 137.626988][ T3112] dump_stack+0x15/0x20 [ 137.631149][ T3112] should_fail+0x3ab/0x500 [ 137.635601][ T3112] should_fail_usercopy+0x1a/0x20 [ 137.640631][ T3112] _copy_from_user+0x20/0xd0 [ 137.645252][ T3112] kstrtouint_from_user+0xd3/0x220 [ 137.650369][ T3112] ? kstrtol_from_user+0x2a0/0x2a0 [ 137.655481][ T3112] ? 0xffffffff81000000 [ 137.659643][ T3112] ? _copy_to_user+0x78/0x90 [ 137.664252][ T3112] ? simple_read_from_buffer+0x10f/0x160 [ 137.669887][ T3112] proc_fail_nth_write+0x8b/0x200 [ 137.674939][ T3112] ? proc_fail_nth_read+0x220/0x220 [ 137.680151][ T3112] ? security_file_permission+0x79/0xa0 [ 137.685709][ T3112] ? security_file_permission+0x83/0xa0 [ 137.691268][ T3112] ? proc_fail_nth_read+0x220/0x220 [ 137.696484][ T3112] vfs_write+0x404/0xfd0 [ 137.700746][ T3112] ? file_end_write+0x1b0/0x1b0 [ 137.705611][ T3112] ? __kasan_check_write+0x14/0x20 [ 137.710747][ T3112] ? mutex_lock+0x9b/0x1c0 [ 137.715176][ T3112] ? wait_for_completion_killable_timeout+0x10/0x10 [ 137.721772][ T3112] ? __fget_files+0x2e1/0x340 [ 137.726474][ T3112] ? __fdget_pos+0x2d2/0x380 [ 137.731082][ T3112] ? ksys_write+0x70/0x260 [ 137.735503][ T3112] ksys_write+0x14a/0x260 [ 137.739834][ T3112] ? __ia32_sys_read+0x90/0x90 [ 137.744603][ T3112] ? debug_smp_processor_id+0x17/0x20 [ 137.749993][ T3112] __x64_sys_write+0x7b/0x90 [ 137.754598][ T3112] x64_sys_call+0x8ef/0x9a0 [ 137.759103][ T3112] do_syscall_64+0x4c/0xa0 [ 137.763542][ T3112] ? clear_bhb_loop+0x50/0xa0 [ 137.768243][ T3112] ? clear_bhb_loop+0x50/0xa0 [ 137.772952][ T3112] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.778857][ T3112] RIP: 0033:0x7f42bae9768e [ 137.783286][ T3112] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 137.802930][ T3112] RSP: 002b:00007f42b9930fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 137.811353][ T3112] RAX: ffffffffffffffda RBX: 00007f42b99316c0 RCX: 00007f42bae9768e [ 137.819328][ T3112] RDX: 0000000000000001 RSI: 00007f42b99310a0 RDI: 0000000000000003 [ 137.827304][ T3112] RBP: 00007f42b9931090 R08: 0000000000000000 R09: 0000000000000000 [ 137.835278][ T3112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.843264][ T3112] R13: 00007f42bb150038 R14: 00007f42bb14ffa0 R15: 00007ffeb6c6a028 [ 137.851255][ T3112] [ 137.966555][ T3127] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 137.977042][ T3127] EXT4-fs (loop2): Test dummy encryption mode enabled [ 137.990598][ T3127] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 137.998781][ T3127] System zones: 0-5 [ 138.003767][ T3127] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 138.159109][ T3120] F2FS-fs (loop1): Unrecognized mount option "active_[ogs=4" or missing value [ 138.268266][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 138.268284][ T30] audit: type=1400 audit(1782248229.057:375): avc: denied { ioctl } for pid=3137 comm="syz.1.923" path="socket:[28514]" dev="sockfs" ino=28514 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.355403][ T3139] netlink: 'syz.2.922': attribute type 3 has an invalid length. [ 138.363631][ T3139] netlink: 'syz.2.922': attribute type 3 has an invalid length. [ 138.449813][ C1] ================================================================== [ 138.457943][ C1] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 138.465353][ C1] Read of size 8 at addr ffff888136839590 by task ksoftirqd/1/25 [ 138.473094][ C1] [ 138.475446][ C1] CPU: 1 PID: 25 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 138.482746][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 138.492832][ C1] Call Trace: [ 138.496130][ C1] [ 138.499081][ C1] __dump_stack+0x21/0x30 [ 138.503437][ C1] dump_stack_lvl+0x110/0x170 [ 138.508136][ C1] ? show_regs_print_info+0x20/0x20 [ 138.513564][ C1] ? load_image+0x3f0/0x3f0 [ 138.518118][ C1] print_address_description+0x7f/0x2c0 [ 138.523695][ C1] ? rcu_cblist_dequeue+0x6c/0xb0 [ 138.528757][ C1] kasan_report+0x10f/0x150 [ 138.533288][ C1] ? rcu_cblist_dequeue+0x6c/0xb0 [ 