last executing test programs: 2m35.019820454s ago: executing program 32 (id=51): r0 = epoll_create1(0x80000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x1804) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x1, 0xe, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000024c0), 0x0, 0x10, &(0x7f0000002500), 0xfffffffffffffe19}, 0x42) io_uring_setup(0x4, &(0x7f0000002540)={0x0, 0x57bb, 0xc412, 0x22, 0x20002f7}) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000025c0)=r6, 0x4) (async) sendto$packet(r5, &(0x7f0000002600)="3e85c9fa526fd871f687f5c7faeddbdf00b96765d4fdeb0b44ca7e0a37fc460a21ebb0bffca8ef9be6de3891cab244acd7692df5fa25654d85107ea34ad6bdd8647c61f9a7862c04b8c904516071c137e836bea78fb77d8423fe4bb7ab574727b4abbed9ae2b77caabdcc34c14ccc61571ffd7118e54491eb5f62700376ed6358fe584715897870feba487fb179741f4b1d474a02d7730ac0010564dd318dd7404e1fc61a7cb6525cc7d7b23a92af4c64a6e62db2ae1d7a339c39a68da58dce0f770be7868fdd4b7da1f876cde4c9044fa1a7a09c0b9788235ee074a438fb4a9020795b6", 0xe4, 0x20008004, &(0x7f0000002700)={0x11, 0x1b, 0x0, 0x1, 0x4}, 0x14) (async, rerun: 64) getsockname$packet(r4, &(0x7f0000002740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002780)=0x14) (rerun: 64) sendmsg$nl_route(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002840)=@newlink={0x3c, 0x10, 0x437, 0x3, 0xffffffff, {0x0, 0x0, 0x0, r7, 0x51b0b, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40830}, 0x20) sendto$packet(r3, 0x0, 0x0, 0x4, &(0x7f0000002880)={0x11, 0x8100, r7, 0x1, 0xe9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) add_key(&(0x7f0000002900)='asymmetric\x00', 0x0, &(0x7f0000002940)="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", 0x1c2, 0x0) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f0000000140), 0x318, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f0000001ec0)=[{{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001f80)=""/114, 0x72}, {&(0x7f00000003c0)=""/200, 0xc8}], 0x2}, 0x1}, {{&(0x7f0000000500)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000580)=""/187, 0xbb}, {&(0x7f0000000640)=""/202, 0xca}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/211, 0xd3}, {&(0x7f0000001840)=""/131, 0x83}], 0x5, &(0x7f0000001980)=""/93, 0x5d}, 0x1ff}, {{&(0x7f0000001a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001a80)=""/230, 0xe6}, {&(0x7f0000001b80)=""/210, 0xd2}, {&(0x7f0000001c80)=""/34, 0x22}, {&(0x7f0000001cc0)=""/72, 0x48}, {&(0x7f0000001d40)=""/42, 0x2a}, {&(0x7f0000001d80)=""/45, 0x2d}, {&(0x7f0000001dc0)=""/53, 0x35}, {&(0x7f0000001e00)=""/55, 0x37}], 0x8}, 0x7}], 0x3, 0x42, 0x0) (async) r9 = epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000200)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f0000000240)={0x1}) poll(&(0x7f0000000280)=[{r9, 0x1009}], 0x1, 0x8000007) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) (async, rerun: 64) r11 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x10}}, 0xc800) 2m31.330215706s ago: executing program 2 (id=79): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)={0x60, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) 2m31.271790212s ago: executing program 2 (id=80): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/set_event\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x4, 0x6, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x14, &(0x7f00000072c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000007380)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000007400)={0x11, 0x14, &(0x7f00000074c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90"], &(0x7f0000007540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000007580)={r3}, 0xc) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000007000)=[{0xffff, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/163, 0xa3}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/184, 0xb8}, {&(0x7f0000000500)=""/141, 0x8d}, {&(0x7f00000005c0)=""/24, 0x18}, {&(0x7f0000000600)=""/183, 0xb7}, {&(0x7f00000006c0)=""/90, 0x5a}]}, {0x4, 0x0, &(0x7f0000000800)=[{&(0x7f00000007c0)=""/56, 0x38}]}, {0xf86, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/241, 0xf1}, {&(0x7f0000000940)=""/129, 0x81}, {&(0x7f0000000a00)=""/90, 0x5a}, {&(0x7f0000000a80)=""/168, 0xa8}]}, {0xfffffffe, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b80)=""/65, 0x41}, {&(0x7f0000000c00)=""/249, 0xf9}]}, {0x3, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000d40)=""/31, 0x1f}]}, {0x4, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000dc0)=""/165, 0xa5}, {&(0x7f0000000e80)}, {&(0x7f00000071c0)=""/255, 0xff}, {&(0x7f0000000fc0)=""/4096, 0x1000}]}, {0x9, 0x0, &(0x7f0000003200)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/185, 0xb9}, {&(0x7f00000030c0)=""/30, 0x1e}, {&(0x7f0000003100)=""/221, 0xdd}]}, {0x200, 0x0, &(0x7f0000003240)}, {0xfffffff7, 0x0, &(0x7f00000046c0)=[{&(0x7f0000003280)=""/155, 0x9b}, {&(0x7f0000003340)=""/130, 0x82}, {&(0x7f0000003400)=""/148, 0x94}, {&(0x7f00000034c0)=""/218, 0xda}, {&(0x7f00000035c0)=""/92, 0x5c}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/112, 0x70}]}, {0xcf35, 0x0, &(0x7f00000047c0)=[{&(0x7f0000004740)=""/79, 0x4f}]}, {0x29, 0x0, &(0x7f0000004d00)=[{&(0x7f0000004800)=""/142, 0x8e}, {&(0x7f00000048c0)=""/213, 0xd5}, {&(0x7f00000049c0)=""/109, 0x6d}, {&(0x7f0000004a40)=""/213, 0xd5}, {&(0x7f0000004b40)=""/231, 0xe7}, {&(0x7f0000004c40)=""/172, 0xac}]}, {0xffff, 0x0, &(0x7f0000005340)=[{&(0x7f0000004d80)=""/70, 0x46}, {&(0x7f0000004e00)=""/120, 0x78}, {&(0x7f0000004e80)=""/169, 0xa9}, {&(0x7f0000004f40)=""/214, 0xd6}, {&(0x7f0000005040)=""/210, 0xd2}, {&(0x7f0000005140)=""/231, 0xe7}, {&(0x7f0000005240)=""/92, 0x5c}, {&(0x7f00000052c0)=""/98, 0x62}]}, {0x1, 0x0, &(0x7f0000005940)=[{&(0x7f00000053c0)=""/214, 0xd6}, {&(0x7f00000054c0)=""/172, 0xac}, {&(0x7f0000005580)=""/81, 0x51}, {&(0x7f0000005600)=""/136, 0x88}, {&(0x7f00000056c0)=""/109, 0x6d}, {&(0x7f0000005740)=""/192, 0xc0}, {&(0x7f0000005800)=""/99, 0x63}, {&(0x7f0000005880)=""/152, 0x98}]}, {0x9, 0x0, &(0x7f0000006f40)=[{&(0x7f00000059c0)=""/175, 0xaf}, {&(0x7f0000005a80)=""/244, 0xf4}, {&(0x7f0000005b80)=""/244, 0xf4}, {&(0x7f0000005c80)=""/149, 0x95}, {&(0x7f0000005d40)=""/89, 0x59}, {&(0x7f0000005dc0)=""/145, 0x91}, {&(0x7f0000005e80)=""/11, 0xb}, {&(0x7f0000005ec0)=""/98, 0x62}, {&(0x7f0000005f40)=""/4096, 0x1000}]}], 0xe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000300)=0x40000007, 0x12) write$tun(r1, &(0x7f0000000180)={@val={0x0, 0x805}, @val={0x1, 0x1, 0x5, 0xd, 0x7, 0x1000}, @x25={0x2, 0x1, 0xff, "994eca3d4564c96293bfc0eaff6e38aab0b7039df018578d2aceda6d01d7f75e41ff323f88a01fb2ff7d41912c109fc552fad92f186f4209fd3c1a00f0c04c165a6fdfe0edbad53621c099fac7564645581b7c2bda91c56c8c148d043277590385df6c0559a88712b0a71337c77444c7b8d60b22b70a96f399d6cf57438af0c24c4b8b5e7ffd794bf0be6948df0cdcca831835aa6fbf10f7897eb588ab31e017d4ec07c0489c004dd0c50a0a25c7850680434eb22c210735809b67587b232d5a27b523586d5a6214161ad78b0fb353eac82528f74ef9f246"}}, 0xe9) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r1, 0xc004ae0a, &(0x7f0000000280)={0x2, [0x0, 0x0]}) write(r1, &(0x7f0000000140)='\ns', 0x2) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000007180)={{@_ha_fsid={[0xdd, 0x7]}, {0x2, 0x9, 0x6, 0xffffffffffffff76}}, {{[0x1, 0x4, 0x7f, 0x6]}, 0x0, 0x0, 0x5, 0x0, &(0x7f0000007100)=[{{@align=0x1, {0x5000, 0x8000, 0x5, 0x8}}, 0x1, 0x0, '/#]\x00'}, {{@align=0x9, {0x53, 0x50, 0x5, 0x1}}, 0x4, 0x0, '\x00'}, {{@_ha_fsid={[0x0, 0x6]}, {0x6, 0x6, 0x6, 0x5}}, 0x4, 0x0, 'tracefs\x00'}]}}) 2m31.217085298s ago: executing program 2 (id=81): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f0000000580)=[@wr_drn={0x68, 0x20, {0x4, 0x40000000002000}}], 0x20}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000600)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2b) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000006c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000500)={0x5, 0x100, 0x3c0, &(0x7f0000000100)=[0x7, 0x101, 0x1, 0x328, 0x5, 0x10, 0xffffffffffffffff, 0xdd7, 0x8, 0xffffffffffffffff, 0x44da, 0xd97f, 0xa, 0x3, 0xfd2b, 0x3, 0x4d6, 0x7, 0x6, 0x7, 0xd80, 0x8000000000000001, 0x7, 0xfffffffffffffffe, 0xfffffffffffff974, 0x100000000, 0x200000, 0x1, 0x1, 0x8, 0x100000000, 0x2e, 0x7, 0x200, 0xa78, 0x80, 0x8, 0xf, 0x6, 0x3, 0xe514, 0x0, 0xfffffffffffffffd, 0x3ff, 0x2, 0x5, 0x80, 0xa3, 0x6, 0x9, 0x7, 0x6e, 0x2, 0x0, 0x4, 0x3, 0x4, 0x11d, 0x7fffffffffffffff, 0x8000000000000001, 0x7, 0x7, 0xd6, 0x0, 0x100, 0x9, 0xcac9, 0x6, 0x4, 0x6867, 0x5, 0xa1, 0x5, 0x915c, 0xb, 0x8, 0x9b66, 0x67224c33, 0x2, 0x1, 0x2, 0x0, 0x7, 0x5, 0x8, 0x3, 0x100000000, 0x8, 0x7, 0x200, 0x800, 0xfffffffffffffffd, 0x3, 0x7fff, 0x1000, 0x5, 0xb1, 0xe, 0xfffffffffffffff7, 0x9, 0x1, 0x4, 0x1, 0x3, 0x1cd, 0x1, 0x116, 0x5fe, 0x6, 0x0, 0x2ed89f76, 0x400, 0x2, 0x7fffffffffffffff, 0x900000000000, 0x7, 0x25d, 0x9, 0x63fa, 0x729, 0x2, 0x4645, 0xffffffffffff8001, 0x8, 0x3, 0x3, 0x994, 0x6]}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) 2m31.051874545s ago: executing program 2 (id=82): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000dc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x156e) syz_mount_image$exfat(&(0x7f0000002e00), &(0x7f0000002e40)='./file0\x00', 0x20010080, &(0x7f0000002e80)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r3, @ANYRESOCT=r1, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESDEC=r3, @ANYRESHEX=r2], 0x1, 0x14f3, &(0x7f0000002f80)="$eJzs3Au0jtX2MPA511qPW9Kb5JY113x408YiSXJJyCVJkiTJLSFJkiQkNrklIQm5J7mH5BY7ud9vuSfJkSRJSEiyvqFzzl/ndL7R9x+n/+d/xp6/MdbYa+5nz/XO9c53vO/zPHvs/W3HwVXrV6tUl5nh34J//ZIKAJkAoB8AXAMAEQCUzF4y+6XjmTWm/nsPIv5cD0270hWIK0n6n75J/9M36X/6Jv1P36T/6Zv0P32T/qdv0n8h0rOt0/NcKyP9Drn/n57J53/6Jv1P36T/6Zv0P32T/qdv0v/0Tfqfvkn/0zfpvxDp2ZW+//yfMzL+7Rm70nX8ueMKv/yEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqQT58JlBgD+Pr/SdQkhhBBCCCGEEOLPEzJe6QqEEEIIIYQQQgjxPw9BgQYDEWSAjJAJMkMWuAqywtWQDa6BBFwL2eE6yAHXQ07IBbkhD+SFGyAfWCBwwBBDfigASbgRCsJNkAKFoDAUAQ9FoRjcDMXhFigBt0JJuA1Kwe1QGspAWSgHd0B5uBMqQEWoBHdBZagCVaEa3A3V4R6oAfdCTbgPasH9cK70X6usCw9BPXgY6sMj0AAehYbQCBpDE2j6z/mIAL/Jrw0PQB148J/yX4Su8BJ0g+6QCj2gJ7wMvaA39IG+0A9egf7wKgyA12AgDILB8DoMgTdgKLwJw2A4jIC3YCSMgtEwBsbCOBgPb8MEeAcmwrswCSbDFJgK02A6zID3YCbMgtnwPsyBD2AuzIP5sAAWwoewCBZDGnwES+BjWArLYDmsgJWwClbDGlgL62A9bICNsAk2wxbYCp/ANtgOO2An7ILdsAc+hb3wGeyDz2E/fPHfzD/7T/mdEBBQoUKDBjNgBsyEmTALZsGsmBWzYTZMYAKzY/b/erHkxtyYF/NiPsyHhISMjPkxPyYxiQWxIKZgChbGwujRYzEshsXxFiyBJbAklsRSWApLYxksg+WwHJbH8lgBK2AlrISVsTJWxap4N96N92ANrIE1sSbWwlpYG2tjHayDdbEu1sN6WB/rYwNsgA2xITbGxtgUm2IzbIbNsTm2xJbYCltha2yNbbANtsW22A7bYXtsjx2wA3bEjtgJO2NnfBFfxJfwJeyOlVUP7Ik9sRf2wj7YF/viK9gfX8VX8TUciINwML6Or+MbOBTP4DAcjiNwBJZXo3A0jkFW43A8jscJOAEn4kSchJNxMk7FaTgdZ+AMnImzcBa+j3PwA/wA5+E8XIALcSEuwsWYhmm4BM/iUlyGy3EFrsRVuBLX4Fpcg+txA67HTbgJt+AW/AQ/we24HXfiTtyNu/FT/BQ/w89wIO7H/XgAD+BBPIiH8BAexsN4BI/gUTyKx/AYHsfjeAJP4ik8iafxNJ7Bs3gOz+F5PI8X8Pm8X9fbXWjdQFCXGGVUBpVBZVKZVBaVRWVVWVU2lU0lVEJlV9lVDpVD5VQ5VW6VW+VVeVU+lU+RIsUqVvlVfpVUSVVQFVQpKkUVVoWVV14VU8VUcVVclVAlVEl1myqlblelVRnVwpdT5VR51dJXUBVVJVVJVVZVVFVVTVVT1VV1VUPVUDVVTVVL1VK11QOqjuqBffAhdakz9dUgbKAGY0PVSDVWTdQb+JhqpoZic9VCtVRPqOE4DFurZr6Nelq1VaOxnXpWjcHnVAc1DjuqF1Qn1Vl1US+qrqq576a6q0nYQ/VUU7GX6q36qL5qJlZRlzpWVb2mBqpBarB6XS3AN9RQ9aYapoarEeotNVKNUqPVGDVWjVPj1dtqgnpHTVTvqklqspqipqpparqaod5TM9UsNVu9r+aoD9RcNU/NVwvUQvWhWqQWqzT1kVqiPlZL1TK1XK1QK9UqtVqtUWvVOrVebVAb1Sa1WW1RW9UnapvarnaonWqX2q32qE/VXvWZ2qc+V/vVF+qAwlSAL9Uh9ZU6rL5WR9Q36qj6Vh1T36nj6nt1Qp1Up9QP6rT6UZ359b0RANTP6oL6RV1UQYFGrbTWRkc6g86oM+nMOou+SmfVV+ts+hqd0Nfq7Po6nUNfr3PqXDq3zqPz6ht0Pm01aadZxzq/LqCT+kZdUN+kU3QhXVgX0V4X1cX0zbq4vkWX0Lfqkvo2XUrfrkvrMrqsLqfv0OX1nbqCrqgr6bt0ZV1FV9XV9N26ur5H19D36pr6Pl1L369r6wd0Hf2grqsf0vX0w7q+fkQ30I/qhrqRbqyb6Kb6Md1MP66b6xa6pX5Ct9JP6tb6Kd1GP63b6md0O/2sbq+f0x3087qjfkF30p11F/2LvqiD7qa761TdQ/fUL+teurfuo/vqfvoV3V+/qgfo1/RAPUgP1q/rIfoNPVS/qYfp4XqEfkuP1KP0aD1Gj9Xj9Hj9tp6g39ET9bt6kp6sp+ipepqervv8baXZ/w/57/yL/AG/PvoWvVV/orfp7XqH3ql36d16j96j9+q9ep/ep/fr/fqAPqAP6oP6kD6kD+vD+og+oo/qo/qYPqaP6+P6hD6pf9I/6NP6R31Gn9Vn9U/6vD6vL/ztOQCDRhltjIlMBpPRZDKZTRZzlclqrjbZzDUmYa412c11Joe53uQ0uUxuk8fkNTeYfMYaMs6wiU1+U8AkzY2moLnJpJhCprApYrwpaoqZm//t/D+qr6lpapqZZqa5aW5ampamlWllWpvWpo1pY9qatqadaWfam/amg+lgOpqOppPpZLqYLqar6Wq6mW4m1aSanuZl08v0Nn1MX9PPvGL6m/5mgBlgBpqBZrAZbIaYIWaoGWqGmWFmhBlhRpqRZrQZbcaasWa8GW8mmAlmoploJplJZoqZYqaZaWaGmWFmmplmtplt5pg5Zq6Za+ab+WahWWgWmUUmzaSZJWaJWWqWmWVmhVlhVplVZo1ZY9aZdWaD2WA2mU1mqdlqtpptZpvZYXaYXWaX2WP2mL1mr9ln9pn9Zr85YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvm4qXTvkhFKjKRiTJEGaJMUaYoS5QlyhpljbJF2aJElIiyR9mjHNH1Uc4oV5Q7yhPljW6I8kU2oshFHMVR/qhAlIxujApGN0UpUaGocFQk8lHRqFh0c1Q8uiUqEd0alYxui0pFt0elozJR2ahcdEdUProzqhBVjCpFd0WVoypR1ahadHdUPbonqhHdG9WM7otqRfdHtaMHojrRg1Hd6KGoXvRwVD96JGoQPRo1jBpFjaMmUdM/df0QzuR63Hez3W2q7WF72pdtL9vb9rF9bT/7iu1vX7UD7Gt2oB1kB9vX7RD7hh1q37TD7HA7wr5lR9pRdrQdY8facXa8fdtOsO/YifZdO8lOtlPsVDvNTrcz7Ht2pp1lZ9v37Rz7gZ1r59n5doFdaD+0i+xim2Y/skvsx3apXWaX2xV2pV1lV9s1dq1dZ9fbDXaj3WQ32y12q/3EbrPb7Q670+6yu+0e+6ndaz+z++zndr/9wh6wf7EKvrSH7Ff2sP3aHrHf2KP2W3vMfmeP2+/tCXvSnrI/2NP2R3vGnrXn7E/2vP3ZXrC/2Is2XDq5v/TxToYMZaAMlIkyURbKQlkpK2WjbJSgBGWn7JSDclBOykm5KTflpbyUj/LRJUxM+Sk/JSlJBakgpVAKFabC5MlTMSpGxak4laASVJJKUikqRaWpNJWlsnQH3UF30p1UkSrSXXQXVaEqVI2qUXWqTjWoBtWkmlSLalFtqk11qA7VpbpUj+pRfapPDagBNaSG1JgaU1NqSs2oGTWn5tSSWlIrakWtqTW1oTbUltpSO2pH7ak9daAO1JE6UifqRF2oC3WlrtSNulEqpVJP6km9qBf1oT7Uj/pRf+pPA2gADaSBNJgG0xAaQkNpKA2j4TSC3qKRNIpG0xgaS+NoPI2nCTSBJtJEmkSTaApNoWk0jWbQDJpJM2k2zaY5NIfm0lyaT/NpIS2kRbSI0iiNltASWkpLaTktp5W0klbTalpLa2k9raeNtJE202baSltpG22jHbSDdtEu2kN7aC/tpX20j/bTfjpAB+ggHaRDdIgO02E6QkfoKB2lY3SMjtNxOkEn6BSdotN0ms7QGTpH5+g8/UwX6Be6SIEyucwui7vKZXVXu2zuGvfPcW6Xx+V1N7h8zrqcLtc/xOScS3GFXGFXxHlX1BVzN/8uLu3KuLKunLvDlXd3ugq/i6u7e1wNd6+r6e5z1dzd/xDXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vlRTmvvILXEfu6VumVvuVriVbpVb7db8V60r3Ca32W1xe9ynbpvb7na4nW6X2/1rfGkf+9znbr/7wh1x37iD7kt3yB1zh93Xv8aX9nfMfeeOu+/dCXfSnXI/uNPuR3fGnf11/5f2/oP7xV10wQEjK9ZsOOIMnJEzcWbOwldxVr6as/E1nOBrOTtfxzn4es7JuTg35+G8fAPnY8vEjpljzs8FOMk3ckG+iVO4EBfmIuy5KBfjm7k438Il+FYuybdxKb6dS3MZLsvl+A4uz3dyBa7IlfgursxVuCpX47u5Ot/DNfhersn3cS2+n2vzA1yHH+S6/BDX44e5Pj/CDfhRbsiNuDE34ab8GDfjx7k5t+CW/AS34ie5NT/FbfhpbsvPcDt+ltvzc9yBn+eO/AJ34s7chV/krvwSd+PunMo9uCe/zL24N/fhvtyPX+H+/CoP4Nd4IA/iwfw6D+E3eCi/ycN4OI/gt3gkj+LRPIbH8jgez2/zBH6HJ/K7PIkn8xSeytN4Os/g93gmz+LZ/D7P4Q94Ls/j+byAF/KHvIgXcxp/xEv4Y17Ky3g5r+CVvIpX8xpey+t4PW/gjbyJN/MW3sqf8Dbezjt4J+/i3byHP+W9/Bnv4895P3/BB/gvfJC/5EP8FR/mr/kIf8NH+Vs+xt/xcf6eT/BJPsU/8Gn+kc/wWT7HP/F5/pkv8C98kQNDjLGKdWziKM4QZ4wzxZnjLPFVcdb46jhbfE2ciK+Ns8fXxTni6+Occa44d5wnzhvfEOeLbUyxizmO4/xxgTgZ3xgXjG+KU+JCceG4SOzjonGx+Oa4eHxLXCK+NS4Z3xaXim+PS8dl4kfuKxffEZeP74wrxBXjSvFdceW4Slw1rhbfHVeP74lrxPfGNeP74hLx/XHt+IG4TvxgXDd+KK4XPxzXjx+JG8SPxg3jRnHjuEncNH4sbhY/HjePW8Qt4yfiVvGTcev4qbhN/HTcNn7mD4+nxj3invHL8ctxCPfq+ckFyYXJD5OLkouTacmPkkuSHyeXJpcllydXJFcmVyVXJ9ck1ybXJdcnNyQ3JjclNye3JEOolhE8euW1Nz7yGXxGn8ln9ln8VT6rv9pn89f4hL/WZ/fX+Rz+ep/T5/K5fR6f19/g83nryTvPPvb5fQGf9Df6gv4mn+IL+cK+iPe+qC/mm/imvqlv5h/3zX0L39I/4Z/wT/on/VP+Kf+0b+uf8e38s769f8538M/75/0LvpPv7Lv4F31X/5Lv5rv7VJ/qe/qevpfv5ftE4Pv5fr6/7+8H+AF+oB/oB/vBfogf4of6oX6YH+ZH+BF+pB/pR/vRfqwf68f78X6Cn+An+ol+kp/kp/gpfpqf5mf4GX6mn+ln+9l+TsocP9fP9fP9fL/QL/SL/CKf5tP8Er/EL/VL/XK/3K/0K/1qv9qv9Wv9er/eb/Qb/Wa/2W/1W/02v83v8Dv8Lr/L7/F7/F6/1+/z+/x+v98f8Af8QX/QH/Jf+cP+a3/Ef+OP+m/9Mf+dP+6/9yf8SX/K/+BP+x/9GX/Wn/M/+fP+Z3/B/+Iv+uDHJ95OTEi8k5iYeDcxKfPkxJTE1MS0xPTEjMR7iZmJWYnZifcTcxIfJOYm5iXmJxYkFiY+TCxKLE6kJT5KLEl8nFiaWJZYnliRWJlYlQjhhm1xyB8KhGS4MRQMN4WUUCgUDkWCD0VDsXBzKB5uCSXCraFkuC2UCreH0qFMKBseDQ1Do9A4NAlNw2OhWXg8NA8tQsvwRGgVngytw1OhTXg6tA3PhHbh2dA+PBc6hOdDx/BC6BQ6hy7hxdA1vBS6he4hNfQIPcPLoVfoHfqEvqFfeCX0D6+GAeG1MDAMCoPD62FIeCMMDW+GYWF4GBHeCiPDqDA6jAljw7gwPrwdJoR3wsTwbpgUJocpYWqYFqaHGeG9MDPMCrPD+2FO+CDMDfPC/LAgLAwfhkVhcUgLH4Ul4eOwNCwLy8OKsDKsCqvDmrA2rAvrw4awMWwKm8OWsDV8EraF7WFH2Bl2hd1hT/g07A2fhX3h87A/fBEOhL+Eg+HLcCh8FQ6Hr8OR8E04Gr4Nx8J34Xj4PpwIJ8Op8EM4HX4MZ8LZcC78FM6Hn8OF8Eu4+OvfrHW/UjfRhRBCCCH+Y6T+wfEe/+J76m/jkp4AcPX2PId/e1wDwMacf533VnlbJQDg6e4dH/r7qFw5NfXvj7tUQ1RgHgAkLudngMvxMmgJT0IbaAHF4e+/vvqt3qrzef6D9ZO3AWT5TU4muBxfXv+Wf7n/3mrUnD9cfx5ASoHLOZnhcnx5/RL/l/VzNfuD9TN/OR6g+W9yssLl+PL6xeBxeAba/MNPCiGEEEIIIYQQf9VblW3/R9e3l67P85rLORnhcvzb63MhhBBCCCGEEEL87/Rc5y5PPdamTYv2Mvmfn1T8b2ftljbJ5MpMrvAbkxBCCCGEEOJPd/mk/0pXIoQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCpF//P/6d2JXeoxBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCHGl/Z8AAAD//5fNKfo=") creat(&(0x7f00000009c0)='./bus\x00', 0xf2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2008800, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r4, &(0x7f0000004480)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x2000084c, &(0x7f00000002c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r7, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r8, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000008740)="$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") lchown(&(0x7f0000009c40)='./file0\x00', 0xee00, 0x0) syz_fuse_handle_req(r4, &(0x7f00000064c0)="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", 0x2000, &(0x7f00000084c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008580)={0x20, 0x0, 0x8f31, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f00000085c0)={0x50, 0x0, r5, {0x7, 0x2b, 0xfffffffe, 0x32404004, 0x0, 0xfffe, 0x6, 0xffffffff, 0x0, 0x0, 0x1, 0x100}}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000008640)='./file0\x00', 0x101081, 0x30) pipe2$9p(&(0x7f0000008680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r11, &(0x7f00000086c0)={0x7, 0x1b, 0x2}, 0x7) write$P9_RSETATTR(r11, &(0x7f0000008700)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r10, 0x0, r9, 0x0, 0x20000000000002, 0xa) sendmmsg$unix(r0, &(0x7f0000000440), 0x0, 0x40001) mount(&(0x7f0000000a40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000a80)='./bus\x00', 0x0, 0x5000, 0x0) r12 = open(&(0x7f0000000ac0)='./bus\x00', 0x8000, 0xa0) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000400)='./file2\x00', 0x2000000, &(0x7f0000000440)=ANY=[], 0x1, 0x20f, &(0x7f0000000480)="$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") r13 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x2000, 0x28) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r13, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) ioctl$LOOP_SET_STATUS64(r12, 0x4c04, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x4, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28300000000000000010000000000000000000000000800", [0x8]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file1\x00', 0x0) 2m29.596463401s ago: executing program 2 (id=92): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r0], 0x0, 0x0}, 0x94) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f0000000600)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0), 0x82, &(0x7f0000002680)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'resgid'}}, {@dont_measure}, {@obj_type={'obj_type', 0x3d, 'K\''}}]}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x49, 0x0, &(0x7f0000000300)="000a00000000000009c37ce5aeb09039eca629aa37c9996c6aed54c6726b059d37adfe6325d94155a31d200a448e2590af3929f10cf44e89be8999064acce0b84227596ad57732a298", 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000006bc0)='ext4\x00', &(0x7f0000006c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000076c0)={[{@usrjquota}, {@abort}, {@resgid}]}, 0x1, 0x474, &(0x7f0000006d80)="$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") 2m29.01405847s ago: executing program 2 (id=94): r0 = timerfd_create(0x9, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000002"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc45, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0xffffffffffffff47, 0x10, 0x8, 0x0, 0x0}}, 0x64) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000880, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2, 0x28a, &(0x7f0000000740)="$eJzs3c1qA1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE7hx6/O4EV/AB1Dc2YU4ks7kTyctkbQp+n2bHs69J/fM3KHtZm4+eWVwfnpxdXbz5c/RbCaxdRAHcZtEJ7Zi4uuo9NOv1XkA4Jm7zfP4LS80itT14oz6ksp069GbAwAexfzf/033AgA8jfc/+PCdw+Pjo/eyrBkx+GbYTaL4WYwfnsVn0Y9e7EU7/ojIp4r4rbePjyLNxjrx2mA07I4rBx//UH7+4S8Rd/X70Y5Odf1+VpirHw279XihXP+gH713v492vFRd/8as/jYv66O7Ha+/Otf/brTjx0/jIvpxGsX/OpP6r/az7M3829+/+GicHdcno2G3EacLdyqvPfXeAAAAAAAAAAAAAAAAAAAAAADw37WbTXUWz9+ZHPx/z/g95wON5s7n2cuyLE+K+bP6NF5OI93ktQMAAAAAAAAAAAAAAAAAAMBzcXX9+flJv9+7XGswea2/Yij+XMw0ImLJ56QPr7WzaodRK1vrJxGrXVc9GneVD0+urXjHWuN+epdJGmvbgiSZZlrzQztRrDXOtIpgLrPaWt/9c+OacRdMnq7zk2TZ5k6CZtVDsoYgr3j8akurtv+eaZVXUDG5dc/q2y/+q57z9pKhJCLq05tZDrWqJ9fXew+f7ncQAAAAAAAAAAAAAAAAAABQmL30WzF4s4GGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGADZt//v0IwKouXzclr4yCNMrPhSwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/4K8AAAD//wVfaYM=") syz_mount_image$fuse(0x0, &(0x7f0000000a00)='./file0\x00', 0x800, 0x0, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000a40)='./file0/file0\x00', 0x8000, 0x103) syz_usb_connect(0x4, 0xb3, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009020000000e0200000e240101470081000200000001001b240401", @ANYRES32=r0, @ANYRESOCT=r0], 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @broadcast}, &(0x7f0000000040)=0xc) 2m29.01376823s ago: executing program 33 (id=94): r0 = timerfd_create(0x9, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000002"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc45, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0xffffffffffffff47, 0x10, 0x8, 0x0, 0x0}}, 0x64) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000880, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2, 0x28a, &(0x7f0000000740)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000a00)='./file0\x00', 0x800, 0x0, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000a40)='./file0/file0\x00', 0x8000, 0x103) syz_usb_connect(0x4, 0xb3, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009020000000e0200000e240101470081000200000001001b240401", @ANYRES32=r0, @ANYRESOCT=r0], 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @broadcast}, &(0x7f0000000040)=0xc) 2m16.360464076s ago: executing program 3 (id=196): unshare(0x6020400) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002500), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002580)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000002600)="8bcceb216f624c06f5ff0700000000008100", 0x12}], 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='cgroup\x00') read$FUSE(r3, &(0x7f00000004c0)={0x2020}, 0x2054) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000100)={0x11000, 0x3}) ioctl$int_out(r6, 0x2, &(0x7f0000000140)) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x62, 0x0, {0x5, 0x4, 0x0, 0x0, 0xfffc, 0x65, 0x0, 0x0, 0x1, 0x8, @loopback, @remote}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x4000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x7}}}}}, 0x0) 2m16.32147966s ago: executing program 3 (id=198): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000c000000ffffffff01000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x200, r0}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x2000000, 0x11, 0x0, &(0x7f00000005c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) close_range(r4, 0xffffffffffffffff, 0x2) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x174, r6, 0x87, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x58}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="b00fbfa67296"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @key_params=[@NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "5abe092c8a166cab2c618fd65b"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4f57d1327f0151a0b0f3c3ce52"}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f8b4ebcc2eb6afd9ddc136e3f7"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e6730f4c00"}], @NL80211_ATTR_MAC={0xa, 0x6, @random="44a5418b1f45"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x174}}, 0x4) (async) fgetxattr(r4, 0x0, 0x0, 0x0) (async) r7 = fcntl$dupfd(r3, 0x0, r3) (async) write$cgroup_subtree(r5, &(0x7f0000000a00)={[{0x2d, 'cpu'}, {0x0, 'blkio'}, {0x2b, 'net_cls'}, {0x2b, 'pids'}, {0x2b, 'memory'}, {0x2d, 'blkio'}, {0x2b, 'blkio'}, {0x2d, 'perf_event'}, {0x2b, 'net_prio'}, {0x2d, 'cpuset'}]}, 0x4f) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x23, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xe) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000e80)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000ec0)={r8, r10, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x5}}, 0x30) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f00)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x4, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x990e}, [@call={0x85, 0x0, 0x0, 0x5b}]}, &(0x7f0000000980)='syzkaller\x00', 0x7f, 0xe4, &(0x7f0000000ac0)=""/228, 0x41000, 0x13, '\x00', r10, 0x25, r11, 0x8, &(0x7f0000000f40)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x3, 0x6, 0x0, 0x10000}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000fc0)=[{0x3, 0x3, 0xf, 0x6}, {0x4, 0x4, 0xd, 0x391940e45e00585b}], 0x10, 0x5}, 0x94) sendmmsg(r7, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[{0x10, 0x1, 0x1}, {0x10, 0x3a, 0xf}], 0x20}}, {{&(0x7f0000000dc0)=@qipcrtr={0x2a, 0x3, 0x7fff}, 0x80, 0x0}}], 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f00000009c0)) 2m16.242737078s ago: executing program 3 (id=199): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gre0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="05031600ffff140000004788031c09102c28a632590b0bf6ab6c26c1ed7a2254c30206e9b555f1", 0x27, 0x4004, &(0x7f00000001c0)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) removexattr(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)=@random={'trusted.', 'trusted.overlay.,\xf4origi'}) 2m16.180053284s ago: executing program 3 (id=201): inotify_init() r0 = syz_mount_image$f2fs(&(0x7f0000000440), &(0x7f0000000480)='./file2\x00', 0x800000, &(0x7f00000004c0)=ANY=[], 0x1, 0x5504, &(0x7f0000003e00)="$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") ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r0], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}, 0x40002021) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/resume', 0x141a82, 0x11b) write$cgroup_subtree(r5, 0x0, 0x32600) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x42, 0x2, 0x8, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) read$FUSE(r5, &(0x7f0000001dc0)={0x2020}, 0x2020) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r8, &(0x7f00000003c0)='on', 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) socket$unix(0x1, 0x1, 0x0) r9 = socket(0xa, 0x3, 0xff) bind$inet6(r9, &(0x7f0000000400)={0xa, 0x4c29, 0x6, @mcast2, 0x801}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r7], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xfffffffffffffddc, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m15.479556645s ago: executing program 3 (id=207): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x280028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) r1 = dup(r0) ioctl$UBLK_U_CMD_START_DEV(r1, 0xc0207506, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ptrace$ARCH_GET_GS(0x1e, r2, &(0x7f0000000180), 0x1004) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m15.174236726s ago: executing program 3 (id=210): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x8, 0x9, 0xfffffff9, 0x18, @private2={0xfc, 0x2, '\x00', 0xfe}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x7, 0x40, 0x5, 0x40}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x9, &(0x7f00000001c0)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, 0x0, 0x800) 2m15.073288726s ago: executing program 34 (id=210): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x8, 0x9, 0xfffffff9, 0x18, @private2={0xfc, 0x2, '\x00', 0xfe}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x7, 0x40, 0x5, 0x40}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x9, &(0x7f00000001c0)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, 0x0, 0x800) 1m5.772970046s ago: executing program 4 (id=264): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x80, 0x0, 0x55, 0x0, 0x0, 0x3, 0x1f}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}]}, 0x24}, 0x1, 0x0, 0x0, 0xd5}, 0x44004) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x401, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x32d26, 0x1cdb5}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e27}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048004}, 0x200440c4) 1m5.6377369s ago: executing program 4 (id=266): syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x208008de, &(0x7f00000001c0)=ANY=[], 0x80, 0x150a, &(0x7f00000003c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000001900)='./file1\x00', 0x42, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000340)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc2, 0x0, 0x0, 0x0, 0x0, 0xc2fc}, &(0x7f0000000300)=0x83) add_key(&(0x7f0000000380)='keyring\x00', &(0x7f0000001dc0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000001e00)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001e40)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001e80)=0x2) sched_setscheduler(r5, 0x1, &(0x7f0000001ec0)=0x7) r6 = creat(&(0x7f0000001940)='.\x02\x00', 0x196) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_wait(r6, &(0x7f0000001980)=[{}], 0x1, 0x7ff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44040, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000001f40)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000001fc0), 0x651, 0x0) recvmmsg(r7, &(0x7f0000002000), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mincore(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, &(0x7f0000002040)=""/163) syz_ublk_setup_queues(0xffffffffffffffff, r3, &(0x7f0000001ac0)={0x0, 0x466, 0x10, 0x1, 0x7f}, &(0x7f0000001b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bffb, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) pidfd_getfd(r6, r4, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xb, 0x7}}}, 0x24}}, 0x0) 1m5.456309818s ago: executing program 4 (id=267): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000002000000000001050000000000000000000000010000050000000000000000020000000000000000000000da00"], &(0x7f0000000340)=""/142, 0x52, 0x35b, 0x1}, 0x20) 1m5.392092065s ago: executing program 4 (id=268): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x4f}, {0x0, 0x0, 0x0, 0x7}}, {{@in=@local, 0x4d5, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x3, 0x2}}, 0xe8) (async, rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000680)={@mcast1, 0x0, 0x0, 0x1, 0x3, 0x2, 0x3c}, 0x20) (rerun: 64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x2, &(0x7f0000000880)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @exit], &(0x7f00000008c0)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000900)=""/229, 0x0, 0x13}, 0x94) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) (rerun: 64) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) (async) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000580)=0x13) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f00000005c0)={0xff83, 0x100, 0x8, 0x7fff, 0xfe, "db2d416fbecfb84b5452b768e08ee2df361089"}) (async, rerun: 32) dup(r0) (async, rerun: 32) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000600)=0x6f) (async) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x81000, 0x0) (async) mount$bind(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x18dc4d, 0x0) (async) umount2(&(0x7f0000000300)='./file0\x00', 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000340)={0xa0c, 0xfb, 0x0, 0xf83f, 0x4, "80c90a0080821d00"}) (async, rerun: 32) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000380)=0xa) (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010204000000270b1065c550d5ee", @ANYRES32=0x0, @ANYBLOB="000000008000000014001680100001800c000700ffffffff0800000008001b0000000000"], 0x3c}}, 0x0) (async) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$OCFS2_IOC_INFO(r7, 0x80106f05, 0x0) (async) getpeername$unix(r6, &(0x7f0000000440)=@abs, &(0x7f00000004c0)=0xffffffffffffff82) 1m5.354707018s ago: executing program 4 (id=270): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000300), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x93052, r0, 0xb2c34000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x1e9100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000003c0), 0x208e24b) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xffffe000) pipe(&(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001800)=[{&(0x7f0000001840)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r4 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r4, 0x10e, 0x9, &(0x7f0000000780)=""/4096, &(0x7f0000001780)=0x1000) 1m4.911913013s ago: executing program 4 (id=271): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000100)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000140)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") openat(0xffffffffffffff9c, 0x0, 0x181441, 0x148) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000940)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000640)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000740), 0x651, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000780)={0x0, &(0x7f0000000940)}, 0x10) getsockopt$sock_buf(r4, 0x1, 0x1a, &(0x7f0000001240)=""/4096, &(0x7f0000002240)=0x1000) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) recvmmsg(r2, &(0x7f0000000780), 0x4000087, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000800)={0x2, 0x4e28, @empty}, 0x10, 0x0}}], 0x1, 0x2400c801) syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x18000, &(0x7f00000008c0)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0xff, 0x304, &(0x7f0000000f00)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000980)='.\x00', 0x8880, 0x1c7) r5 = syz_open_procfs(0x0, &(0x7f00000009c0)='fd/3\x00') r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000a00)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) listen(r6, 0x1) mount$9p_fd(0x0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000000b00)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x8, &(0x7f0000000c00)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) unlink(&(0x7f0000000c40)='./file0/file1\x00') 1m4.906288753s ago: executing program 35 (id=271): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000100)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000140)="$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") openat(0xffffffffffffff9c, 0x0, 0x181441, 0x148) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000940)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000640)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000740), 0x651, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000780)={0x0, &(0x7f0000000940)}, 0x10) getsockopt$sock_buf(r4, 0x1, 0x1a, &(0x7f0000001240)=""/4096, &(0x7f0000002240)=0x1000) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) recvmmsg(r2, &(0x7f0000000780), 0x4000087, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000800)={0x2, 0x4e28, @empty}, 0x10, 0x0}}], 0x1, 0x2400c801) syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x18000, &(0x7f00000008c0)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0xff, 0x304, &(0x7f0000000f00)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000980)='.\x00', 0x8880, 0x1c7) r5 = syz_open_procfs(0x0, &(0x7f00000009c0)='fd/3\x00') r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000a00)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) listen(r6, 0x1) mount$9p_fd(0x0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000000b00)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x8, &(0x7f0000000c00)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) unlink(&(0x7f0000000c40)='./file0/file1\x00') 47.060162814s ago: executing program 8 (id=434): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) setpriority(0x0, 0x0, 0x2a14b58) (async) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2}, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000200)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x3938700}}, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x1ffffffff000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f00000002c0)='./bus\x00', 0x38880, &(0x7f0000000300), 0x1, 0x51a, &(0x7f0000000340)="$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") (async) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000880)={0x9}) (async) syz_clone3(0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newnexthop={0x40, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x1}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8}]}]}, 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newnexthop={0x34, 0x68, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x2}]}]}, 0x34}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xf, 0x13, 0x7fff8000}]}) (async) socket$igmp(0x2, 0x3, 0x2) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r3, &(0x7f0000000080)={0xa, 0xfffd, 0xffffffff, @local, 0x6}, 0x1c) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x1000a) (async) sendfile(r3, r4, &(0x7f0000000140)=0x11, 0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000023c0), 0x42, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x2, 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000002480), 0x101002, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x80, 0x200000e, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 47.059825923s ago: executing program 8 (id=435): capset(&(0x7f0000000400)={0x20071026}, &(0x7f0000000440)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e0000"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newnexthop={0x84, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_RES_GROUP={0x4c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x80000001}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x200}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8001}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x2}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8001}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1}, {0x2}]}, @NHA_RES_GROUP={0x4}]}, 0x84}}, 0x0) (async) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e21, @local}, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x8413, &(0x7f0000000100)={[{@noload}, {}, {@nolazytime}, {@acl}, {@data_err_ignore}, {@dioread_nolock}, {@usrjquota}, {@delalloc}, {@discard}, {@resgid}, {@nodelalloc}]}, 0x0, 0x56a, &(0x7f0000000680)="$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") (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x3f00, 0xa000, 0x0, 0x11, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) (async) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000580)=0xfefffff9, 0x4) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='attr/fscreate\x00') pwritev2(r3, &(0x7f0000000c00)=[{&(0x7f0000000c40)="48df", 0x2}], 0x1, 0x7fff, 0x7, 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000005c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000640), 0x4) 46.996365s ago: executing program 8 (id=436): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x13) r1 = openat$kvm(0x0, &(0x7f0000000600), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setitimer(0x1, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x11, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc) timer_create(0xfffffff9, 0x0, &(0x7f0000000180)=0x0) prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x2000000000000000, 0xfffffffffffffffb}, 0x0) personality(0x619641b6fb4b8591) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000003c0)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000400)={0x0, 0xfffffffe, 0x4000, 0x0, 0x1f4}, 0x0, 0x1, 0x0, 0x0) timer_settime(r5, 0x1, &(0x7f0000000200)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000240)={0x2, 0x0, @local}, 0x16) connect$inet(r9, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, 0x0, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x800001d, 0x1c) r10 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$x86(r10, &(0x7f0000000640)={0x0, &(0x7f0000001100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x0, @unmapped=0xf0000000}}, @nested_vmlaunch={0x12f, 0x18}], 