138.538688][ C1] __asan_report_load8_noabort+0x14/0x20 [ 138.544349][ C1] rcu_cblist_dequeue+0x6c/0xb0 [ 138.549226][ C1] rcu_do_batch+0x47d/0xbf0 [ 138.553749][ C1] ? local_bh_enable+0x20/0x20 [ 138.558564][ C1] rcu_core+0x4a3/0xef0 [ 138.562761][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 138.567992][ C1] ? sched_clock_cpu+0x18/0x3d0 [ 138.572883][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 138.578475][ C1] ? irqtime_account_irq+0x76/0x390 [ 138.583700][ C1] rcu_core_si+0x9/0x10 [ 138.587883][ C1] handle_softirqs+0x250/0x560 [ 138.592676][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 138.597899][ C1] run_ksoftirqd+0x28/0x40 [ 138.602343][ C1] smpboot_thread_fn+0x446/0x880 [ 138.607311][ C1] kthread+0x3f5/0x4f0 [ 138.611406][ C1] ? cpu_report_death+0x1b0/0x1b0 [ 138.616465][ C1] ? kthread_blkcg+0xd0/0xd0 [ 138.621080][ C1] ret_from_fork+0x1f/0x30 [ 138.625522][ C1] [ 138.628562][ C1] [ 138.630898][ C1] Allocated by task 3138: [ 138.635237][ C1] __kasan_kmalloc+0xd4/0x100 [ 138.639942][ C1] __kmalloc+0x13d/0x2c0 [ 138.644213][ C1] l2tp_session_create+0x39/0xb60 [ 138.649267][ C1] pppol2tp_connect+0xbf5/0x1640 [ 138.654225][ C1] __sys_connect+0x3cb/0x450 [ 138.658835][ C1] __x64_sys_connect+0x7a/0x90 [ 138.663624][ C1] x64_sys_call+0x7c/0x9a0 [ 138.668070][ C1] do_syscall_64+0x4c/0xa0 [ 138.672509][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.677777][ T30] audit: type=1400 audit(1782248229.117:376): avc: denied { ioctl } for pid=3137 comm="syz.1.923" path="socket:[28518]" dev="sockfs" ino=28518 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 138.678438][ C1] [ 138.678446][ C1] Freed by task 306: [ 138.710301][ C1] kasan_set_track+0x4a/0x70 [ 138.714924][ C1] kasan_set_free_info+0x23/0x40 [ 138.719757][ T30] audit: type=1400 audit(1782248229.187:377): avc: denied { ioctl } for pid=3137 comm="syz.1.923" path="socket:[28520]" dev="sockfs" ino=28520 ioctlcmd=0x583d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.719896][ C1] ____kasan_slab_free+0x125/0x160 [ 138.744812][ T1524] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 138.749667][ C1] __kasan_slab_free+0x11/0x20 [ 138.749691][ C1] slab_free_freelist_hook+0xc2/0x190 [ 138.767400][ C1] kfree+0xc4/0x270 [ 138.771277][ C1] l2tp_session_put+0xaf/0x1a0 [ 138.776069][ C1] l2tp_session_delete+0x3a9/0x4a0 [ 138.781214][ C1] l2tp_tunnel_del_work+0x180/0x3d0 [ 138.786454][ C1] process_one_work+0x6c8/0xbb0 [ 138.791354][ C1] worker_thread+0xaa0/0x1250 [ 138.796068][ C1] kthread+0x3f5/0x4f0 [ 138.800174][ C1] ret_from_fork+0x1f/0x30 [ 138.804626][ C1] [ 138.806965][ C1] Last potentially related work creation: [ 138.812695][ C1] kasan_save_stack+0x3a/0x60 [ 138.817407][ C1] __kasan_record_aux_stack+0xd2/0x100 [ 138.822908][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 138.828749][ C1] call_rcu+0x10b/0xf60 [ 138.832948][ C1] pppol2tp_release+0x1e3/0x2b0 [ 138.837846][ C1] sock_close+0xb8/0x200 [ 138.842113][ C1] __fput+0x22b/0x900 [ 138.846128][ C1] ____fput+0x15/0x20 [ 138.850147][ C1] task_work_run+0x127/0x190 [ 138.854771][ C1] exit_to_user_mode_loop+0xd0/0xe0 [ 138.859995][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 138.865496][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 138.870987][ C1] do_syscall_64+0x58/0xa0 [ 138.875449][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.881384][ C1] [ 138.883738][ C1] The buggy address belongs to the object at ffff888136839400 [ 138.883738][ C1] which belongs to the cache kmalloc-512 of size 512 [ 138.897661][ T30] audit: type=1400 audit(1782248229.197:378): avc: denied { connect } for pid=3137 comm="syz.1.