0x70}) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0xd07, 0x70bd28, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, 0x8200, 0x4602}, [@IFLA_MTU={0x8, 0x4, 0xfffffffa}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}}, 0x4000080) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x82, &(0x7f0000000880)=ANY=[@ANYBLOB='test_dummy_encryption=isable,noacl,fsync_mode=strict,jqfmt=vfsold,noquota,fsync_mode=posix,usrjquota=ext4\x00,resuid=\x00'/129, @ANYRESHEX=r5, @ANYRESHEX=r11], 0x1, 0x105be, &(0x7f0000001180)="$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") ioctl$KVM_RUN(r11, 0xae80, 0x0) 46.624931337s ago: executing program 8 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000a00)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000019a00)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000019a40)={0x2, 0x4e20, @loopback}, 0x10) clock_gettime(0xfffffffffffffffb, 0x0) getgroups(0x0, &(0x7f0000019a80)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f0000000100)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}]}, 0x1, 0x453, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x0, &(0x7f0000000940)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000200)) syz_mount_image$fuse(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', 0x14a0, &(0x7f0000000a00)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x183042, 0x15) 46.208755069s ago: executing program 8 (id=439): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x8d) openat$incfs(r1, &(0x7f0000000040)='.pending_reads\x00', 0x22000, 0x1b4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0xc3, 0x0, 0x4, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x8, 0x7, 0x0, 0x10}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x1c, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x88, 0x4, 0x6, 0x2d2f, 0xd}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @jmp={0x5, 0x0, 0xb, 0x4, 0x5, 0x100, 0xfffffffffffffff7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0x401, 0xf9, &(0x7f0000000480)=""/249, 0x41000, 0x3, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000680)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x10, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r4, 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x23, &(0x7f0000000880)=ANY=[@ANYBLOB="bf16000000000000620af0ff7f000001620af4ff7f000001620af8ff12344e20620ad8ff12344e20620adcff00000000620ae0ff00000000620ae4ff50021000620ae8ff00000000620ac0ff45000028620ac4ff00000000620ac8ff40060000620accff7f000001620ad0ff7f000001bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb705000000000000850000005400000015000b0000000000bf07000000000000bf71000000000000bfa200000000000007020000c0ffffffb703000014000000bfa400000000000007040000d8ffffffb705000014000000850000006e000000bf710000000000008500000056000000b70000000000000095"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r5, 0x0, 0xe, 0x0, &(0x7f0000000a80)="000000bbf8e9d0b733d59e5f4aa0", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b80)={@cgroup=r1, 0x31, 0x0, 0xbe, &(0x7f0000000240)=[0x0], 0x1, 0x0, &(0x7f0000000ac0)=[0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0], &(0x7f0000000b40)=[0x0]}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x0, 0xe, 0x0, &(0x7f0000000300)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x8d) (async) openat$incfs(r1, &(0x7f0000000040)='.pending_reads\x00', 0x22000, 0x1b4) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0xc3, 0x0, 0x4, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x8, 0x7, 0x0, 0x10}}) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x1c, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x88, 0x4, 0x6, 0x2d2f, 0xd}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @jmp={0x5, 0x0, 0xb, 0x4, 0x5, 0x100, 0xfffffffffffffff7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0x401, 0xf9, &(0x7f0000000480)=""/249, 0x41000, 0x3, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000680)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x10, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) (async) listen(r4, 0x5) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x23, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r5, 0x0, 0xe, 0x0, &(0x7f0000000a80)="000000bbf8e9d0b733d59e5f4aa0", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10}, 0x50) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b80)={@cgroup=r1, 0x31, 0x0, 0xbe, &(0x7f0000000240)=[0x0], 0x1, 0x0, &(0x7f0000000ac0)=[0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0], &(0x7f0000000b40)=[0x0]}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x0, 0xe, 0x0, &(0x7f0000000300)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 45.922001958s ago: executing program 8 (id=445): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xcd20}, 0xc000) 45.921746628s ago: executing program 36 (id=445): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xcd20}, 0xc000) 26.160514242s ago: executing program 0 (id=577): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./sys\x00', &(0x7f00000006c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000740)=ANY=[@ANYRESHEX], 0x8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d03696269b7, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x400452c8, &(0x7f0000000080)="00000000ecff") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r1, &(0x7f0000000140), 0xc) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x15) mount(0x0, &(0x7f0000000180)='./dev\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/rfcomm0\x00', 0x802, 0x0) setresuid(0x0, 0xee00, 0x0) io_uring_setup(0x4b63, &(0x7f0000000780)={0x0, 0xbfffeffb, 0x100, 0x0, 0x3cf}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000280)={0x3, 0x46a79f18, 0x200, 0xe, 0xa, "0926158591a0c10a32844dfcfd8930e6d425fb"}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000300)={&(0x7f0000000340)=@hci, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)='s', 0x1}], 0x1, 0x0, 0x0, 0x8}, 0x4004) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000005c0), 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000017c0), 0x80800, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001800)={&(0x7f0000001840)=ANY=[@ANYBLOB="9feb0100180000000000000030000200000000000000000000040000000000000000020000050000000000000000010000000000000000002000010000adab6c5b459e97"], 0x0, 0x4a}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000018c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000001900)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r5, 0x0) 24.895772309s ago: executing program 0 (id=582): r0 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x83) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file1\x00', 0x208040, &(0x7f0000000480)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES32], 0x3, 0x257, &(0x7f0000001640)="$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") syz_io_uring_setup(0x23e2, &(0x7f00000018c0)={0x0, 0xd703, 0x4, 0x2, 0x12a, 0x0, r1}, &(0x7f0000001940), &(0x7f0000001980), &(0x7f00000019c0)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_ublk_add_dev(r1, 0x0, 0x0, r3, &(0x7f0000001a80)={0x2e, 0x8, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, r4, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000001b00)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x158104100, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r6, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000002c0), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f0000000300), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) getdents64(0xffffffffffffffff, &(0x7f0000001b40)=""/4096, 0x1000) futex(0x0, 0x4, 0x0, 0x0, 0x0, 0x2) 22.944668076s ago: executing program 0 (id=590): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0x7101}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000002c0)={0x2000000a}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) gettid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000005c0)={0x1, 0x0, 0x54000, 0x2000, &(0x7f0000fa4000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000600)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f0000000640)={0x1}) prctl$PR_GET_THP_DISABLE(0x2a) timer_create(0x4, &(0x7f00000001c0)={0x0, 0x12, 0x0, @thr={&(0x7f00000003c0)="c3fb7956fd8e1d42be4d97d31a87ee8b3eea56968a1c68b5ed9f1533f7b1bf9a493f2263576978696a866f446b1086c01471acd473623910e14d1276593460b6cb3b00e59ca3d770fe0a837d3dfcca85c7dd0a2100631c16b78ba9ea914dff96329eb09f89db2a436224ef78758e8e7eedf3b4aa04c8f60b61f77f4459b820c351035922bd6eecf8c316952da1e436de0dfecee8518af5d441ef9661236fe42843dbaa77510e5aa726f3dfa710be087271b0c92415ad3c3a0152de5205529a08b8a9efb50f6029d5c1", &(0x7f00000004c0)="2fb6beed560737d46b77bfbef4b66ad738148d7c95afc50e45fd086f099f5324d78fe56c0023da7018fd67f291419254a540a45a2cc3a32ade0e3ed2f48cd3a0724f4e6003bf4f51401210e3de81fa4392ff201405c1e0979c5704634bfbb2ebee01158bb42ee79827c5b6acb66e9a3e9f02772b561d0a4e1958d334c25359f2aab8bc53f32e8d2dcc1af8b65cffb23eb6d80b661f6766fc3063"}}, &(0x7f0000000380)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x0, 0x3, 0x3ed4, 0xffffffffffff7fff}) pipe(&(0x7f0000000180)) timer_settime(r4, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000340)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r4, 0x1, &(0x7f0000000240), 0x0) r5 = getuid() setresuid(0xffffffffffffffff, r5, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x2c}}, 0x0) close(0xffffffffffffffff) 22.90391822s ago: executing program 0 (id=591): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000000300)="$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") creat(&(0x7f0000006a80)='./bus\x00', 0xf2) (async) creat(&(0x7f0000006a80)='./bus\x00', 0xf2) socket$inet6(0xa, 0x80001, 0x0) (async) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) (async) fsopen(0x0, 0x0) inotify_init() mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) (async) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) (async) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000640)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000680)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x7, 0x7ffc0002}]}) io_setup(0x2, &(0x7f0000000140)=0x0) io_destroy(r3) (async) io_destroy(r3) capset(&(0x7f0000000280)={0x20080522}, &(0x7f00000002c0)={0x200002, 0x200003, 0x803, 0x4, 0x7}) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0xc, 0xa, 0x0, 0x1000}, 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000000) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000180)=0xb, 0x4) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000180)=0xb, 0x4) syz_mount_image$ext4(0x0, &(0x7f0000006ac0)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) mount(&(0x7f0000006b00)=@loop={'/dev/loop', 0x0}, &(0x7f0000006b40)='./bus\x00', 0x0, 0x5000, 0x0) r5 = open(&(0x7f0000006b80)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000006bc0)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) rmdir(&(0x7f0000006cc0)='./file0\x00') 21.253876037s ago: executing program 0 (id=605): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0x4, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x200000, &(0x7f00000001c0)={[{@dioread_nolock}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000010c0)="$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") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001640)='rdma.current\x00', 0x275a, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000008500000007000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000089cdc832850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000380)="b9ff033168000038cfe20f2c7a706d", 0x0, 0x240, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000a40)={'#! ', '', [{0x20, '['}], 0xa, "31776f4c27f7b6ee010018aaa1b925bc05d4677deb7eebf38a49690fe9513474748f1fca24ecb6152e1c8d59365a0dd30475d2f790041c07465947ee74477bee6441f09dd76ec4dce737139c9dccd2f52fcb21e14ef904a7b9168795bb27432c022b0ebc2ae48e1f002eb7c232ec08174d2bc3fe5324147f833dc13152172819d627cc693b6c466f33c29a02c68dfdc0c4ab0c03bb06a2602400000000"}, 0xa3) (async, rerun: 64) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (rerun: 64) add_key(&(0x7f00000003c0)='asymmetric\x00', 0x0, &(0x7f0000000400)="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"/1369, 0x559, r2) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 21.248567607s ago: executing program 0 (id=610): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB="00646d61c6d62d303030303030303030303030303135322c696f433161720300000069736f380000000000", @ANYRES16=r3, @ANYRES64=r0, @ANYRES32=r1, @ANYRESHEX=r1], 0x81, 0x14f5, &(0x7f0000002d00)="$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") syz_open_procfs(r1, &(0x7f0000000000)='mountstats\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x4076cbba9945d516, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x5051}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000370429bd7000fedbdf2500000000", @ANYRES32=r7, @ANYBLOB="890c020044cc0400300012800b00010069703667726500002000028006"], 0x50}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) chown(&(0x7f0000000340)='./file0/file0\x00', r2, 0x0) 21.099445452s ago: executing program 37 (id=610): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB="00646d61c6d62d303030303030303030303030303135322c696f433161720300000069736f380000000000", @ANYRES16=r3, @ANYRES64=r0, @ANYRES32=r1, @ANYRESHEX=r1], 0x81, 0x14f5, &(0x7f0000002d00)="$eJzs3AlwVUX2MPA+3X0hxIjPiCyBPn0uPDFAExERWURAFhERERER2URAxIiIiIAKAdlEDIgIiCwRkSUgILLEEJF93/fNyCBGREQ2ARHor3D8DzN/5/935pv5Pqom51fVlT6595zXnZPKu/dWvXzffXidZnVrNiEi8S+BP39JEULECCEGCyFuEEIEQogK8RXirxzPpyDlX3sR9u/1aPq1XgG7lrj/uRv3P3fj/udu3P/cjfufu3H/czfuf+7G/WcsN9syo8iNPHLv4Of/uRm///8HySk7/ut1ZW/u8U+kcP9zN+7/f5y8/8zJ3P/cjfufu3H/czfu/3++Gv/LMe5/7sb9Zyw3u9bPn3lc23Gtf/8YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOUO5/1VWgjxX/NrvS7GGGOMMcYYY4z9+/i813oFjDHGGGOMMcYY+38PhBRKaBGIPCKviBH5RKy4TsSJ60V+cYOIiBtFvLhJFBA3i4KikCgsiogEUVQUE0agsIJEKIqLEiIqbhElxa0iUZQSpUUZ4URZkSRuE+XE7aK8uENUEHeKiuIuUUlUFlVEVXG3qCbuEdVFDVFT3Ctqidqijqgr7hP1xP2ivnhANBAPiobiIdFIPCwai0dEE/GoaCoeE83E46K5eEK0EC1FK9FatPm/yn9FvCpeE71FH5Ei+op+4nXRXwwQA8UgMVi8IYaIN8VQ8ZZIFcPEcPG2GCHeESPFu2KUGC3GiPfEWPG+GCfGiwliokgTH4hJ4kMxWXwkpoipYpqYLtLFDDFTfCxmidlijvhEzBWfinlivlggFooM8ZnIFItElvhcLBZfiCViqVgmlosVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLHWKn2CV2iz1ir9gn9osD4kuRLb76J/PP/bf8HiBAgAQJGjTkgTwQAzEQC7EQB3GQH/JDBCIQD/FQAApAQSgIhaEwJEACFINigIBAQFAcikMUolASSkIiJEJpKA0OHCRBEpSD26E8lIcKUAEqQkWoBJWhMlSFqlANqkF1qA41oSbUglpQB+rAfXAf3A/1oT40gAbQEBpCI2gEjaExNIEm0BSaQjNoBs2hObSAFtAKWkEbaANtoS20g3bQATpAR+gInaATJEMydIbO0AW6QFfoCt2gG3SH7tADekJPeAVegdfgNegDQvSFftAP+kN/GAiDYBC8AUPgTXgT3oJUGAbD4W14G96BkXAWRsFoGANjoJp8H8bBeCA5EdIgDSbBJJgMk2EKTIWpMB3SYQbMhJkwC2bDbPgE5sKn8CnMh/mwEDIgAzJhEWRBFiyGc7AElsIyWA4rYCWsgNWwBlbDOlgP62AjbITNsBm2wlbYDtthJ+yE3bAb9sJe2A/7IRWyIRsOwkE4BIfgMByGHMiBI3AEjsJROAbH4DgchxNwEk7BSTgDZ+AsnIPzcB4uwAW4CC8lfNt0d6m1qUJeoaWWeWQeGSNjZKyMlXEyTuaX+WVERmS8jJcFZAFZUBaUhWVhmSATZDFZTKJESTKUxWVxGZVRWVKWlIkyUZaWpaWTTibJJFlOlpPlZXlZQd4pK8q7ZCVZWbZ3VWVVWU12cNVlDVlT1pS1ZG1ZR9aVdWU9WU/Wl/VlA9lANpQNZSP5sGws+8JAeFRe6UwzOQyay+HQQraUrWRr+Q48KdvKkdBOtpcd5NNyNIyCTrKtS5bPyc5yHHSRL8jx8KLsJidCd/my7CF7yl7yFfmqbOd6yz5yCvSV/eR06C8HyIFykJwFteWVjtWRb8lUOUwOl2/LhfCOHCnflaPkaDlGvifHyvflODleTpATZZr8QE6SH8rJ8iM5RU6V0+R0mS5nyJnyYzlLzpZz5CdyrvxUzpPz5QK5UGbIz2SmXCSz5OdysfxCLpFL5TK5XK6QK+UquVqukWvlOrlebpAb5Sa5WW6RW+U2uV3ukDvlLrlb7pF75T65Xx6QX8ps+ZU8KP8kD8mv5WH5jcyR38oj8jt5VH4vj8kf5HH5ozwhT8pT8rQ8I3+SZ+U5eV7+LC/IX+RFeUlell4KBUoqpbQKVB6VV8WofCpWXafi1PUqv7pBRdSNKl7dpAqom1VBVUgVVkVUgiqqiimjUFlFKlTFVQkVVbeokupWlahKqdKqjHKqrEpSt6ly6nZVXt2hKqg7VUV1l6qkKqsqqqq6W1VT96jqqoaqqe5VtVRtVUfVVfepeup+VV89oBqoB1VD9ZBqpB5WjdUjqol6VDVVj6lm6nHVXD2hWqiWqpVqrdqoJ1Vb9ZRqp9qrDupp1VE9ozqpZ1Wyek51Vs+rLuoF1VW9qLqpl1R39bLqoXqqXuqSuqy86q36qBTVV/VTr6v+aoAaqAapweoNNUS9qYaqt1SqGqaGq7fVCPWOGqneVaPUaDVGvafGqvfVODVeTVATVZr6QE1SH6rJ6iM1RU1V09R0la5mqIG/VZrzD+R/+Hfyh/766pvVFrVVbVPb1Q61U+1Su9UetUftU/vUAXVAZatsdVAdVIfUIXVYHVY5KkcdUUfUUXVUHVPH1HF1XJ1QJ9XP6rQ6o35SZ9U5dU79rC6oC+ribz8DoUFLrbTWgc6j8+oYnU/H6ut0nL5e59c36Ii+Ucfrm3QBfbMuqAvpwrqITtBFdTFtNGqrSYe6uC6ho/oWXVLfqhN1KV1al9FOl9VJ+rZ/Of+P1tdGt9FtdVvdTrfTHXQH3VF31J10J52sk3Vn3Vl30V10V91Vd9PddHfdXffQPXQv3Uu/ql/VvXVvnaJTdD/9uu6vB+iBepAerN/QQ/QQPVQP1ak6VQ/Xw/UIPUKP1CP1KD1Kj9Fj9Fg9Vo/T4/QEPUGn6TQ9SU/Sk/VkPUVP0dP0NJ2u0/VMPVPP0rP0HD1Hz9Vz9Tw9Ty/QC3SGztCZOlNn6Sy9WC/WS/RSvVQv18v1Sr1Sr9ar9Vq9Vq/X6/VGvVEv0Vv0Fr1Nb9M79A69S+/Se/QevU/v0wf0AZ2ts/VBfVAf0of0YX1Y5+gcfUQf0Uf1UX1MH9PH9XF9Qp/Qp/QpfUaf0Wf1WX1en9cX9AV9UV/Ul/XlK5d9gQxkoAMd5AnyBDFBTBAbxAZxQVyQP8gfRIJIEB/EBwWCm4OCQaGgcFAkSAiKBsUCE2BgAwrCoHhQIogGtwQlg1uDxKBUUDooE7igbJAU3BaUC24Pygd3BBWCO4OKwV1BpaByUCWoGtwdVAvuCaoHNYKawb1BraB2UCeoG9wX1AvuD+oHDwQNggeDhsFDQaPg4aBx8EjQJHg0aBo8FjQLHg+aB08ELYKWQaugddDm31rf+7OFnnK9TR+TYvqafuZ1098MMAPNIDPYvGGGmDfNUPOWSTXDzHDzthlh3jEjzbtmlBltxpj3zNjdMWacGW8mmIkmzXxgJpkPzWTzkZlippppZrpJNzPMTPOxmWVmmznmEzPXfGrmmflmgVloMsxnJtMsMlnmc7PYfGGWmKVmmVluVpiVZpVZbdaYtWadWW82mI1mk9lstpitZpvZbnaYnWaX2W32mL1mn9lvDpgvTbb5yhw0fzKHzNfmsPnG5JhvzRHznTlqvjfHzA/muPnRnDAnzSlz2pwxP5mz5pw5b342F8wv5qK5ZC4bf+Xi/srbO2rUmAfzYAzGYCzGYhzGYX7MjxGMYDzGYwEsgAWxIBbGwpiACVgMi+EVhITFsThGMYolsSQmYiKWxtLo0GESJmE5LIflsTxWwApYEStiJayEVbAK3o134z14D9bAGngv3ou1sTbWxbpYD+thfayPDbABNsSG2AgbYWNsjE2wCTbFptgMm2FzbI4tsAW2wlbYBttgW2yL7bAddsAO2BE7YifshMmYjJ2xM3bBLtgVu2I37IbdsTv2wB7YC3vhq/gq9sbemIIp2A/7YX/sjwNxIA7GwTgEh+BQHIqpmIrDcTiOwBE4EkfiKByNY/A9HIvv4zgcjxNwIqZhGk7CSTgZJ+MUnILTcBqmYzrOxJk4C2fhHJyDc3EuzsN5uAAXYAZmYCZmYhZm4WJcjEuwIy7DZbgCV+AqXIVrcA2uw3W4ATfgJtyEW3ALbsNtuAN34C7chXtwD+7DfXgAD2A2ZuNBPIiH8BAexsOYgzl4BI/gUTyKx/AYHsfjeAJP4Ck8hWfwDJ7Fs3gez+MF/AUv4iW8jB5jrBSx9jobZ6+3+e0NNsbms38dF7ZFbIItaotZYwvaQn8To7U20ZaypW0Z62xZm2Rv+11cyVa2VWxVe7etZu+x1X8X17P32/r2AdvAPmjr2vv+Jm5oH7KN7OO2sX3CNrEtbVPb2jazj9vm9gnbwra0rWxr29E+YzvZZ22yfc52ts//Ls60i+wau9aus+vtPrvfnrc/26P2e3vB/mJ72z52sH3DDrFv2qH2LZtqh/0uHmPfs2Pt+3acHW8n2Im/i6fZ6TbdzrAz7cd2lp39uzjDfmbn2iw7z863C+zCX+Mra8qyn9vF9gu7xC61y+xyu8KutKvs6r+sdbndaDfZzXaP3Wu32e12h91pd9ndv8ZX9nHAfmmz7Vf2iP3OHrJf28P2mM2x3/4aX9nfMfuDPW5/tCfsSXvKnrZn7E/2rD336/6v7P20vWQvW28FAUlSpCmgPJSXYigfxdJ1FEfXU366gSJ0I8XTTVSAbqaCVIgKUxFKoKJUjAwhWSIKqTiVoCjdQiXpVkqkUlSaypCjspREt1E5up3K0x1Uge6kinQXVaLKVIWq0t1Uje6h6lSDatK9VItqUx2qS/dRPbqf6tMD1IAepIb0EDWih6kxPUJN6FFqSo9RM3qcmtMT1IJaUitqTW3oSWpLT1E7ak8d6GnqSM9QJ3qWkuk56kzPUxd6gbrSi9SNXqLu9DL1oJ7UC078+cMP1IdSqC/1o9epPw2ggTSIBtMbNITepKH0FqXSMBpOb9MIeodG0rs0ikbTGHqPxtL7NI7G0wSaSGn0AU2iD2kyfURTaCpNo+mUTjNoJn1Ms2g2zaFPaC59SvNoPi2ghZRBn1EmLaIs+pwW0xe0hJbSMlpOK2glraLVtIbW0jpaTxtoI22izbSFttI22k47aCftot20h/bSPtpPB+hLyqav6CD9iQ7R13SYvqEc+paO0Hd0lL6nY/QDHacf6QSdpFN0ms7QT3SWztF5+pku0C90kS7RZfIkQghlqEIdBmGeMG8YE+YLY8Prwrjw+jB/eEMYCW8M48ObwgLhzWHBsFBYOCwSJoRFw2KhCTG0IYVhWDwsEUbDW8KS4a1hYlgqLB2WCV1YNkwKbwvLhbeH5cM7wgrhnWHF8K6wUlg5fPzBquHdYbXwnrB6WCOsGd4b1gprh3XCuuF9Yb3w/rB++EDYIHwwLB8+FDYKHw4bh4+ETcJHw6bhY2Gz8PGwefhE2CJsGbYKW4dtwifDtuFTYbuwfdghfDrsGD4TdgqfDZPD58LO4fN/eDwl7Bv2C18PXw+9f0AtiC6MZkQ/i2ZGF0Wzop9HF0e/iC6JLo0uiy6ProiujK6Kro6uia6Nrouuj26Iboxuim6Oel83r3DgpFNOu8DlcXldjMvnYt11Ls5d7/K7G1zE3eji3U2ugLvZFXSFXGFXxCW4oq6YMw6ddeRCV9yVcFF3iyvpbnWJrpQr7co458q6JNfatXFtXFv3lGvn2rsO7mn3tHvGPeOedc+651xn97zr4l5wXd2Lrpt7yb3kXnY9XE/Xy73iXnWvud6uj0txKa6f6+f6u/5uoBvoBrvBbogb4oa6oS7Vpbrhbrgb4Ua4kW6kG+VGuTFujBvrxrpxbpyb4Ca4NJfmJrlJbrKb7Ka4KW6am+bSXbqb6Wa6WW6Wm+PmuLmJc908N88tcAtchstwmS7TZbkst9gtdkvcErfMLXMr3Aq3yq1ya9wat86tcxvcBrfJbXJb3Ba3zW1zO9wOt8vtcnvcHrfP7XMH3AGX7bLdQXfQHXKH3GH3jctx37oj7jt31H3vjrkf3HH3ozvhTrpT7rQ7435y6rfnnRfcL+6iu+QuO+/SIh9EJkU+jEyOfBSZEpkamRaZHkmPzIjMjHwcmRWZHZkT+SQyN/JpZF5kfmRBZGEkI/JZJDOyKJIV+TyyOPJFZElkaWRZZHlkRWRlxPui20Jf3JfwUX+LL+lv9Ym+lC/ty3jny/okf5sv52/35f0dvoK/01f0d/lKvrKv4p/wLXxL38q39m38k76tf8q38+19B/+07+if8Z38sz7ZP+c7++d9F/+C7+pf9N38S767f9n38D19L/+Kf9W/5nv7Pj7F9/X9/Ou+vx/gB/pBfrB/ww/xb/qh/i2f6of54f5tP8K/40f6d/0oP9qP8e/5sf59P86P9xP8RJ/mP/CT/Id+sv/IT/FT/TQ/3af7GX6m/9jP8rP9HP+Jn+s/9fP8fL/AL/QZ/jOf6Rf5LP+5X+y/8Ev8Ur/ML/cr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3O/xOv8vv9nv8Xr/P7/cH/Jc+23/lD/o/+UP+a3/Yf+Nz/Lf+iP/OH/Xf+2P+B3/c/+hP+JP+lD/tz/if/Fl/zp/3P/sL/hd/0V/yl/kza4wxxhhj/xD1B8f7/p3vyd/GFf2EENdvL5Lz32tuKPjn+QCZ0DEihHiuT/dH/2vUqpWSkvLbuUuUCErMF0JErubnEX+J9VLRQTwjkkV7Ue7vrm+A7HmB/qB+9E4hYv8qJ0Zcja/Wv/1/qP/k02MyK4bn4/+X+vOFSCxxNSefuBpfrV/+f6hfqO0frD/f12lCtPurnDhxNb5aP0k8JZ4XyX9zJmOMMcYYY4wx9mcDZJWuf3T/fOX+PEFfzckrrsZ/dH/OGGOMMcYYY4yxa+/Fnr2efTI5uX1XnvCEJzz5y+Ra/2VijDHGGGOM/btdvei/1ithjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZyr/8f/07sWu+RMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9b+TwAAAP//4ok7tg==") syz_open_procfs(r1, &(0x7f0000000000)='mountstats\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x4076cbba9945d516, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x5051}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000370429bd7000fedbdf2500000000", @ANYRES32=r7, @ANYBLOB="890c020044cc0400300012800b00010069703667726500002000028006"], 0x50}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) chown(&(0x7f0000000340)='./file0/file0\x00', r2, 0x0) 7.296527964s ago: executing program 1 (id=740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9}, 0x4010) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = getgid() mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100), 0x2000070, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{}, {@default_permissions}]}}) 7.204650183s ago: executing program 1 (id=741): syz_clone3(&(0x7f0000000000)={0x1181700, &(0x7f00000002c0), 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7.203946814s ago: executing program 1 (id=742): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'wg1\x00', 0x10}) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0x4, 0x3}, 0x6) prlimit64(0x0, 0x5, &(0x7f0000000240)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000400), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0xfff) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r5}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0}, 0x28) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYRES8=r6, @ANYRES8=r3, @ANYRES32=r2, @ANYBLOB="e0000002000000000000fffffffd32000000000000000000000000000000000000010000000000000000000000000000000000000000000000000900000000000000030000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000010000000000070000000000000000000000000000000000000002000000000000fc0200040000000000000000004800020065636200"/225], 0x138}, 0x1, 0x0, 0x0, 0x20000085}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000700)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000740)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x2, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffc, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x3, 0x100000001, 0x100000000000}, {0x4, 0x8, 0x1ff}, 0x2f7627dd, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in=@private=0xa010101, 0x3505, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r7, &(0x7f0000000880), 0x800001d, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r8 = socket$inet(0x2, 0x2, 0x80000000) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x6ba, 0x0) ioctl$EVIOCGKEYCODE(r9, 0x80084504, &(0x7f0000000400)=""/107) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) 6.377875297s ago: executing program 1 (id=750): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="100029bd7000ffdbdf250e00000034004109080008000600000006"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010000104000000"], 0x48}}, 0x0) (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000240)={'syz1\x00', {0x8, 0x0, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0x9, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xffffffff, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x22, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x3, 0xa7, 0x81, 0x709, 0xf9a2, 0xa, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x6, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0xfa8, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1fe, 0x1, 0x8001, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x494, 0x7, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0x2ee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000c, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x40, 0x800003, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7f7, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x8, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0xbe, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000980), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ac0)={'syz0\x00', {0x9, 0x3, 0x6c2c, 0xf28}, 0x37, [0x3cf6, 0xd3, 0x1ff, 0x8001, 0x3, 0x7, 0x7, 0xea6, 0x0, 0xd, 0xf14e, 0x9, 0x0, 0x9, 0x5, 0x3, 0xf2a, 0xfffffff8, 0xfffffff7, 0xf30, 0x2, 0x7, 0x8, 0x88b, 0xe6f, 0x2, 0x100, 0x0, 0x1, 0x10, 0xa, 0x3d8, 0x5, 0x3, 0x6, 0x8, 0x8000, 0xa, 0x1, 0x6, 0x40, 0x1, 0x5, 0xa7, 0x1, 0x1, 0x6b, 0x378b, 0x7fffffff, 0x9, 0xfff, 0x3, 0x8, 0x4, 0x9a, 0x5c90, 0xfffffff7, 0x2, 0x8ac, 0x4, 0x0, 0x1, 0x3, 0xd6], [0xedc, 0x80000000, 0x2, 0x684c, 0x12, 0x3, 0x8001, 0x2, 0x7, 0x0, 0x9, 0x8, 0x8, 0x101, 0x2, 0x9, 0x10000, 0x0, 0xa60c, 0x5, 0x9, 0x1, 0x10, 0x7, 0x4, 0x1000, 0xc, 0x399, 0x401, 0x80, 0x279, 0x7, 0x7, 0xfffffffd, 0x5, 0x5, 0x74, 0x2, 0x5c3, 0xffffffff, 0x0, 0x8, 0xfff, 0x6, 0x1, 0x100, 0x80000000, 0xbe, 0x3, 0x81, 0x6, 0x5, 0x7, 0x1, 0x800, 0x8, 0xf, 0x8, 0xf, 0x2, 0x7f, 0x6, 0xea9, 0x7fffffff], [0x8, 0xff, 0x899, 0x5, 0x200, 0x7ff, 0x5, 0x4, 0xc6, 0xccd7, 0x3ff, 0x1, 0x9, 0xccf4, 0x101, 0x3, 0x4, 0x9, 0x0, 0xfffffff7, 0x1, 0x5, 0x8, 0x5, 0x237, 0x10000, 0x1, 0x5, 0x10, 0x9977, 0x7, 0x0, 0x6, 0x7f, 0xf34, 0x8000, 0x8, 0x6, 0xa, 0xe2d, 0x9, 0x800, 0x7, 0x2, 0x5b2c, 0x0, 0xfff, 0xfffffffc, 0xc8f1, 0x1, 0x4, 0x5, 0x6, 0x1, 0x7, 0x4000, 0x1000, 0x1, 0x11c9, 0x7f, 0x3800, 0x5, 0x2, 0x1], [0xdd6, 0x5, 0x6, 0x4, 0x659, 0x7, 0x0, 0x5, 0x7, 0x101, 0xffff3c04, 0x0, 0x7, 0x8, 0x10001, 0x4c71, 0x9, 0xb2, 0xcde, 0x8, 0xc88, 0x4, 0x40, 0x81, 0x6, 0x8, 0x0, 0x0, 0x8, 0xffff8000, 0x4, 0x7, 0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x4, 0x8001, 0x36d, 0x6, 0xee58, 0x6, 0x3, 0x1, 0x5, 0x1000, 0x2, 0x1, 0x0, 0x80000000, 0x1, 0x0, 0x5, 0x0, 0x4, 0x7, 0x6, 0x6f, 0x100, 0x40, 0xffffff01, 0xf]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) signalfd(0xffffffffffffffff, &(0x7f0000000700)={[0x4]}, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000800)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x200, 0x7, 0xf2, 0x3, 0x7fffffffffffe, 0x7, 0x5, 0x40b, 0x7, 0xfffffffffffffff5, 0xd, 0x8], 0x25000, 0x304}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) (async) r7 = syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a240100"], 0x0) (async, rerun: 32) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (rerun: 32) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(r9, 0xc008aeb0, &(0x7f0000000f80)={0x2, [0x7, 0x5]}) (async) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000fc0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) setns(0xffffffffffffffff, 0x8000000) (async) syz_usb_control_io$uac1(r7, &(0x7f0000001080)={0x14, &(0x7f00000010c0)=ANY=[@ANYBLOB="4012a2000000b20a6c2f736a1f912680260afa84fe7f74f2a51850ab7408a9f47053535bbd6d88d2571d1c542bf085658d5770469858e5f926fc002a8aafd39dc04dcceb93b7c83e482e277e1944d11361fda2278fb31f0dafd228876c1fffef80552813013d52a02bd5fcbc9702858aafb4ee1eba1423fbe2a1318a67e2edaa10e13d2cce10e30436b073fe75a4a5568866601cc01623d90d331d695946da5419b971bfe2998c29"], &(0x7f0000001180)={0x0, 0x3, 0x18, @string={0x18, 0x3, "c17b2aefbbe4b435ff29cf6f8ea81ffa698587bf1af6"}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000009c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a00)=[@text32={0x20, &(0x7f0000000a40)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a80)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 3.627791264s ago: executing program 9 (id=762): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000010cc0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000010d00)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$sock(r0, &(0x7f0000010d40)=[{{0x0, 0x0, &(0x7f0000010dc0)=[{&(0x7f0000010e00)="3633d218", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000010e40)=[@mark={{0x14, 0x1, 0x24, 0x10}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x30}}], 0x2, 0x8c0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60242, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pimreg\x00', 0x3c32}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) pwritev2(r4, &(0x7f0000000280)=[{&(0x7f00000002c0)="6b74709c07679451380000000008", 0xe}], 0x1, 0x6, 0x8, 0x10) capset(&(0x7f00000004c0)={0x20071026}, &(0x7f0000010bc0)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f0000010c00)={0x7, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000010cc0)=ANY=[], 0x48) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$f2fs(&(0x7f0000000440), &(0x7f0000000480)='./file1\x00', 0x44, &(0x7f00000004c0)=ANY=[], 0xfa, 0x10638, &(0x7f0000000500)="$eJzs3M1rHGUYAPBnk6ZNP6xBPIiXDoiQQDd00w/0VrXFCqbUr4Mn3WS3y7bZTMhu07UiFE8exGPP/g968i5e/R/Em3gQvBVWdt5JddvGSrsm3eb3g8kz8867z7zvMASe2dkJYN+ay/78oxLH43BETEfEsYhivZJCcj6FlyLiRByKqYh7S6Vsv9dwMCKORMTxYfKUs1Lu+uLO7eW7/eXPf7jz+4Uv6z+f3LNJA3vu1YjobKT1m50U81aK18r2+la7iJ0zW2VMOzrXy+08xZvNlSLDzfp2v3oRT7dS/3zjRncYr67VV4ex1b5atG+spwN2t1rbeYoPXKtvFtuN5koR2928iK1baVz9Mt7q9lKeRpnvsyJ99HrbMbU3+800n43rRVxd75XtKW/eaPaHcauM5eFiNV9rFONYeezT/NR7t71+o59tNTe77Xw9O7tYe22xdq5a28wbzV7zTLXeaZw7k8231obdqr1mvXO+leettebiat5ZyOZbq6vVWi2bv9BcadfXs1pt8fTiqerZhXLtZPb25Y+ytUY2P4xvttdv9Npr3ezqscjSJxaypcXTry9kr9SyD5avZFfev3hx+cqHn1z4+PIby++8VXZ6YFjZ/NKppaVq7VR1qbYwifPPN8c3/0svP8n8Z5/s9LHfVUY3j+zVOAAmSFH/H46H1f9//1sdqf9D/Q88wi+P7KH+V//HM1H/PqXzn42JmP/st5UnS8D+5vIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANi3fp357lKxMpe23/spxefKphfKfpWImIqIwWAwmB2Mmo6DIzmnI+JoRMyU/e83s93xUAo/VqLIUCmbhsuRiDhfLneff/jYD4z/dAAAAMCEGlR22vP97RPfpGo9/ZnbzWGxW6Z2aE83baaOfTqm4wyvs5m538aUrRj1i2NKVlzfB6I/pmzFDazZMSUrbpXt8r2s6ZEw+49QSWGnawYAAJhgo5XAA1VI/avdHhAAAAD/k6/3egDsjeK5gPJZ/PIB/vKB/PILwcO+CAQAAIBJt+PvAgAAAIBnRlH/3//+v6Plzn97/9/9puPgyA8H/vP7/0qP+/4/AAAA4NHS+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5i535yUoeiOACftvQ93r88Ypy7FWewDJfg0CFhAW6CJeAW3ABrwJlLMGBoS6QGE5FLieT7kva2Dfw4JUzOvaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHNNTORs9jK/uD81Zrg6T5m4AAACAXRblbFQdDOrzP831f82li+Y8i4g8Inb17kX8aGUWTU75wevLdzU8RlQJ68/42Wy/I+K62V7+H/tbAAAAgPM1n0yHdbde7wanLogu1ZM2+d+bRHlZRJSD50Rp+Xp3mSis+n334i5RWjWB1U8UVk+59VKlfUrRGvpbQ1YPeaflAAAAnWh3At12IQAAAHTpdut4fMI66FgWm6XMzVpw9c/7twXBX60zAAAA4BvKTl0AAAAAsK+92/nqDZ7/BwAAAOetfv4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx7QoZ6P5ZDo8NGe5+pqiGdPcDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Mr+vKNACIRBGOxd35nM/Q8rDZqamlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCb3/3l/8TUOJPMvTaWnkeStVNj69TYOzeO/jC+fg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhDABRsGcyH91J7n9XpcU7iFAFgUeaLAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE/0uk7eZ+zJaGxJPr1tfLvPJL9OjX+nxpJkNNY+mHf/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA527uY1jjIMAPgzu5lttiBdowTqQSsWKgpNtn4heOlBCB4ET+IxpClE1w/aHGyJYC4eFP8DL+rBQy9CQJCKCN578GSP9VJBcqgg6CkyOzPt5KNljN3ZTfr7wbvvsy/vzjzvEJZ95t0NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACUNs/GiTJuZw+9PG4VY7/eWlvK+us7+szNxSvHs5bFSTGWNpf6gTKVXaPZcWcBAADAYbLV3j3WLuv7iLiRbixkfauX1f+f/fj4R/n4zxGx9lAel/X8zrq/7MvaP2tXf/jqjdsn6uXnSSPiu95geX6UCz1ATtacd6zGnOG9hPwOTXt4q6b12vojm+nwqiefX7v2amcYHvl/GQMA98Ppsi+C8yv556Os748zMQAOramiRaX+b/fGmxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAEzbX49kyTiLisak7ceb6rbWlvfqbi1eOl+3YW49+Uj1mdog0Is6vDJbnG1zLJDtZc97FS5ffWRwMli/8p+CJfb1qe5Ds8+XdfeY8cUF3MtK4VxCt/K/k/h45+Xtra3Q5Z+8kE3DpDnwwyncnAAAOm7Ro2afxG+nGQjaWzERsfbm9/j9ViaNm/f/TytVT1XNV6/9+YyucbHXr/7nVdz+Yu3jpcqd4/t6Z/vP9l+ZffqH/4tzwfsqcuyoAAADcXado1fq/NbN7//9oJY6a9f8vv7/5R/VcbfX/LjXr/+TO1u6oMwIAAHhwPXzirz+TPcaTTic+XFxdvdDPH28/P5M/jiHVe+uWu8cxXQZHilat/+PjMeUHAAAANGpzPdm2/3+uEkfN/f/vn/nni+ox2xHRLfb/Ty+9PzjX3HIm1u79/96e86o/+k1jND8nbmC5AAAAjEm3aNX9/3T4/f/Wk+WcVkQ8/VQeF/8GsFb9/8rUp2er56p+//+55pY4kVqz2fVo7xidvvvc2Yip2UZSAwAA4BDKKs7pr78ZFqK/pRsLb3979PXOzLizAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4l/25t00YCOM4/N7FUeI2GSG9lY8Z0qSKkhESkJAseQYGYCEaKlqLRWAFkOAsSnemeZ7m/yuuuBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAMcfRF3cRkSIPmSN/LZ/3VUTcR171/efDOdP6sOseL/m72X6XfIqflzoi6khTnAMAMIlUXbsZtsR80c5ey76VfS/7Ubb569r/m/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADixAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgWAAAAABDmb51GxwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBfAQAA///6WV40") r7 = openat(0xffffffffffffff9c, &(0x7f0000010b40)='./file1\x00', 0x181042, 0x65) pwrite64(r7, &(0x7f0000010b80)='2', 0x1, 0x84fed0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000300)={0x0, 0xb007}, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000340)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'ip6_vti0\x00', 0x0}) sendto$packet(r5, &(0x7f00000003c0)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000400)={0x11, 0x0, r8}, 0x14) syz_mount_image$ext4(&(0x7f0000010e80)='ext4\x00', &(0x7f0000010ec0)='./file0\x00', 0x80078b, &(0x7f0000010f00)={[{@usrjquota}, {@acl}, {@noauto_da_alloc}, {@barrier}, {@nobh}, {@errors_remount}, {@block_validity}]}, 0x0, 0x480, &(0x7f0000010f80)="$eJzs3M1rXFUbAPDn3ny0ffuRvLV+tFaNFiEoJk1atQs3ioKLioIu6jIm0xI6baSJYkuxqUjdCFLQdXEp+Be4E0HUleBWN66kULSb1uJi5N65N51MMmljJpk0+f1gMufMPTP3eXK/zj1nkgA2rYHsRxKxIyJ+jYi+enV+g4H6083r58f/vn5+PIla7c0/k7zdjevnx8um5fu2F5XBNCL9OClWMt/02XMnx6rVypmiPjxz6t3h6bPnnnn/1NiJyonK6dEjRw4fGnn+udFn25JnlteNfR9O7d/76tuXXxs/dvmdH7/O4t1RLG/Mo10GssT/quWalz3Z7pV12M6GctLdwUBYlq6IyDZXT37890VX3N54ffHKRx0NDlhV2bVpS+vFszVgA0ui0xEAnVFe6LP73/KxRl2PdeHai/UboCzvm8WjvqQ70qJNT9P9bTsNRMSx2VtXskes0jgEAECjT8e/OFrribl7wNv9jzQeyJ9/z3/uKuZQ+iPi/xGxOyLui4g9EXF/RN72wYh4aIXxLOz/pFdX+JFLyvp/LxRzW/P7f2XvL/q7itrOPP+e5PhktXKw+J0MRs+WrD6yxDq+ffmXz1ota+z/ZY9s/WVfsIjjanfTAN3E2MxY3iltg2sXI/Z1L5Z/MjcTkETE3ojYt7yP3lUWJp/6an+rRnfOfwltmGeqfZmlN5vlPxtN+ZeSxvnJyQXzk8Nbo1o5OFzuFQv99POlN1qtf0X5t8G1Sv25Yfs3N+lPGudrp5e/jku/fdLynuY/7v9pb/JWPs/cW7z2wdjMzJmRiN7kaF6f9/ro7feW9bJ9tv8PHlj8+N9dvCfL/+GIyHbiRyLi0Yh4rIj98Yh4IiIOLJH/Dy+1XlbmH+mtK7ULHdj+FyMmFj3/ze3/Tdt/+YWuk99/02r9d7f9D+elweKV/Px3B4uFk50umgNcye8OAAAA7hVp/h34JB2aK6fp0FD9O/x74n9pdWp65unjU++dnqh/V74/etJypKuvGA+tTlYrI8ls8Yn18dHRYqy4HC89VIwbf961La8PjU9VJzqcO2x221sc/5k/ujodHbDKti366mjvmgcCdEDzPHo6v3rh9XAygI3K32vD5nWH4z9dqziAtef6D5vXYsf/haa6uQDYmFz/YfO66+P/nwX/xxK4l6XfdToCoIP0/2FTWsnf9a9iYev6CKMzhfW6UfJCRFlI10U8CqtU6PSZCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoD3+DQAA//8I+vHt") r9 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$x86(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control32=0x4002, 0x200000, 0x80, 0x8}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401a, 0x200, 0x20000040007fff, 0x3}}, @nested_vmlaunch={0x12f, 0x18}], 0xb8}) ioctl$KVM_RUN(r12, 0xae80, 0x0) 3.040520263s ago: executing program 1 (id=765): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000002500)=[{{&(0x7f0000000000)=@nfc, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/158, 0x9e}, {&(0x7f0000000140)=""/28, 0x1c}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/59, 0x3b}, {&(0x7f0000001200)=""/80, 0x50}, {&(0x7f0000001280)=""/35, 0x23}], 0x6, &(0x7f0000003600)=""/4111, 0x100f}, 0x5}, {{&(0x7f00000021c0)=@xdp, 0x80, &(0x7f0000002280)=[{&(0x7f0000002240)=""/22, 0x16}], 0x1}, 0x740}, {{0x0, 0x0, &(0x7f0000002400), 0x0, &(0x7f0000002440)=""/149, 0x95}, 0x7}], 0x3, 0x100, 0x0) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000001400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1e71, 0x2009, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x53, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0xc106, 0xa3, 0x1, {0x22, 0x2af}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xe, 0xaa, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x3, 0x81, 0xf3}}]}}}]}}]}}, &(0x7f00000018c0)={0xa, &(0x7f0000001440)={0xa, 0x6, 0x200, 0x6, 0x80, 0x8, 0x10, 0xbd}, 0x31, &(0x7f0000001480)={0x5, 0xf, 0x31, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "c142894b4daba79102f4ce8d9dd37145"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x1, 0xfffd}, @wireless={0xb, 0x10, 0x1, 0xe, 0x2, 0x80, 0x13, 0xa, 0x9}]}, 0xa, [{0x8d, &(0x7f00000014c0)=@string={0x8d, 0x3, "99f7ef233b54c66b275c422f5a58a94ad7ee093b372c0025550536640f866cf1766652b44917d3c026178d79cf41bba1f1610d1250c2a6a2b3cc3a9f77950f76bad0ab09e186dcab92869da70193edd1f4e6f8b1be58953a9dad60a97b4e1882674f30dbbdbcc11535fdf33b7a48de2539b21ad5897dd1caf1b6660f8611720923c99f5ef5831a9668171c"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x100, &(0x7f00000015c0)=@string={0x100, 0x3, "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"}}, {0x38, &(0x7f00000016c0)=@string={0x38, 0x3, "a1a2cb46572801b19d073d7eb827ad2c74535cb7302149109a6dc0a345e26cf8f9951b4952d5cc3f1e81095cf8ebcbe740c3463f293d"}}, {0xc, &(0x7f0000001700)=@string={0xc, 0x3, "0b83a242e5d8bf49cfc2"}}, {0x42, &(0x7f0000001740)=@string={0x42, 0x3, "2f21b8170b4119a46c2e3b09d00a58e1a78da44625a8fef525ad549763dda073ba62dc91138ea30aec7cb3aeb850026f1533987ce2224bab6639e5f232277856"}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x3c01}}, {0xb, &(0x7f0000001800)=@string={0xb, 0x3, "aa16ce95a876e1207f"}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io$hid(r1, &(0x7f0000001a80)={0x24, &(0x7f0000001980)={0x20, 0x8, 0x10, {0x10, 0x23, "40828a36ed2d18976a3f75bb6410"}}, &(0x7f00000019c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}, &(0x7f0000001a00)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x7, "a19b"}, @local=@item_012={0x2, 0x2, 0x4, "68a1"}, @main=@item_012={0x1, 0x0, 0x9, "8c"}]}}, &(0x7f0000001a40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x3b0}}}}, &(0x7f0000001c00)={0x2c, &(0x7f0000001ac0)={0x0, 0x13, 0x1e, "ed59bbef8391ed3630768043661200bd60ac6f629301bcf07e039f2e0e2f"}, &(0x7f0000001b00)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001b40)={0x0, 0x8, 0x1, 0x7e}, &(0x7f0000001b80)={0x20, 0x1, 0x18, "4faf4f4d356c9cabe197c5006e2760eb190df89e0ea16362"}, &(0x7f0000001bc0)={0x20, 0x3, 0x1, 0x7}}) r2 = syz_create_resource$futex(&(0x7f0000001180)) clock_gettime(0x0, &(0x7f0000001340)={0x0, 0x0}) futex$unlock_wake_list64(r2, 0x20a, 0x2, &(0x7f0000001380)={r3, r4+60000000}, &(0x7f00000013c0)=0x5, 0x6) 2.96878243s ago: executing program 7 (id=767): r0 = socket$inet6(0xa, 0x800, 0x101) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x6004, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x139) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)={0x0, 0x0, 0x3, 0x81, 0xffffffff}) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000540)=0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x800, &(0x7f0000000580)={[], [{@euid_eq={'euid', 0x3d, r2}}]}, 0x25, 0x756, &(0x7f00000008c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x800, &(0x7f0000000580)={[], [{@euid_eq={'euid', 0x3d, r2}}]}, 0x25, 0x756, &(0x7f00000008c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") chdir(&(0x7f0000001040)='./file0\x00') (async) chdir(&(0x7f0000001040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x0, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000010c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000001140)={0x1, 0x0, 0x0, 0x0}) ioctl$KVM_X86_SETUP_MCE(r1, 0x4c07, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(r1, 0x4c07, 0x0) socket$inet(0x2, 0x2, 0x0) (async) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000440)=0x2, 0x4) bind$inet(r4, &(0x7f0000000480)={0x2, 0x5e21, @empty}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x3a, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf88100400086dd6aca000000002901fe8000000000000000000000000000bbe9020000000000000000000000000001"], 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf88100400086dd6aca000000002901fe8000000000000000000000000000bbe9020000000000000000000000000001"], 0x0) 2.900637597s ago: executing program 7 (id=768): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x6, 0xba, 0x5, 0xefff}]}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x290, 0x140, 0x19, 0x0, 0x140, 0x0, 0x1f8, 0x1f0, 0x1f0, 0x1f8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1}}, @common=@inet=@socket1={{0x28}, 0xc}]}, @common=@SET={0x60}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2709fb5a2bab03dc, 