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.897816][ C1] The buggy address is located 400 bytes inside of [ 138.897816][ C1] 512-byte region [ffff888136839400, ffff888136839600) [ 138.930462][ C1] The buggy address belongs to the page: [ 138.936131][ C1] page:ffffea0004da0e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x136838 [ 138.946577][ C1] head:ffffea0004da0e00 order:2 compound_mapcount:0 compound_pincount:0 [ 138.954939][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 138.961060][ C1] raw: 4000000000010200 ffffea0004d9f700 0000000200000002 ffff888100042f00 [ 138.969672][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 138.978277][ C1] page dumped because: kasan: bad access detected [ 138.984727][ C1] page_owner tracks the page as allocated [ 138.990481][ T20] usb 8-1: USB disconnect, device number 3 [ 138.990467][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2244, ts 98719803933, free_ts 93691569845 [ 139.016810][ C1] post_alloc_hook+0x192/0x1b0 [ 139.021619][ C1] prep_new_page+0x1c/0x110 [ 139.026167][ C1] get_page_from_freelist+0x2c3a/0x2cd0 [ 139.031746][ C1] __alloc_pages+0x1a2/0x460 [ 139.036381][ C1] new_slab+0xa0/0x4d0 [ 139.040496][ C1] ___slab_alloc+0x3ac/0x840 [ 139.045123][ C1] __slab_alloc+0x49/0x90 [ 139.049493][ C1] __kmalloc_track_caller+0x169/0x2c0 [ 139.054902][ C1] __alloc_skb+0x210/0x730 [ 139.059495][ C1] netlink_sendmsg+0x611/0xb80 [ 139.064298][ C1] __sys_sendto+0x46d/0x620 [ 139.068835][ C1] __x64_sys_sendto+0xe5/0x100 [ 139.069754][ T1524] usb 1-1: Using ep0 maxpacket: 32 [ 139.073712][ C1] x64_sys_call+0x178/0x9a0 [ 139.083349][ C1] do_syscall_64+0x4c/0xa0 [ 139.087800][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.093721][ C1] page last free stack trace: [ 139.098437][ C1] __free_pages_ok+0xa13/0xae0 [ 139.103263][ C1] free_compound_page+0x89/0xa0 [ 139.108147][ C1] free_transhuge_page+0x250/0x270 [ 139.113273][ C1] __put_compound_page+0x77/0xb0 [ 139.118230][ C1] __put_page+0xbc/0xe0 [ 139.122411][ C1] khugepaged+0x834/0xf00 [ 139.126759][ C1] kthread+0x3f5/0x4f0 [ 139.130843][ C1] ret_from_fork+0x1f/0x30 [ 139.135285][ C1] [ 139.137623][ C1] Memory state around the buggy address: [ 139.143260][ C1] ffff888136839480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.151332][ C1] ffff888136839500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.159410][ C1] >ffff888136839580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.167574][ C1] ^ [ 139.172174][ C1] ffff888136839600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 139.180245][ C1] ffff888136839680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 139.188317][ C1] ================================================================== [ 139.196384][ C1] Disabling lock debugging due to kernel taint [ 139.239124][ T3141] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 139.248780][ T3141] EXT4-fs (loop4): Test dummy encryption mode enabled [ 139.258034][ T3143] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 139.297974][ T3143] EXT4-fs (loop1): Test dummy encryption mode enabled [ 139.334611][ T3143] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 139.343271][ T3141] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 139.343873][ T3143] System zones: 0-5 [ 139.355691][ T3141] System zones: 0-5 [ 139.359860][ T1524] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 139.369669][ T1524] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 139.379180][ T3141] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 139.380316][ T1524] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 139.407461][ T3143] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 139.426703][ T1524] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.438528][ T1524] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 139.448358][ T1524] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 139.469694][ T1524] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 139.478887][ T1524] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.487923][ T1524] usb 1-1: config 0 descriptor?? [ 139.752046][ T1524] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 139.886985][ T1524] usb 1-1: USB disconnect, device number 18 [ 139.893032][ C0] usblp0: nonzero read bulk status received: -71 [ 140.087268][ T3130] usblp0: removed