0xff0000ff, 'bridge_slave_0\x00', 'pimreg\x00', {}, {0xe8835d89a38d226f}, 0xff, 0x2, 0x1}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f0) 2.898907617s ago: executing program 7 (id=769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x64002, 0x0) syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB='memory=low,memory=low,noquota,mode=fragment:segment,data_flush,discard_unit=segment,noinline_xattr,noextent_cache,age_extent_cache,quota,resgid=', @ANYRESDEC=r0, @ANYRESOCT=r0], 0xfc, 0x5523, &(0x7f00000050c0)="$eJzs3M1rI2UYAPAn6XbX/XAt4sHbDixCC5vQ9GPRW9Vd/MAuZdWDJ02TNGQ3yZQmTWtPe/AoHvxPRMGTR/8GD569iQfFm6BkZqpbV0HYtLHt7weTZ943b5553rAsPDMlAZxbc8mvP5fielyOiJmIuBaRnZeKI7OWhxcj4kZElB87SsX8nxMXI+JKRFwfJ89zloq3Pr81urn609u/fPPdpQtXv/j6++ntGpi2lyKit52f7/XymLbz+KCYr486WeytjIqYv9F7WIzTPO61NrMMe/XDdfUsLrfz9en27mAct7r1xji2O1vZ/HY/v+Bg1D7Mk33gQX0nGzdbm1nsDNIstg/yuvYP8v/bDgbDPE+zyPdxlj6Gw8OYz7f2W/l+th9msdEfFvN53rTZ2h/HURGLy0Uj7TazOjaf5pv+f3un09/dT0atnUEn7Ser1drL1drtSm0nbbaGrZVKvde8vZLMt7vjZZVhq95ba6dpu9uqNtLeQjLfbjQqtVoyf6e12an3k1qtulxdrKwuFGe3kjfuvZ90m8n8OL7W6e8OO91BspXuJPknFpKl6vIrC8nNWvLu+kaycf/u3fWN9z6888G9Vx/F68WiJ8pK5pcWl5YqtcXKUm3hrO5//a0n9v9JUfQE9w9PpTTtAgBOH/0/MA3H1//v3I84/v4/9P8Tcar634n1/+Vzvn+YEP0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC59cPsl29mJ3P5+Gox/2wx9XwxLkVEOSJ+/wczcfFIzpkiz+y/rJ/9Ww3fliLLML7GpeK4EhFrxfHbc8f9LQAAAMDZ9dWjG5/l3Xr+MjftgjhJ+U2b8rWPJpSvFBGzcz9OKFt5/PLChJJl/74vxP6EsmU3sC5MKFl+y21i2f6TmSPhmcdCKQ/lEy0HAAA4EUc7gZPtQgAAADhJn067AKajFIePMg+fBWd/ef/XA8HLR0YAAADAKVSadgEAAADAscv6f7//BwAAAGdb/vt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zcT67SQBgA8K+FCvgnEuPeq7iDM5iYeASXLg0H8BIcwAVewQtwBtx5BAOGdkR4j7yQdFoeL79fUoYpw8c3TVnMTDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpV/Vav7j67tvHz+0i7PdtZOrPwAAAMB9m2o1r99Mm/qLdP5VOvUm1YuIKCPi3Nh9EM9OYg5SnOp/++/H7as7OfyMqCPsf2OUjucR8T4df153fRUAAADgho0e/ni9WM6a0XrzMu0nKx6HZtKmfPkpU7wiIqrp70uaXnCnlft4bzOkVdvf38P4kilaPYE1zhSsmXIb5op2kfrvfpi1Gx8VRVOUZ792SDJb3wEAgB4NTop+RyEAAAD06fO1E+A6ivi3lHlYCkwPDKTlvclJDQAAALhBxbUTAAAAADpXj/972v9vl3v/v0nuqwEAAABPVLP/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF3aVKv5erGctY2z3bWTpzcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf9mfdxQIgTAIg73rO5O5/2GlQVNTkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3vzuL/8npsaZZO61sfQ8kqydGlunxt65cfSH8fVrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn9eUiAEgiAK5oz/nfT9DysJegYRIqDhUUUtGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAv+t0v/yemxplk7rSxdDySrF01tq4aew8aRw/G278BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYud+XuOo4gCAv5nZ2f5QMUbZQ0QUPOjFbre1tTfxoAQP/glCSLc1duuPNgdbipiLN8m5F9GjiKDEW/+Hnlvopd562EMFz8qbH9lJGnBVnNk2nw+8ed8dhnnfNwsh33kvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAatN3ZnEWD0tlnFbn7jy8sR77u/v66Nb2vZXYYpy0mfTj4aXmh2TQXSIAAAAcHlld34cQ7uc7q7FPl4r6P6+viTX/d8+UcV3P76/7676u/WP79ZcHL+wOtFSOE296YWMyPvloKr3/b5aL7dm/vaJXPPni3UtWfCHp+1vPT/Oj8Xkm39y+/W6/eLRH2sgWAPg3TtR9FdS/D8V+1GViABwavUbhXdf/2VK3OQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0YboVnqrjJISw0pvF0d2HN9YP6m9t31up29mbN7fDV7N7xlvkIYQLG5PxyVZns9iuXrt+aW0yGV9pP3g5hNDV6G9X07/04RwXh7D3TBb2nxEscpBWX/ai5PN4BB3+UAIA4ImUVy3W9ffzndV4LlkO4c/v99b/rzXiMGf9/+Cjs3eaYzXr/1FrM1x8w83Lnw2vXrv+xsbltYvji+NP3jw1emt0+tyZM+eGxbuSoTcmAAAA/Df9qjXr/3T50fX/4404zFn/f/7t6MvmWJn6/0CzRb+uMwEAADjcnnvlj9+TA84n/X74Ym1z88qoPO5+PlUeO0j1HztStmJ3f13/Z8tdZwUAAAC0YbqV7Fn/P9+Iw5zr/0//8OJPzXtmIYRj1fr/ifVPJ+fbm85Ca+PPibueIwAAAN06VrXm/v+82P+f7m55SEMIr79axtW/AZyr/s/e+/rH5ljN/f+n25viQkoH5fMo+kEIvUHXGQEAAPAkO1q1WOz/lu+sfvzz8Q/69v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtO2vAAAA//89qz2t") mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001d40)='./bus\x00', 0x1d7) r1 = socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = getpid() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000280), 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) r5 = io_uring_setup(0x9c, &(0x7f0000000400)={0x0, 0xb9d5, 0x200, 0x2000, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/4095, 0x440000}], 0x100000000000011a) syz_mount_image$vfat(&(0x7f00000014c0), &(0x7f0000001500)='./file0\x00', 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677eef7536f8115edae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRESDEC=r4, @ANYRESHEX=r1], 0x3, 0x240, &(0x7f00000021c0)="$eJzs2s9rHGUYB/Bn0tbGlHQj/qIF8UUP6mVocvbQIC2IAUW7QhWkUzPRZcfdsLMsrIjJqV79EzyLR2+C9OglF/8CD14klxx7EEe6u5pG4iGI3ZJ+Ppd94N0vzzPMy8t7mP3Xv/6su1XnW8UwFrIsFq7GbtzLYiUW4i+78dorN3964b2bH7y1vrFx7d2Urq/fWF1LKV188ccPv/jupbvDC+9/f/GH87G38tH+wdqve8/tXdr/48annTp16tTrD1ORbvf7w+J2VabNTt3NU3qnKou6TJ1eXQ6OrG9V/e3tcSp6m8tL24OyrlPRG6duOU7DfhoOxqn4pOj0Up7naXkp+C/a395rmjhozt2Kpmme/CYu3I3lX6IV2VMpe/pq9uyt7Pnd7NJB07TmPSr/C+//8fbAob4YUX01ao/a09/p+vpWdKKKMq5EK36P+9tkZlpff3Pj2pU0sRJ3qp1ZfmfUPnM0vxqtWDk+vzrNp7hT/fbEtO3OqH0+liLORczya9GKZ47Prx3mJ/3PTPovxqsvP9A/j1b8/HH0o4rNuJ89zH+5mtIbb2+ko/NfnvwPAOC0ydPfjr2/5fm/rU/zJ7gf/uN+dTYun53vsxNRjz/vFlVVDhRVOVh8NMY4DUVENtlg2WyjzXsexQmLuR5LPCSHL33ekwAAAAAAAAAAAHASD+Nzwnk/IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj7MwAA//+3Ycw+") r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000001940)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x7, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x4]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000019c0)={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0xa, 0x0, 0x0, @local}, 0x0, {[0x100, 0x0, 0x0, 0x6, 0x9]}}, 0x5c) bind$802154_raw(r6, &(0x7f0000001a40)={0x24, @long}, 0x14) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x4e24, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) clock_nanosleep(0x4, 0x0, &(0x7f0000001b00)={0x77359400}, 0x0) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000001b40)={{0xa, 0x0, 0x305e, @private0, 0x200008}, {0xa, 0x0, 0x1, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0xc, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000001bc0)=0x6, 0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000001f00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) io_setup(0x517d, &(0x7f0000002140)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000002180)='/proc/self/attr/exec\x00', 0x2, 0x0) 2.428214605s ago: executing program 9 (id=772): r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='./bus\x00', 0x2010414, &(0x7f0000000c00)=ANY=[@ANYBLOB="2e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b799530322b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRES16=r0, @ANYRES64], 0x1, 0x2df, &(0x7f0000000540)="$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") (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000001}, 0x40) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)}, 0x20) (async) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./bus\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f00000003c0), &(0x7f0000000480)=r3}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async) r4 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000840), 0x8000, 0x0) preadv(r5, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/179, 0xb3}], 0x1, 0x9, 0x6) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000980)={0xc6, 0x3, 0x7, 0x1000, 0x800000, 0x9}) (async) sched_setscheduler(r4, 0x0, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) mknod$loop(&(0x7f0000000500)='./file0\x00', 0x6000, 0x0) (async) r8 = creat(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r8, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x0, 0x3}) (async) ioctl$BLKTRACETEARDOWN(r8, 0x80041285, 0x0) (async) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000001ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000001b40), 0xe9fb7e0b, 0x0, 0xffffffffffffffff, 0xd}, 0x48) getsockopt(r9, 0x1, 0xe, 0x0, &(0x7f0000000380)) 2.224506165s ago: executing program 9 (id=774): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) setxattr$incfs_metadata(&(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x100000}]}}}]}, 0x40}}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='rodir,shortname=winnt,utf8=0,shortname=mixed,uni_xlate=1,uni_xlate=1,rodir,iocharset=macceltic,uni_xlate=0,shortname=lower,codepage=863,rodir,iocharset=cp857,nonumtail=0,uni_xlate=1,utf8=0,uni_xlate=1,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c646f6e745f6d6561735e4f173b4efa43576d61efada8d3ca666c6f6f513d7b2b2c70626a5f695f786c6174653d312c736d61636b66737472616e736d0000000000000000000000bfb06fc472bc0864b1d1e6b4b5c5b1bfa2467b29257d190d2e75d6943ca88fdb44628d7c0268e859ddc1d691cd37e069543e99b917a67bb9e7bd91ad46808b26a2e613862a"], 0xf5, 0x2a8, &(0x7f0000000780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a80)='cgroup.stat\x00', 0x275a, 0x0) 2.145073804s ago: executing program 9 (id=776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() syz_pidfd_open(r1, 0x0) tkill(r1, 0x21) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004801}, 0x20000000) 2.104821888s ago: executing program 9 (id=777): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xc0a55000) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) unshare(0x60000600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000000)={'raw\x00', 0x0, [0x5, 0x2, 0xe415, 0x3]}, &(0x7f0000000140)=0x54) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe, r0, &(0x7f00000000c0)='\f\v', 0xfd95, 0x0, 0x0, 0x4}]) 1.993830009s ago: executing program 7 (id=780): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xe, &(0x7f0000000840)=ANY=[], &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0xa}, 0x8, 0x10, &(0x7f0000000fc0), 0x10}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x321081a, &(0x7f0000000340), 0x1, 0x445, &(0x7f0000000840)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file1\x00', 0x8042, 0x0) pwrite64(r1, &(0x7f0000000d00)="93", 0x1, 0x8080c5d) fallocate(r1, 0x3, 0x80007, 0x8000c60) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xbffffc, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000d40), &(0x7f0000000d80)='./file2\x00', 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6174676300626172726965722c6772706a71756f1b27048aac4ff9421374613d726f6f74636f6e746578742c636865636b706f696e743d6d657267", @ANYRESHEX, @ANYBLOB="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"], 0xf7, 0x5552, &(0x7f00000012c0)="$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") futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20001088}, 0x44004) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f00000003c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24040014) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x3208480, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYBLOB="f6ddcd4bc0bcc3b81300273d73b00ef0dffdd469fb961466241afd18ced442f95e962ba54f7662ae6cc337a3c1a68c50e00de14177fb4f6c87bbe9dc45b4eb3b972bf616120b57bed648819bae8af277471e88c933b50f1cabaf7454e93324b3fcee916a246a206e17eeeaf50ff575260a1fadbceee337f3c59b356fe7598f250cbe4c88bf8e8eab6ec44839a885c33be3bb9b37743ff2a965f3bc6d9dd10b27562ad9c070681cf0d3407b11e8013027a4290f4f8d69700b4bf1b9e05edd7a92f047a6a30e81338067cdf0a1c0e05f720c9283028e00f7090258ab"], 0x4a, 0x2df, &(0x7f0000000500)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x7, &(0x7f0000000080)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x19}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x3ff}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 1.953344863s ago: executing program 9 (id=781): r0 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder_logs/transactions\x00', 0x0, 0x0) write$selinux_create(r0, &(0x7f0000000300)=@objname={'system_u:object_r:man_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x3, 0x20, './file0\x00'}, 0x5d) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000180)=0x7, 0x4) syz_usb_connect$uac2(0x0, 0x97, &(0x7f0000000240)=ANY=[@ANYBLOB="12015002000000201e043732400001020301090285000301db6007080b0102010a200209040000000101200009240104041c15007f0c240303030308f90206000a090401"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000041e000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) socket$inet(0x2, 0x2, 0x80800001) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000440)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000700), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000480)=[{{&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000c40)=""/91, 0x5b}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000a00)=""/225, 0xe1}, {&(0x7f0000000b00)=""/246, 0xf6}], 0x4, &(0x7f00000008c0)=""/83, 0x53}, 0x9}], 0x1, 0x40002000, 0x0) sched_setaffinity(r3, 0xffffffffffffff28, &(0x7f0000000780)=0x2) add_key$keyring(&(0x7f00000007c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioprio_set$pid(0x2, r3, 0x2000) socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x2, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000800)={0x1, &(0x7f0000000840)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_clone(0xcc200500, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.712470017s ago: executing program 5 (id=782): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000030000000000000000000000850000004100000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000400), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="a6f491201200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, 0x0, 0x48440, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2c41, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) flock(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) flock(r4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/4\x00') read$FUSE(r5, &(0x7f0000000a80)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x2010, r2, 0xe0a01000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) 1.235324375s ago: executing program 5 (id=783): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000380)=""/75, 0x4b}], 0x2, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000200)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x6, 0x3a, '!*@@', 0x3a, '/},(\x8e', 0x3a, './cgroup.cpu/memory.limit_in_bytes', 0x3a, [0x46, 0x46, 0x4f, 0x50]}, 0x4f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/veth0/queues/tx-1/xps_cpus\x00', 0x2, 0x0) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32], 0x1, 0x1b9, &(0x7f0000000440)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file2\x00', 0x60840, 0x8) read$FUSE(r4, &(0x7f0000001200)={0x2020}, 0x2020) read$FUSE(r1, 0x0, 0x0) write$FUSE_OPEN(r3, &(0x7f0000003240)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x20) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000003280)={'xfrm0\x00', 0x0}) syz_fuse_handle_req(r1, &(0x7f00000032c0)="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", 0x2000, &(0x7f00000052c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005380)={0x78, 0x0, 0xfffffffffffffc25, {0x6, 0x5, 0x0, {0xfffffffffffffffc, 0x8a, 0x1, 0x0, 0x0, 0xa, 0x3, 0x0, 0x0, 0x4009, 0x6, 0x0, 0x0, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800011, &(0x7f0000000180)={[{@journal_async_commit}, {@sysvgroups}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe}}, {@nombcache}]}, 0x1, 0x618, &(0x7f0000000bc0)="$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") 1.202877989s ago: executing program 5 (id=784): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000001, 0x10, r0, 0x1ee3d000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') setns(r2, 0x10000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd24, 0x0, {0x2, 0x20, 0x14, 0x0, 0xff, 0x0, 0x0, 0x7, 0x2400}, [@RTA_DST={0x8, 0x1, @multicast1}]}, 0x24}}, 0xea5bc50b4199d7ae) 1.145177004s ago: executing program 5 (id=785): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r0 = eventfd2(0xffffffff, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x4}) read$eventfd(r0, &(0x7f0000000180), 0x8) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x121000, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES64=r2], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x4, 0x2, 0x4, 0x10, 0x0, r2, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$inet(r3, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x20000000) 1.136216735s ago: executing program 7 (id=786): accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x100800) (async) r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x100800) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000580)={0x1, 0x40}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000d0000000400000001000004070000000a00000003000000060000000061005f2e2e612e61005fbb04e305d90f1ba9cd85878b0413e373e6229df4601f7c21e3b42611026ff7ae3190bc3f8c6cf5cee03e752712d45e9e2bc18cb1a3f88c81d1efe5435fd3eeeda85d3738af2d169e"], 0x0, 0x3d}, 0x28) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = fsopen(&(0x7f0000000240)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd29, 0x25dfdbfc, {0x2, 0x8e, 0x10, 0xc, 0x9, 0x0, 0x0, 0x5, 0x8013}, [@FRA_DST={0x8, 0x1, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd29, 0x25dfdbfc, {0x2, 0x8e, 0x10, 0xc, 0x9, 0x0, 0x0, 0x5, 0x8013}, [@FRA_DST={0x8, 0x1, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x2, &(0x7f0000000480)=[r4, 0xee00]) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000a00)={'filter\x00', 0x10, 0x4, 0x3c8, 0x110, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth1_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x4, {@empty, @mac=@dev, @dev, @broadcast}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@arp={@empty, @empty, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'tunl0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r6 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x30, r8, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x8, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x30, r8, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x8, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="21c3", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x4015) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@float={0x5, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x5f, 0x0, 0x61, 0x0]}}, &(0x7f0000000180)=""/47, 0x2a, 0x2f, 0x1, 0x6}, 0x28) r9 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r9, 0x11b, 0x7, &(0x7f00000005c0), &(0x7f0000000600)=0x30) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000740)={0x28, 0x0, 0x2710}, 0x10) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000740)={0x28, 0x0, 0x2710}, 0x10) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r10, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r10, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x24000025}, 0x4800) (async) sendmsg$nl_route(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x24000025}, 0x4800) 1.056944754s ago: executing program 7 (id=787): socket$inet6(0xa, 0x3, 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@utf8}, {@utf8}, {@shortname_win95}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@utf8no}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_lower}, {@shortname_mixed}, {@utf8}, {@fat=@check_strict}, {@utf8no}, {@rodir}]}, 0x1, 0x2a7, &(0x7f0000000140)="$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") sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x20000004) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000580), 0x4000087, 0x2, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000005c0)='.\x00', 0x800, &(0x7f0000000600)={0xf}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000005, 0x12, 0x0, 0x471ac000) 941.923225ms ago: executing program 6 (id=790): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc40a, &(0x7f0000000540)={[{@noblock_validity}, {@noauto_da_alloc}, {@nobh}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@acl}, {@usrjquota, 0x2e}, {@noacl}, {@nodiscard}, {@grpquota}, {@usrquota}], [], 0x2c}, 0x1, 0x45e, &(0x7f00000005c0)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000001380)=0x100000001, 0x4) connect$inet(r0, &(0x7f00000014c0)={0x2, 0x4e21, @local}, 0x10) shutdown(r0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000001500), 0x4) r1 = add_key(&(0x7f0000000a40)='keyring\x00', &(0x7f0000000a80)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) capset(&(0x7f0000001100)={0x20080522}, &(0x7f0000001140)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key(&(0x7f0000000ac0)='asymmetric\x00', 0x0, &(0x7f0000000b00)="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", 0x559, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000001080)={r3, 0x0, 0xffffffbb}, &(0x7f00000010c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=_'], 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB=',de,context=\"U']) mount$overlay(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@metacopy_on, 0x0}], [], 0x2c}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x401, 0x400000, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5a4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x10, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_FLUSH={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001240)={{r7, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r7}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001300)={r8, &(0x7f0000001340)="c54fa3541f1da77a9d43dfa8e7a7dd20d30db1ab1ca7c2810cad36c5e6de77d841609328deffb58d", &(0x7f0000001380), 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000013c0)={'veth0_to_bond\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {0x4}, {}, {0xfff3}}}, 0x24}}, 0x800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {0xe, 0x10}, {0xd}, {0xfff3}}}, 0x24}}, 0x0) 863.778463ms ago: executing program 6 (id=791): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x9, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0xffff8001, 0x4) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0xffff8001, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/4102, 0x1006}, 0xadd}], 0x1, 0x40002000, 0x0) syz_usb_connect$uac3(0x5, 0xb3, &(0x7f0000001240)=ANY=[@ANYBLOB="6cea4d189fd6d7bcadcc11cca33d8e8512edba62fb0bb20398156326769078b22855896cd4664e4a331d2bc94a61a297445a8b697be528bb", @ANYBLOB="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"/388, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES64=0x0, @ANYRES8=r0, @ANYRESDEC=r0], 0x0) 656.339434ms ago: executing program 5 (id=792): r0 = fsopen(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, 0x0, 0x4004810) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x8, 0x0) recvmmsg(r1, 0x0, 0x0, 0x60, 0x0) fsmount(r0, 0x0, 0x0) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x60000526) chdir(0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) preadv(r3, 0x0, 0x0, 0x0, 0x3) syz_read_part_table(0x5df, &(0x7f0000000c00)="$eJzs3DGL7FQUB/B/JplMBp/ufgCLhdeIFs9W8YGFstqJaGdha/FEnoVYyJtBwUL9ANuKFq6CrLWFhdhsZyXCYiNib+EWypVkktlRwcIdC+H3K5Kbe3POSSYnZSb8v5WDpFTJedImH9a5Ny7c129+SubzZH2YZLGZn4/rVZIXT59+YHN0ujO7GvbNbpUxNk2OxtGXTT44PX53GK9STWVXyfyzdghuynBJOfn7RV9WqftzZnv8Ifg3mq/K5km33bf5Ismdqu6bYJGs83FymC51kltJ6lLK8JhXyTKpu33UzzfrKc9yuI6pRZdJlzw6Nt88ZVi+d3OKrJMHn7h1N6lWf8nZp0i3bneafejrG1PsLNvuXqZt+rXDapzpttlTZlfxF8vktYvn079I/evW55jv4f4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANivh15/OO108OSwrTbjJsknmV2dukp+m8ZH3Z7qf16tDt5+5+4sb95+5btX3/rx+Of8kqTO8vhGstie9/Jmd/besGvG2fra9e/8Pms//ejr5XZiTP1MkpvfX5apwmIs98bjO8G3H7t2fQAAAAAAAAAAAAAAAAAAAOid5dmj55q88FSqvJSrz/1LuqSqpsMuKaWUX8ufvvtvT6bv5s9/SNUHpVQ7y/3m4P50ZfH+I8PfCmyiSynNUKL67++Pf/ZHAAAA//+RlU3D") 624.460977ms ago: executing program 5 (id=793): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414"], 0x0) (async) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414"], 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x8900}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) 272.457453ms ago: executing program 6 (id=794): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000000500), 0x26, 0x763, &(0x7f0000000680)="$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") chdir(&(0x7f0000000e00)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x0, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) preadv(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/111, 0x6f}], 0x1, 0x7, 0x4) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f00000001c0)={0x0, 0x0, 0x8000, 0x2}) (async) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f00000001c0)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000200)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000f00)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x34, 0x0, 0x0}) 270.809653ms ago: executing program 6 (id=795): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x4a00) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000100)={{r1}, 0x5, &(0x7f00000000c0)=[0x8, 0x8, 0x8, 0xfffffffffffff36d, 0x2], 0x9, 0x2, 0x1}) r2 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000180)='./md1\x00', 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000200)={0xfe, 0x18, '\x00', 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000580)={0x0, 0x1, 0xf, 0x8001, 0x4, 0x1}) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r4 = gettid() prlimit64(r4, 0x0, &(0x7f0000000640)={0x6, 0x5}, &(0x7f0000000680)) r5 = open_tree(r0, &(0x7f00000006c0)='./file0\x00', 0x800) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r5, 0xc040583f, &(0x7f00000007c0)={{@align=0x5, {0x7, 0x5, 0x7, 0xbd}}, {{[0x8, 0xffffffff, 0x4, 0x8]}, 0x0, 0x1, 0x1, 0x0, &(0x7f0000000700)=[{{@_ha_fsid={[0x8, 0x8]}, {0x8, 0x9, 0xa897, 0x3f7a}}, 0x4, 0x0, './md1\x00'}, {{@align=0x80000001, {0xf293, 0xfc0, 0x9, 0x6}}, 0xa8000000, 0x0, '^.\x00'}, {{@align=0x7fff, {0x4, 0x2, 0xfffffff9, 0x9}}, 0x3, 0x0, '}\x00'}, {{@align=0xfff, {0x1280, 0x9, 0x1, 0xee}}, 0x5, 0x0, '@\'@(*\x00'}]}}) r6 = fsopen(&(0x7f0000000800)='nilfs2\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000840)='ro\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000880)={r5, r1}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r5, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r7}, &(0x7f0000000980), &(0x7f00000009c0)=r5}, 0x20) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r8, &(0x7f0000002a40)=[{{&(0x7f0000000a40)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x5}, 0x1c, &(0x7f0000000fc0)=[{&(0x7f0000000a80)="049daf4b582e7fcaad74ddca5d9cdc608c1a07e625049d376e72ef2dba1e70723e0890475f963c3f03234e89f0b90691c2635d7e2230ebe9619ea42076049947a6de664f4063d3ccc766be9ff1ec0b198e0e9cf8d4900792f03614a72238ff208837d869fe5d8125fe5bb43e18dece1ea312e0d7a22373a3b66905fd398aeac83a9c23ea2b488cb249c9da8d934f398d92b1902096f26119d0ee809dd43bea708c133d8818241c125a01bb341aad1f383997e4f61b7b46cbcce8ac30d6d94d0c474c21867e35ef32ab27c322fa255fb0e67d3faaeb6b33552cf2eadfae57ede7b6a02acaf8c4d866704b732d82", 0xed}, {&(0x7f0000000b80)="756065a8eb05bbfd96ce5f8f14987676fa60d06aef8fcf429aec0e0f683c53e5080dd4f2601038f8a9374b9963be00366664455090a800fde54709472d2187bdeb1b15770229a17e5235acf8b428e5b4ce68b7c1a8c658d9fd1a54542147bf79caa411", 0x63}, {&(0x7f0000000c00)="f3aadba41afd57f464d0afbda3d32f217df351df73785f473e50e2eb163acaa16e22c9c4bbf8e3acd2280555c42d898b19e6814a755d154f64733e6cbaf57a12fb97ab284cecabdef8fb07b3818818299935198985e2b4cf71f4e37bf18b0397cfce55b8f599f70329f52ab1fc67496249f691056809f5453d438566eac2c9d105ec05263da347d888fc619201c8735abd70ffabf2189b", 0x97}, {&(0x7f0000000cc0)="01cb86f50bf87de02cc908c7563c105142d6059251bd8a5114ccaa06a197f902e97199feecb3d99eea08d5631d2cc7ccc3735ea0a2ad3c29c5f020b9384ff092e69d2d333dd7b94c32f87b99a930f621d33315228abc6383018f003c7c03b7e54631d48c180a5adea36207befb0035c4167aef6a37f861a01eb86e78993354f0eab7a4c8d8cd58eb66400c2e97cfba7c58733375d007e17146184dacb1ea3e958b62d3e75e74757b84266bec62ae970a51a5bcfa594edfc3fe6ac73dd9b7f7870aa4ac561920bb8a6b2d31a71ab3eff92cbbe4efe984bccd2a0af70e78c522cc080b899f8b", 0xe5}, {&(0x7f0000000dc0)="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", 0xff}, {&(0x7f0000000ec0)="02dbba4bee2722cc39122aa5a28849d5f418f1f7524ce49a9eca2806ee2f7702cc5fafeb7d6dce2f7acbc1540a8e17e462fd95c57afdcdebca5836e9f76191d781f5259e6ba0fce68f1683578e1a5ca2caf2c51e3229a738cdc2e939c8eaab045072a711783e414acb91a4c94602140ec76b78d70b3972b906731f75f669f3a06c7d3ae1b3d64287cc2cbfb297cec6fb67c0accef56323df148977f58636fda0148f9bc31ba9b1308c0ffcb799b5fcf8238a22272c50598264460c2a25fd36af09316a464061d9ad9175f102f686c3a7308d058c7de43dd3d03d860895f1d59d98778d69e6", 0xe5}], 0x6, &(0x7f0000001040)=[@rthdr={{0x68, 0x29, 0x39, {0x3b, 0xa, 0x0, 0x35, 0x0, [@remote, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r3}}}, @dstopts={{0x20, 0x29, 0x37, {0x4, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xf8}]}}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x5c, 0xa, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x8, 0x4, [0x1, 0x568a15b0, 0x4, 0xfffffffffffffffc, 0x37]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x6}]}}}], 0x120}}, {{&(0x7f0000001180)={0xa, 0x4e23, 0x4, @mcast2, 0x9}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000011c0)="a5825ed41cf192290578c658209c2a4dd951f1c2e1f3af2c9dfd0ea7dac44809d28fc47c48af4f10446e1bf748655c7a4de428709d0b787165accf7a99e40020b565ccc734b05ace5e60c1a95c5c4a53bda25cadda93fe", 0x57}, {&(0x7f0000001240)="b4afb9bbabfb48e7e2bb05807f3ec3fbda97ec25d3fd60a3470d93c674a8b82a48ed49551dffc581c6a9c79bbc4284a2671ee728730eb5ead6b05d5cee506dca304f58393ba570e2afe2664b6304dfbdaf73614ed512b6012942f679efeab1089fd5284311c33205005e72e39e4eb6348a55fe29008a475561d97bd4b557a5eaae616b0b847948066d639f45a96f8d40e497b0bf7511a0c3a57735", 0x9b}, {&(0x7f0000001300)="7aae70c277df079d008296bf842e727bfa56aac0a4da71a76e89e45b6ae26b8f", 0x20}, {&(0x7f0000001340)="1e8e09938bdeb0d3e6e87f5f4f28838c242a31526266745ab64166e279b77d3cdee1812e472652359b18af84b7b2b078611e632b0335c32c38400bbc9341186635c8d2", 0x43}], 0x4, &(0x7f0000001400)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x5e, 0x1, '\x00', [@pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @tclass={{0x14}}, @dstopts={{0x110, 0x29, 0x37, {0x0, 0x1e, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @generic={0x5, 0xd3, "fbbea550cceec70c9b0706ad2a114e704564f3071ba49c4f2a1b5ca6405a30c26918123de7f2c94842b28eedf96ae4c7e85399a0d05f5f2dc64fd685021c312837099601b0f81110ada0aadafeceab7bd8be639e3a25aa129dbea37517ddd5731828982128982624fa84f47b1e50e09dbf5585fc3ebd56c8111b4367db80aaf3363fc23cd62ba0f98d74dc3dac21b9e862b715610defa21248aacbf7fb81c0b4f66796cda12febd3fbad08a7f7b3884013c5b9b78815fcf54bafcc15f74f0aad118628789025dbabe8a693ffc838bad0859398"}]}}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x1, 0xa, '\x00', [@generic={0x0, 0x20, "f1cd97e9e3d203f042a5b675250986c09752b7e4ba527d9a58c86b5cfaee2471"}, @calipso={0x7, 0x10, {0x0, 0x2, 0x81, 0x1000, [0xffffffff]}}, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x2e}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x777}}, @dstopts={{0x88, 0x29, 0x37, {0x33, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0xea}, @enc_lim={0x4, 0x1, 0x59}, @generic={0x0, 0x5e, "9c6c3b95b315be910372dd6065af6ec1fa287617ddce0dfbaf53834655c80afe6d8c9c05e1aaf756caf463969ee9987b752da708d0b0f06cabed43ddf9379d341f747a572e17cada67acac013ec4909035c34747fcf60b360280fb08bb64"}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffd}}], 0x280}}, {{&(0x7f0000001680)={0xa, 0x4e20, 0x401, @mcast2, 0x9}, 0x1c, &(0x7f0000002900)=[{&(0x7f00000016c0)="ada602a1d501926637da3adf295a6aee022b95622db24e26ff90657effdcd91e08712ce711675f271a74f719db9a633d02fd34309b378f5b7bdaf7b2824c23c0890566d97a", 0x45}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="443cfc7f5b0eebad807a3414379e96ccbfbb09570670a7fb2182c7eb2808e1af5dd8c9aa64fdd58bef69aa5cd4c1c5d787702149d7a93e53e5bad35c0cb9acdcd77667d5c6e3583120b8316d9eb8cf5364cc80ce83a131b52189f406c248925decd860e84639dc6420b3a6f7547dd4d9db33e91e79683c9ee448c76b20546f7bca90d20a92b4a6df8d62f13c0780a82ac5f4d8cacd3d104e9c94111e6a852ad4796c130a6248d4fbee020d", 0xab}, {&(0x7f0000002800)="3162b13e7f847f596a7d8cbe30f0172e44b2ef8f9d5ec6fbfd8a947ad2068dfeb44d86bd59", 0x25}, {&(0x7f0000002840)="efcd144f9b027c65595da58c7a6cc0130c6400e219525be4fffef62561f136d6b3466d40c337c83375a8cb0bdf6dacdc832128c65f034e382ba3304b3ad5624e56520e7b9f2831e92ad10bfb2be41ab47864052c860662b382db760fccccbc624625a1b2c9c9c314a29c18a7ee956f179ecadb23e7e04ac5d20afde620a8abd6fe9332524fb6fa362a465622c2743c3ae7", 0x91}], 0x5, &(0x7f0000002980)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x21, 0xe, 0x1, 0x6, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x17}, @dev={0xfe, 0x80, '\x00', 0x3a}, @private2, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}]}}}], 0x88}}], 0x3, 0x40800) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000002b00)=""/5) move_mount(r5, &(0x7f0000002b40)='./file0\x00', r5, &(0x7f0000002b80)='./file0\x00', 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002bc0)={0x6}, 0x8) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0xfe) mkdir(&(0x7f0000002c00)='./file0/file0\x00', 0x108) preadv2(r6, &(0x7f0000003d40)=[{&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/244, 0xf4}], 0x2, 0x184, 0x4, 0x36) sendmsg$nl_route(r0, &(0x7f0000003ec0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003e80)={&(0x7f0000003dc0)=@bridge_getneigh={0x98, 0x1e, 0x800, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, r3, 0x200, 0xe91f1bd29ef8b82f}, [@IFLA_VF_PORTS={0x78, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0xc}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_PROFILE={0x7, 0x2, '--\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "3cf90cc67d8989e3d981f71c436becd2"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "d2ffa415a54f0a7636806cd65af339a0"}, @IFLA_PORT_VF={0x8, 0x1, 0x7}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "68e96b4675cbd1e52bcd468af53bd365"}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4840}, 0x4004000) getrlimit(0x7, &(0x7f0000003f00)) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000003f40)=r4) renameat(r5, &(0x7f0000003f80)='./file0\x00', r0, &(0x7f0000003fc0)='./file0/file0\x00') mkdirat(r5, &(0x7f0000004000)='./file0/file0\x00', 0x29) 247.968765ms ago: executing program 6 (id=796): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x4, 0x7fffffffefff) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, &(0x7f00000000c0)={0xfffffffd, 0xd, 0xc, 0xc00000, 0x4, 0x10000, 0x4}) prlimit64(0x0, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) (async) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x4c, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000980)="$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") (async) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x4c, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000980)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000002bc0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000003080)='.\x00', 0x0, 0xe8) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000003080)='.\x00', 0x0, 0xe8) getdents(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000dc0)=@abs={0x0, 0x0, 0x2}, 0x6e) (async) connect$unix(r2, &(0x7f0000000dc0)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x2400c894) syz_mount_image$fuse(0x0, 0x0, 0x3000042, 0x0, 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000e40), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d099, 0x0, 0x40, 0x0, &(0x7f0000000300)) mknod$loop(&(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001bc0)={{r3}, 0x0, 0x4, @unused=[0x4, 0xfffffffffffffff7, 0x77, 0xffffffffffffffff], @devid}) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001bc0)={{r3}, 0x0, 0x4, @unused=[0x4, 0xfffffffffffffff7, 0x77, 0xffffffffffffffff], @devid}) link(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0xc5c, &(0x7f00000002c0)={[{@errors_remount}, {@grpid}]}, 0x3, 0x459, &(0x7f0000001300)="$eJzs3MtvG0UYAPBvN48S2pJQyqMPIFAQEY+kaQv0wAEQSByKhAQHOEZJWpWmDWqCRKsIWoTKCSEk7ogj/wInuCDECYkr3FGlCuWSlpPR2ruN7dhu4tpxi38/ycnMzmxmPu+OPbtjJ4C+NZ79SCJ2RcSfETFaydZWGK/8ur66MntjdWU2iVLp3X+Scr211ZXZomqx3848M5FGpF8kcaBBu0sXLp6ZWViYP5/np5bPfjS1dOHiC6fPzpyaPzV/7sjx48eOTr/80pEXOxJn1qe1/Z8uHtz31gffvH3iq5r46+LokPFWhU+XSh1urrd2V6WTwQ3FI9vaGTZtICKywzVUHv+jMRDrB2803vy8p50DuqpUKpV2Ni++VAL+x5KozRvy0C+KN/q11ZU0VldmG10Hv9q96UfPXXutcgGUxX09f1RKBiPN6wzVXd920nhEvH/p3++yR3TnPgQAQI2fsvnP85V5x1rN/C+Nh6rq3ZevDY1FxP0RsSciHoiIvRHxYES57sMR8cgW269fJNk4/0mvthXYJmXzv1fyta3a+V8x+4uxgTy3uxz/UHLy9ML84fw5mYihHVl+ukUbP7/xx9fNyqrnf9kja7+YC+b9uDq4o3afuZnlmduJudq1yxH7BxvFn9xcCUgiYl9E7G+zjdPP/nCwWdmt429h4zrTlpW+j3imcvwvRV38haT1+uTUPbEwf3iqOCs2+u33K+80a/+24u+A7Pjf2/D8vxn/WFK9Xru09Tau/PVl02uads//4eS9cno43/bJzPLy+emI4eREpdPV24+s71vki/pZ/BOHGo//PbH+TByIiOwkfjQiHouIx/O+PxERT0bEoRbx//r6Ux+2H393ZfHPben4ryeGo35L48TAmV9+rGl0bEP8N1of/2Pl1ES+ZTOvf5vpV3tnMwAAANx90ojYFUk6eTOdppOTlc/L741IFxaXlp87ufjxubnKdwTGYigt7nSNVt0Pnc4v6yv5yxFR+WhBUX40v2/87cBIOT85u7gw1+vgoc/tbDL+M38P9Lp3QNd1YB0NuEsZ/9C/jH/oX8Y/9K8G498/bIE+0ej9/7Me9APYfnXj37If9BHX/9C/jH/oX8Y/9KWlkbj1l+RbJoq/1Obut5sY2fRX/bc5EUN3RDe6loj0juiGRJcSvX1dAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6JT/AgAA//9OFd7A") syz_mount_image$fuse(0x0, &(0x7f0000001780)='./bus\x00', 0x800, 0x0, 0x0, 0x0, 0x0) 108.845309ms ago: executing program 6 (id=797): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580000001c00010025bd7000ffffffff07000000", @ANYRES32=r1, @ANYBLOB="8000a6040a000200aaaaaaaaaa1c000004000e8014000e8005000100050000000500010007"], 0x58}, 0x1, 0x1000000, 0x0, 0x11}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8001}}}, 0x32) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)='v', 0x1fffa2}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 0s ago: executing program 1 (id=798): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000280)='syz0\x00') r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2e}, 0x4, 0x0, 0x2, 0x1, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x9c940000, 0x2, 0x3, 0x8, 0x1, 0x3}, 0x20) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x4, &(0x7f0000000480), 0x1, 0x76a, &(0x7f0000000540)="$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") chdir(&(0x7f0000000cc0)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', 0x0, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000d40)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000dc0)={0x3, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000200)='./cgroup\x00', 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e80)=ANY=[@ANYBLOB="240000001900010028bd7000100000020000000000020009000008000600fffffffff602b54c4c376724a90f3b23424ea39d3ca0037d366452e15faa6b31429adeb87bcf0d03535f0000"], 0x24}}, 0x4000041) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000f80)=@filter={'filter\x00', 0x2, 0x4, 0x348, 0xffffffff, 0x1a8, 0x1a8, 0x0, 0xfeffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x65}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6}, {0x0, 0x4, 0x2}, 0x0, 0xd}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000001340)="d8df0f23b3b9ce000000b807000000ba000000000f30660f011db3e00000600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c5fa0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x63}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f00000003c0)={0x1, 0x0, [{0xd, 0x7, 0x2, 0x7f, 0x7, 0x9, 0x81}]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newqdisc={0x1ac, 0x10, 0x1, 0x0, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0xb, 0xb}, {0xe, 0x6}}, [@TCA_STAB={0x158, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x0, 0x40, 0xfffffff7, 0x0, 0x6, 0x98, 0x4}}, {0xc, 0x2, [0x3ff, 0x9, 0x3, 0x5]}}, {{0x1c, 0x1, {0x7, 0x3, 0x1, 0xffffff5f, 0x1, 0xcad1, 0x7, 0xa}}, {0x18, 0x2, [0x8, 0xd5, 0x6, 0x1, 0x1, 0x6, 0x6, 0xf, 0x7f, 0x5]}}, {{0x1c, 0x1, {0x0, 0x8, 0x10, 0xfffffff0, 0x1, 0xffff, 0x9, 0x2}}, {0x8, 0x2, [0x9, 0x2]}}, {{0x1c, 0x1, {0xdf, 0x1, 0x80, 0x3, 0x1, 0x5, 0x3, 0x2}}, {0x8, 0x2, [0x7, 0xf]}}, {{0x1c, 0x1, {0x4, 0x9, 0x1, 0x80000001, 0x0, 0x96da, 0x3, 0x7}}, {0x12, 0x2, [0xf, 0x2, 0xe, 0x1862, 0xd, 0xe, 0xb9]}}, {{0x1c, 0x1, {0x5b, 0x1, 0x75, 0x10000, 0x1, 0x7fffffff, 0x8, 0x8}}, {0x14, 0x2, [0x3a, 0x3d70, 0x2, 0x4, 0xd4, 0xff, 0x1, 0x7269]}}, {{0x1c, 0x1, {0x2, 0xf0, 0x1, 0x0, 0x4, 0x6, 0x4, 0x6}}, {0x10, 0x2, [0x4, 0x3, 0x8000, 0x1, 0x5, 0xd]}}, {{0x1c, 0x1, {0x4, 0x7, 0x1, 0x4, 0x0, 0x7, 0x6, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x3) mmap(&(0x7f00009c7000/0x2000)=nil, 0x2000, 0x2000003, 0x40010, r0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000f00)='/proc/vmallocinfo\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 0 R09: 0000000000000000 [ 117.781033][ T1253] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 117.789033][ T1253] R13: 00007ff4e1426038 R14: 00007ff4e1425fa0 R15: 00007ffe543ddcc8 [ 117.797043][ T1253] [ 117.896107][ T802] usb 6-1: Invalid ep0 maxpacket: 9 [ 117.901631][ T802] usb usb6-port1: attempt power cycle [ 118.070992][ T1259] loop6: detected capacity change from 0 to 8192 [ 118.081862][ T28] audit: type=1326 audit(1794163134.522:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1258 comm="syz.6.236" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe17279fb19 code=0x0 [ 118.135542][ T28] audit: type=1400 audit(1794163134.572:338): avc: denied { mounton } for pid=1258 comm="syz.6.236" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 118.227684][ T1257] loop0: detected capacity change from 0 to 40427 [ 118.238129][ T1257] F2FS-fs (loop0): invalid crc value [ 118.244720][ T1257] F2FS-fs (loop0): Found nat_bits in checkpoint [ 118.285404][ T1257] F2FS-fs (loop0): Start checkpoint disabled! [ 118.293503][ T1257] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 118.301277][ T1257] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 118.319545][ T1257] syz.0.235: attempt to access beyond end of device [ 118.319545][ T1257] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 118.333395][ T802] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 118.363193][ T1236] kworker/u4:8: attempt to access beyond end of device [ 118.363193][ T1236] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 118.377678][ T802] usb 6-1: Invalid ep0 maxpacket: 9 [ 118.541772][ T802] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 118.586696][ T802] usb 6-1: Invalid ep0 maxpacket: 9 [ 118.613651][ T802] usb usb6-port1: unable to enumerate USB device [ 119.416145][ T19] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 119.454683][ T1285] __nla_validate_parse: 58 callbacks suppressed [ 119.454702][ T1285] netlink: 68 bytes leftover after parsing attributes in process `syz.7.244'. [ 119.470874][ T1285] netlink: 16 bytes leftover after parsing attributes in process `syz.7.244'. [ 120.620877][ T1281] loop0: detected capacity change from 0 to 131072 [ 120.636474][ T1281] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 120.647085][ T1281] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 120.664273][ T1281] F2FS-fs (loop0): invalid crc value [ 120.681571][ T1281] F2FS-fs (loop0): Found nat_bits in checkpoint [ 120.728088][ T1281] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 120.735346][ T1281] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 120.743165][ T40] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 120.762504][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.776430][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.786261][ T19] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.799204][ T19] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.808318][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.817227][ T19] usb 7-1: config 0 descriptor?? [ 120.822310][ T1281] F2FS-fs (loop0): sanity_check_inode: corrupted inode footer i_ino=8, ino,nid: [61317896, 8] run fsck to fix. [ 120.903938][ T1302] loop7: detected capacity change from 0 to 1024 [ 120.910416][ T40] usb 5-1: device descriptor read/64, error -71 [ 120.927656][ T1302] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 120.936304][ T1302] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.216199][ T40] usb 5-1: device descriptor read/64, error -71 [ 121.277373][ T1311] loop0: detected capacity change from 0 to 512 [ 121.289010][ T1279] loop6: detected capacity change from 0 to 40427 [ 121.295552][ T1311] EXT4-fs (loop0): Test dummy encryption mode enabled [ 121.307291][ T1279] F2FS-fs (loop6): invalid crc value [ 121.321957][ T1311] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #11: comm syz.0.250: casefold flag without casefold feature [ 121.334918][ T1279] F2FS-fs (loop6): Found nat_bits in checkpoint [ 121.335577][ T1311] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.250: couldn't read orphan inode 11 (err -117) [ 121.354974][ T1311] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 121.404428][ T1279] F2FS-fs (loop6): Start checkpoint disabled! [ 121.411267][ T1279] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 121.419362][ T1279] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 121.460743][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 121.460761][ T28] audit: type=1326 audit(1794163393.898:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1277 comm="syz.6.241" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17279fb19 code=0x7ffc0000 [ 121.492009][ T28] audit: type=1326 audit(1794163393.928:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1277 comm="syz.6.241" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17279fb19 code=0x7ffc0000 [ 121.518837][ T40] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 121.525643][ T28] audit: type=1326 audit(1794163393.958:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1277 comm="syz.6.241" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17279fb19 code=0x7ffc0000 [ 121.551502][ T28] audit: type=1326 audit(1794163393.958:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1277 comm="syz.6.241" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17279fb19 code=0x7ffc0000 [ 121.576278][ T28] audit: type=1326 audit(1794163393.958:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1277 comm="syz.6.241" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe17279fb19 code=0x7ffc0000 [ 121.601711][ T28] audit: type=1326 audit(1794163393.958:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1277 comm="syz.6.241" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17279fb19 code=0x7ffc0000 [ 121.626709][ T28] audit: type=1326 audit(1794163393.958:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1277 comm="syz.6.241" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17279fb19 code=0x7ffc0000 [ 121.651414][ T28] audit: type=1326 audit(1794163393.958:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1277 comm="syz.6.241" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17279fb19 code=0x7ffc0000 [ 121.682524][ T28] audit: type=1326 audit(1794163393.958:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1277 comm="syz.6.241" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17279fb19 code=0x7ffc0000 [ 121.729549][ T40] usb 5-1: device descriptor read/64, error -71 [ 121.737523][ T289] EXT4-fs (loop0): unmounting filesystem. [ 121.743042][ T28] audit: type=1326 audit(1794163393.958:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1277 comm="syz.6.241" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe17276034e code=0x7ffc0000 [ 121.768718][ T1146] EXT4-fs (loop7): unmounting filesystem. [ 121.795665][ T1318] netlink: 'syz.0.251': attribute type 16 has an invalid length. [ 121.810729][ T1318] netlink: 'syz.0.251': attribute type 17 has an invalid length. [ 121.836245][ T19] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 121.849453][ T1325] loop7: detected capacity change from 0 to 512 [ 121.858715][ T19] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 121.873694][ T1318] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.881832][ T19] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 121.923321][ T1318] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.935007][ T1318] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.960997][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 121.969409][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.985127][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 121.996131][ T40] usb 5-1: device descriptor read/64, error -71 [ 122.003633][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.020929][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.039226][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.049903][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.058444][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.116224][ T40] usb usb5-port1: attempt power cycle [ 122.166220][ T19] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 122.199806][ T395] usb 7-1: USB disconnect, device number 6 [ 122.346119][ T19] usb 6-1: Using ep0 maxpacket: 32 [ 122.352448][ T19] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 122.367405][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.383463][ T19] usb 6-1: config 0 descriptor?? [ 122.393605][ T1339] loop0: detected capacity change from 0 to 1024 [ 122.397151][ T19] hub 6-1:0.0: USB hub found [ 122.426056][ T1339] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 122.515136][ T289] EXT4-fs (loop0): unmounting filesystem. [ 122.527965][ T40] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 122.548109][ T1343] loop0: detected capacity change from 0 to 512 [ 122.564414][ T1343] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.256: inode #13: comm syz.0.256: iget: illegal inode # [ 122.577427][ T1343] EXT4-fs (loop0): Remounting filesystem read-only [ 122.584042][ T1343] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.256: couldn't read orphan inode 13 (err -117) [ 122.588539][ T40] usb 5-1: device descriptor read/8, error -71 [ 122.598357][ T1343] EXT4-fs (loop0): Remounting filesystem read-only [ 122.613843][ T19] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 122.622762][ T1343] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 122.636584][ T19] usbhid 6-1:0.0: can't add hid device: -71 [ 122.642572][ T19] usbhid: probe of 6-1:0.0 failed with error -71 [ 122.716358][ T19] usb 6-1: USB disconnect, device number 10 [ 122.787232][ T40] usb 5-1: device descriptor read/8, error -71 [ 123.056116][ T40] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 123.097298][ T40] usb 5-1: device descriptor read/8, error -71 [ 123.154727][ T1355] loop7: detected capacity change from 0 to 512 [ 123.170182][ T1355] ext3: Unknown parameter 'hash' [ 123.247174][ T40] usb 5-1: device descriptor read/8, error -71 [ 123.257666][ T1236] kworker/u4:8: attempt to access beyond end of device [ 123.257666][ T1236] loop6: rw=1, sector=77824, nr_sectors = 2096 limit=40427 [ 123.285876][ T1236] kworker/u4:8: attempt to access beyond end of device [ 123.285876][ T1236] loop6: rw=1, sector=79920, nr_sectors = 2000 limit=40427 [ 123.293141][ T1364] netlink: 12 bytes leftover after parsing attributes in process `syz.7.262'. [ 123.319066][ T1236] kworker/u4:8: attempt to access beyond end of device [ 123.319066][ T1236] loop6: rw=1, sector=49152, nr_sectors = 2240 limit=40427 [ 123.338567][ T1236] kworker/u4:8: attempt to access beyond end of device [ 123.338567][ T1236] loop6: rw=1, sector=51392, nr_sectors = 1856 limit=40427 [ 123.362869][ T1236] kworker/u4:8: attempt to access beyond end of device [ 123.362869][ T1236] loop6: rw=1, sector=73728, nr_sectors = 4096 limit=40427 [ 123.377141][ T40] usb usb5-port1: unable to enumerate USB device [ 123.405955][ T1236] kworker/u4:8: attempt to access beyond end of device [ 123.405955][ T1236] loop6: rw=1, sector=81920, nr_sectors = 4096 limit=40427 [ 123.421847][ T1236] kworker/u4:8: attempt to access beyond end of device [ 123.421847][ T1236] loop6: rw=1, sector=86016, nr_sectors = 8 limit=40427 [ 123.437501][ T1236] kworker/u4:8: attempt to access beyond end of device [ 123.437501][ T1236] loop6: rw=1, sector=86024, nr_sectors = 8 limit=40427 [ 123.451364][ T1236] kworker/u4:8: attempt to access beyond end of device [ 123.451364][ T1236] loop6: rw=1, sector=86032, nr_sectors = 8 limit=40427 [ 123.465246][ T1236] kworker/u4:8: attempt to access beyond end of device [ 123.465246][ T1236] loop6: rw=1, sector=86040, nr_sectors = 8 limit=40427 [ 123.479108][ T1236] kworker/u4:8: attempt to access beyond end of device [ 123.479108][ T1236] loop6: rw=1, sector=86048, nr_sectors = 8 limit=40427 [ 123.493638][ T1236] kworker/u4:8: attempt to access beyond end of device [ 123.493638][ T1236] loop6: rw=1, sector=86056, nr_sectors = 8 limit=40427 [ 123.503705][ T1366] loop5: detected capacity change from 0 to 512 [ 123.508913][ T1236] kworker/u4:8: attempt to access beyond end of device [ 123.508913][ T1236] loop6: rw=1, sector=86064, nr_sectors = 8 limit=40427 [ 123.536467][ T1366] EXT4-fs: quotafile must be on filesystem root [ 123.564381][ T1370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.264'. [ 123.587143][ T1206] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 123.616115][ T1370] device ip6erspan0 entered promiscuous mode [ 123.688399][ T1375] loop4: detected capacity change from 0 to 256 [ 123.709265][ T1375] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 123.902531][ T1384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.917346][ T289] EXT4-fs (loop0): unmounting filesystem. [ 123.965920][ T1391] loop6: detected capacity change from 0 to 512 [ 124.057372][ T1393] loop0: detected capacity change from 0 to 16 [ 124.076830][ T1393] erofs: (device loop0): mounted with root inode @ nid 36. [ 124.086594][ T1393] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 124.095614][ T1393] erofs: (device loop0): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 124.334237][ T1391] loop6: detected capacity change from 0 to 40427 [ 124.355323][ T1391] F2FS-fs (loop6): invalid crc value [ 124.380782][ T1391] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 124.443753][ T1391] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 124.638094][ T1236] device bridge_slave_1 left promiscuous mode [ 124.647522][ T1236] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.678383][ T1236] device bridge_slave_0 left promiscuous mode [ 124.703523][ T1236] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.737864][ T1236] device veth1_macvtap left promiscuous mode [ 124.762473][ T1236] device veth0_vlan left promiscuous mode [ 124.852688][ T1404] sd 0:0:1:0: PR command failed: 1026 [ 124.859370][ T1404] sd 0:0:1:0: Sense Key : 0x5 [current] [ 124.865100][ T1404] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 124.941428][ T1407] capability: warning: `syz.0.276' uses 32-bit capabilities (legacy support in use) [ 124.955812][ T1409] loop6: detected capacity change from 0 to 2048 [ 124.975209][ T1409] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 125.070476][ T1396] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.083793][ T1396] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.091661][ T1396] device bridge_slave_0 entered promiscuous mode [ 125.099279][ T1396] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.106514][ T1396] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.114161][ T1396] device bridge_slave_1 entered promiscuous mode [ 125.164645][ T693] EXT4-fs (loop6): unmounting filesystem. [ 125.206487][ T1396] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.213624][ T1396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.220965][ T1396] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.228040][ T1396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.270550][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.286671][ T1240] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.296645][ T1240] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.316533][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.334996][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.342108][ T1240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.357349][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.365872][ T1240] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.372971][ T1240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.390976][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.399316][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.425035][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.442335][ T1396] device veth0_vlan entered promiscuous mode [ 125.454856][ T1425] F2FS-fs (loop6): invalid crc value [ 125.455251][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.487742][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.496982][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.498265][ T1425] F2FS-fs (loop6): Found nat_bits in checkpoint [ 125.517480][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.526015][ T1396] device veth1_macvtap entered promiscuous mode [ 125.538117][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.552601][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.584170][ T1425] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 125.636937][ T1460] EXT4-fs (loop8): corrupt root inode, run e2fsck [ 125.643671][ T1460] EXT4-fs (loop8): mount failed [ 125.729206][ T1488] netlink: 'syz.8.282': attribute type 4 has an invalid length. [ 126.309775][ T1519] FAT-fs (loop7): bogus number of FAT structure [ 126.316244][ T1519] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 126.325737][ T1519] FAT-fs (loop7): Can't find a valid FAT filesystem [ 126.716596][ T1528] F2FS-fs (loop8): Image doesn't support compression [ 126.723345][ T1528] F2FS-fs (loop8): fault_type options not supported [ 126.742691][ T1528] F2FS-fs (loop8): invalid crc value [ 126.771800][ T1528] F2FS-fs (loop8): Found nat_bits in checkpoint [ 126.808630][ T1521] F2FS-fs (loop6): Invalid segment/section count (458783, 24 x 150994945) [ 126.826021][ T1521] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 126.844254][ T1521] F2FS-fs (loop6): invalid crc value [ 126.870732][ T1521] F2FS-fs (loop6): Found nat_bits in checkpoint [ 126.910531][ T1528] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 126.945886][ T1521] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 126.953800][ T1521] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 127.196774][ T1560] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 127.310001][ T1566] binder: 1565:1566 ioctl c0306201 0 returned -14 [ 127.593949][ T1578] fuse: Unknown parameter 'ootmode' [ 127.600670][ T1570] device veth0_to_batadv entered promiscuous mode [ 127.607457][ T40] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 127.654040][ T1590] overlayfs: empty lowerdir [ 127.847847][ T40] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 127.858286][ T40] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 127.869743][ T40] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 128.040795][ T40] usb 9-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 128.051211][ T40] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.116699][ T1566] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 128.124928][ T1566] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 128.141342][ T40] pl2303 9-1:1.0: pl2303 converter detected [ 128.167086][ T40] usb 9-1: pl2303 converter now attached to ttyUSB0 [ 128.486374][ T1566] pl2303 9-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 128.495297][ T1566] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 128.503836][ T1566] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 128.512292][ T1566] pl2303 9-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 128.872120][ T1613] netlink: 12 bytes leftover after parsing attributes in process `syz.5.304'. [ 128.886554][ T1566] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 128.912172][ T1615] device ip6gre1 entered promiscuous mode [ 128.919461][ T308] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 128.928880][ T308] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 128.936862][ T1615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1615 comm=syz.5.305 [ 128.949749][ T308] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 129.156347][ T1566] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 129.164186][ T1566] pl2303 ttyUSB0: error sending break = -32 [ 129.172243][ T308] usb 9-1: USB disconnect, device number 2 [ 129.180664][ T308] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 129.189417][ T308] pl2303 9-1:1.0: device disconnected [ 129.386330][ T40] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 129.406240][ T308] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 129.495984][ T28] kauditd_printk_skb: 1213 callbacks suppressed [ 129.496002][ T28] audit: type=1400 audit(1794163401.928:1569): avc: denied { ioctl } for pid=1625 comm="syz.5.309" path="socket:[25323]" dev="sockfs" ino=25323 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.530409][ T28] audit: type=1400 audit(1794163401.938:1570): avc: denied { read } for pid=1625 comm="syz.5.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.715643][ T1630] overlayfs: failed to clone upperpath [ 130.046304][ T1633] fuse: Bad value for 'fd' [ 130.704866][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.749896][ T1650] netlink: 4 bytes leftover after parsing attributes in process `syz.7.317'. [ 130.763634][ T28] audit: type=1400 audit(1794163403.208:1571): avc: denied { create } for pid=1649 comm="syz.7.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 130.808547][ T1650] netlink: 176 bytes leftover after parsing attributes in process `syz.7.317'. [ 130.834722][ T28] audit: type=1400 audit(1794163403.268:1572): avc: denied { read } for pid=1656 comm="syz.5.319" laddr=::1 lport=4 faddr=::1 fport=20480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.872233][ T1659] netlink: 'syz.7.320': attribute type 9 has an invalid length. [ 130.879964][ T1659] netlink: 36 bytes leftover after parsing attributes in process `syz.7.320'. [ 131.025074][ T1659] set_capacity_and_notify: 5 callbacks suppressed [ 131.025096][ T1659] loop7: detected capacity change from 0 to 512 [ 131.103887][ T1659] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 131.126190][ T1659] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 131.152142][ T1659] EXT4-fs error (device loop7): ext4_acquire_dquot:6828: comm syz.7.320: Failed to acquire dquot type 1 [ 131.177269][ T1659] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 131.201207][ T1659] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 131.221487][ T1659] EXT4-fs error (device loop7): ext4_acquire_dquot:6828: comm syz.7.320: Failed to acquire dquot type 1 [ 131.241605][ T1659] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.320: bg 0: block 248: padding at end of block bitmap is not set [ 131.308466][ T1686] fuse: Bad value for 'fd' [ 131.313831][ T1686] fuse: Bad value for 'fd' [ 131.318842][ T1659] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 131.319874][ T1686] fuse: Bad value for 'fd' [ 131.346408][ T1659] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 131.366135][ T1659] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 131.390074][ T1659] EXT4-fs error (device loop7): ext4_acquire_dquot:6828: comm syz.7.320: Failed to acquire dquot type 1 [ 131.425757][ T1659] EXT4-fs (loop7): 1 orphan inode deleted [ 131.456122][ T1659] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 131.465102][ T1659] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.569255][ T1146] EXT4-fs (loop7): unmounting filesystem. [ 131.740127][ T1712] FAULT_INJECTION: forcing a failure. [ 131.740127][ T1712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.766350][ T1712] CPU: 1 PID: 1712 Comm: syz.0.333 Not tainted syzkaller #0 [ 131.773731][ T1712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 131.783850][ T1712] Call Trace: [ 131.787161][ T1712] [ 131.790122][ T1712] __dump_stack+0x21/0x24 [ 131.794481][ T1712] dump_stack_lvl+0x110/0x170 [ 131.799191][ T1712] ? __cfi_dump_stack_lvl+0x8/0x8 [ 131.804248][ T1712] dump_stack+0x15/0x24 [ 131.808437][ T1712] should_fail_ex+0x3bf/0x510 [ 131.813173][ T1712] should_fail+0xb/0x10 [ 131.817359][ T1712] should_fail_usercopy+0x1a/0x20 [ 131.822633][ T1712] _copy_from_user+0x1e/0xc0 [ 131.827253][ T1712] memdup_user_nul+0x68/0xf0 [ 131.831883][ T1712] __se_sys_fsconfig+0x553/0x7e0 [ 131.836891][ T1712] ? __x64_sys_fsconfig+0xd0/0xd0 [ 131.841965][ T1712] ? __kasan_check_write+0x14/0x20 [ 131.847108][ T1712] ? fpregs_restore_userregs+0x128/0x260 [ 131.852785][ T1712] __x64_sys_fsconfig+0xbf/0xd0 [ 131.857670][ T1712] x64_sys_call+0x5df/0x9a0 [ 131.862215][ T1712] do_syscall_64+0x4c/0xa0 [ 131.866663][ T1712] ? clear_bhb_loop+0x30/0x80 [ 131.871400][ T1712] ? clear_bhb_loop+0x30/0x80 [ 131.876109][ T1712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.882040][ T1712] RIP: 0033:0x7ff4e119fb19 [ 131.886484][ T1712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.906125][ T1712] RSP: 002b:00007ff4e20eb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 131.914598][ T1712] RAX: ffffffffffffffda RBX: 00007ff4e1425fa0 RCX: 00007ff4e119fb19 [ 131.922600][ T1712] RDX: 0000200000000240 RSI: 0000000000000002 RDI: 0000000000000003 [ 131.930605][ T1712] RBP: 00007ff4e1237b70 R08: 0000000000000001 R09: 0000000000000000 [ 131.938633][ T1712] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 131.946633][ T1712] R13: 00007ff4e1426038 R14: 00007ff4e1425fa0 R15: 00007ffe543ddcc8 [ 131.954643][ T1712] [ 131.987966][ T1723] loop0: detected capacity change from 0 to 16 [ 132.037337][ T1723] erofs: (device loop0): mounted with root inode @ nid 36. [ 132.108773][ T1740] Illegal XDP return value 8 on prog (id 36) dev N/A, expect packet loss! [ 132.181075][ T1742] loop0: detected capacity change from 0 to 256 [ 132.190774][ T1742] exfat: Unknown parameter '0x0000000000000004' [ 132.302727][ T1746] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 133.066176][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.372129][ T1764] FAULT_INJECTION: forcing a failure. [ 133.372129][ T1764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.385278][ T1764] CPU: 1 PID: 1764 Comm: syz.8.343 Not tainted syzkaller #0 [ 133.392599][ T1764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 133.402748][ T1764] Call Trace: [ 133.406057][ T1764] [ 133.409016][ T1764] __dump_stack+0x21/0x24 [ 133.413406][ T1764] dump_stack_lvl+0x110/0x170 [ 133.418113][ T1764] ? __cfi_dump_stack_lvl+0x8/0x8 [ 133.423164][ T1764] ? _raw_spin_lock_irq+0x95/0xf0 [ 133.428225][ T1764] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 133.433811][ T1764] dump_stack+0x15/0x24 [ 133.438001][ T1764] should_fail_ex+0x3bf/0x510 [ 133.442714][ T1764] should_fail+0xb/0x10 [ 133.446903][ T1764] should_fail_usercopy+0x1a/0x20 [ 133.451965][ T1764] copy_page_from_iter_atomic+0x362/0x1240 [ 133.457817][ T1764] ? __cfi_copy_page_from_iter_atomic+0x10/0x10 [ 133.464107][ T1764] ? __kasan_check_read+0x11/0x20 [ 133.469180][ T1764] ? shmem_write_begin+0x151/0x2c0 [ 133.474333][ T1764] generic_perform_write+0x384/0x740 [ 133.479671][ T1764] ? __cfi_generic_perform_write+0x10/0x10 [ 133.485548][ T1764] ? __cfi_file_update_time+0x10/0x10 [ 133.490965][ T1764] shmem_file_write_iter+0x104/0x130 [ 133.496301][ T1764] vfs_write+0x5ef/0xd00 [ 133.500582][ T1764] ? __cfi_vfs_write+0x10/0x10 [ 133.505389][ T1764] ? __fget_files+0x2d1/0x330 [ 133.510113][ T1764] ? __fdget_pos+0x1f2/0x380 [ 133.514744][ T1764] ? ksys_write+0x70/0x260 [ 133.519193][ T1764] ksys_write+0x14a/0x260 [ 133.523561][ T1764] ? __cfi_ksys_write+0x10/0x10 [ 133.528444][ T1764] ? do_user_addr_fault+0x9a5/0x1030 [ 133.533774][ T1764] ? debug_smp_processor_id+0x17/0x20 [ 133.539200][ T1764] __x64_sys_write+0x7b/0x90 [ 133.543835][ T1764] x64_sys_call+0x27b/0x9a0 [ 133.548381][ T1764] do_syscall_64+0x4c/0xa0 [ 133.552849][ T1764] ? clear_bhb_loop+0x30/0x80 [ 133.557576][ T1764] ? clear_bhb_loop+0x30/0x80 [ 133.562351][ T1764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.568303][ T1764] RIP: 0033:0x7fe1afd6034e [ 133.572754][ T1764] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 133.592399][ T1764] RSP: 002b:00007fe1b0bf7da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.600858][ T1764] RAX: ffffffffffffffda RBX: 00007fe1b0bf86c0 RCX: 00007fe1afd6034e [ 133.608870][ T1764] RDX: 0000000000020000 RSI: 00007fe1a63f8000 RDI: 0000000000000007 [ 133.616884][ T1764] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 133.624917][ T1764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 133.632920][ T1764] R13: 00007fe1b0bf7ee0 R14: 00007fe1b0bf7ea0 R15: 00007fe1a63f8000 [ 133.640936][ T1764] [ 133.646957][ T1764] loop8: detected capacity change from 0 to 256 [ 133.695641][ T1770] overlayfs: failed to resolve './file0': -2 [ 133.986112][ T19] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 134.074714][ T1790] tipc: Can't bind to reserved service type 1 [ 134.133572][ T1781] loop0: detected capacity change from 0 to 131072 [ 134.143053][ T1781] F2FS-fs (loop0): Invalid segment count (0) [ 134.149497][ T1781] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 134.158102][ T1781] F2FS-fs (loop0): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 134.197371][ T19] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.217892][ T19] usb 9-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 134.237255][ T19] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.255413][ T19] usb 9-1: config 0 descriptor?? [ 134.267054][ T19] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 134.419498][ T1803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.357'. [ 134.786400][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 134.786416][ T28] audit: type=1400 audit(1794163407.228:1578): avc: denied { setopt } for pid=1817 comm="syz.7.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 134.832785][ T28] audit: type=1400 audit(1794163407.258:1579): avc: denied { mounton } for pid=1819 comm="syz.5.364" path="/71/file0/file0" dev="tmpfs" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 134.878992][ T28] audit: type=1326 audit(1794163407.318:1580): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1817 comm="syz.7.363" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1244d9fb19 code=0x0 [ 134.995585][ T1831] loop0: detected capacity change from 0 to 512 [ 135.046880][ T1831] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 135.065978][ T1831] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.174120][ T28] audit: type=1400 audit(1794163407.608:1581): avc: denied { relabelfrom } for pid=1822 comm="syz.5.365" name="" dev="pipefs" ino=26729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 135.556506][ T1840] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 135.586176][ T1840] virtio-fs: tag <> not found [ 136.435480][ T1859] fuse: Bad value for 'fd' [ 136.478963][ T289] EXT4-fs (loop0): unmounting filesystem. [ 136.503526][ T1862] fuse: Bad value for 'rootmode' [ 136.623358][ T1867] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 136.708473][ T1879] loop7: detected capacity change from 0 to 8192 [ 136.723780][ T395] usb 9-1: USB disconnect, device number 3 [ 136.947637][ T1891] ip_tables: iptables: counters copy to user failed while replacing table [ 137.011919][ T28] audit: type=1326 audit(1794163409.448:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1893 comm="syz.7.384" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1244d9fb19 code=0x7ffc0000 [ 137.037059][ T28] audit: type=1326 audit(1794163409.468:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1893 comm="syz.7.384" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1244d9fb19 code=0x7ffc0000 [ 137.122722][ T1895] ip_tables: iptables: counters copy to user failed while replacing table [ 137.152700][ T28] audit: type=1326 audit(1794163409.478:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1893 comm="syz.7.384" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1244d9fb19 code=0x7ffc0000 [ 137.426479][ T28] audit: type=1326 audit(1794163409.478:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1893 comm="syz.7.384" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1244d9fb19 code=0x7ffc0000 [ 137.428871][ T1881] loop8: detected capacity change from 0 to 40427 [ 137.452376][ T28] audit: type=1326 audit(1794163409.478:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1893 comm="syz.7.384" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f1244d9fb19 code=0x7ffc0000 [ 137.459536][ T1881] F2FS-fs (loop8): Small segment_count (9 < 1 * 24) [ 137.489775][ T1881] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 137.499586][ T28] audit: type=1326 audit(1794163409.478:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1893 comm="syz.7.384" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1244d9fb19 code=0x7ffc0000 [ 137.545729][ T1881] F2FS-fs (loop8): Found nat_bits in checkpoint [ 137.626985][ T1881] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 137.634112][ T1881] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 137.668734][ T1396] bio_check_eod: 2025 callbacks suppressed [ 137.668753][ T1396] syz-executor: attempt to access beyond end of device [ 137.668753][ T1396] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.943102][ T1920] xt_bpf: check failed: parse error [ 137.974545][ T1913] netlink: 'syz.5.389': attribute type 16 has an invalid length. [ 137.982443][ T1913] netlink: 'syz.5.389': attribute type 17 has an invalid length. [ 137.990240][ T1913] netlink: 'syz.5.389': attribute type 5 has an invalid length. [ 138.071972][ T1930] loop0: detected capacity change from 0 to 16 [ 138.081365][ T1930] erofs: Unknown parameter '/selinux/commit_pending_bools' [ 138.116937][ T1206] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 138.128401][ T1930] netlink: 60 bytes leftover after parsing attributes in process `syz.0.392'. [ 138.167415][ T1934] netlink: 'syz.0.393': attribute type 4 has an invalid length. [ 138.175172][ T1934] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.393'. [ 138.224636][ T1936] loop0: detected capacity change from 0 to 512 [ 138.243880][ T1936] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.251399][ T1936] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 138.264115][ T1932] 9pnet_fd: Insufficient options for proto=fd [ 138.276706][ T1932] 9pnet_fd: p9_fd_create_tcp (1932): problem connecting socket to 127.0.0.1 [ 138.283050][ T1936] EXT4-fs (loop0): 1 truncate cleaned up [ 138.299423][ T1936] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 138.820573][ T1942] loop8: detected capacity change from 0 to 8192 [ 138.982525][ T1948] loop6: detected capacity change from 0 to 7 [ 139.075906][ T1955] overlayfs: failed to clone upperpath [ 139.083874][ T289] EXT4-fs (loop0): unmounting filesystem. [ 139.187449][ T1971] 9pnet_fd: Insufficient options for proto=fd [ 139.347691][ T1990] xt_hashlimit: size too large, truncated to 1048576 [ 139.620586][ T1998] netlink: 8 bytes leftover after parsing attributes in process `syz.6.410'. [ 139.717260][ T1996] loop8: detected capacity change from 0 to 128 [ 139.741588][ T1996] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 139.750380][ T1996] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 139.796183][ T28] kauditd_printk_skb: 147 callbacks suppressed [ 139.796199][ T28] audit: type=1400 audit(1794163412.238:1735): avc: denied { bpf } for pid=2008 comm="syz.5.412" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.822978][ T28] audit: type=1400 audit(1794163412.238:1736): avc: denied { prog_load } for pid=2008 comm="syz.5.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 139.842210][ T28] audit: type=1400 audit(1794163412.238:1737): avc: denied { perfmon } for pid=2008 comm="syz.5.412" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.863221][ T28] audit: type=1400 audit(1794163412.238:1738): avc: denied { prog_run } for pid=2008 comm="syz.5.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 139.882441][ T28] audit: type=1400 audit(1794163412.238:1739): avc: denied { mount } for pid=2008 comm="syz.5.412" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 139.909452][ T28] audit: type=1400 audit(1794163412.348:1740): avc: denied { unmount } for pid=1396 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 139.912054][ T1396] EXT4-fs (loop8): unmounting filesystem. [ 139.940745][ T28] audit: type=1400 audit(1794163412.378:1741): avc: denied { read } for pid=1396 comm="syz-executor" name="loop8" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.968932][ T28] audit: type=1400 audit(1794163412.378:1742): avc: denied { open } for pid=1396 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.995826][ T28] audit: type=1400 audit(1794163412.378:1743): avc: denied { ioctl } for pid=1396 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=126 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 140.028905][ T28] audit: type=1400 audit(1794163412.418:1744): avc: denied { map_create } for pid=2015 comm="syz.8.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 140.065592][ T2023] loop8: detected capacity change from 0 to 512 [ 140.091583][ T2023] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 140.100826][ T2023] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.121589][ T2021] netlink: 3 bytes leftover after parsing attributes in process `syz.5.415'. [ 140.131475][ T1396] EXT4-fs (loop8): unmounting filesystem. [ 140.181308][ T2038] loop8: detected capacity change from 0 to 8192 [ 140.194806][ T2040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.418'. [ 140.275828][ T2038] loop8: p1 < > p2 < > p3 p4 < > [ 140.281486][ T2038] loop8: partition table partially beyond EOD, truncated [ 140.289289][ T2038] loop8: p1 start 67108864 is beyond EOD, truncated [ 140.297242][ T2038] loop8: p3 start 100859904 is beyond EOD, truncated [ 140.893402][ T2047] loop8: detected capacity change from 0 to 512 [ 140.977820][ T2047] EXT4-fs: Ignoring removed nobh option [ 141.066242][ T1944] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 141.095874][ T1216] udevd[1216]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 141.128031][ T1206] udevd[1206]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 141.160481][ T2047] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #11: comm syz.8.420: unexpected EA_INODE flag [ 141.190952][ T2053] netlink: 'syz.7.422': attribute type 34 has an invalid length. [ 141.216196][ T1944] usb 1-1: device descriptor read/64, error -71 [ 141.293045][ T2047] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.420: couldn't read orphan inode 11 (err -117) [ 141.359729][ T2054] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 141.436067][ C0] sched: RT throttling activated [ 141.438388][ T2047] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 141.496178][ T1944] usb 1-1: device descriptor read/64, error -71 [ 141.515403][ T2060] netlink: 12 bytes leftover after parsing attributes in process `syz.8.420'. [ 141.546148][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.600835][ T2064] bridge0: port 3(veth0) entered blocking state [ 141.616836][ T2065] 9pnet_fd: Insufficient options for proto=fd [ 141.675101][ T2064] bridge0: port 3(veth0) entered disabled state [ 141.682107][ T2064] device veth0 entered promiscuous mode [ 141.687985][ T2064] bridge0: port 3(veth0) entered blocking state [ 141.694283][ T2064] bridge0: port 3(veth0) entered forwarding state [ 141.701335][ T2074] netlink: 12 bytes leftover after parsing attributes in process `syz.8.420'. [ 141.738096][ T2079] fuse: Bad value for 'fd' [ 141.819884][ T1944] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 142.168896][ T1944] usb 1-1: device descriptor read/64, error -71 [ 142.180179][ T1396] EXT4-fs (loop8): unmounting filesystem. [ 142.200487][ T2098] netlink: 104 bytes leftover after parsing attributes in process `syz.8.433'. [ 142.245054][ T2114] loop8: detected capacity change from 0 to 512 [ 142.436130][ T1944] usb 1-1: device descriptor read/64, error -71 [ 142.556180][ T1944] usb usb1-port1: attempt power cycle [ 142.597226][ T2117] loop8: detected capacity change from 0 to 131072 [ 142.604549][ T2117] F2FS-fs (loop8): Value of option "test_dummy_encryption=isable" is unrecognized [ 142.891173][ T2126] loop8: detected capacity change from 0 to 512 [ 142.936450][ T2126] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 142.966139][ T1944] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 142.981635][ T2126] EXT4-fs (loop8): 1 truncate cleaned up [ 142.987785][ T2126] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 143.007782][ T1944] usb 1-1: device descriptor read/8, error -71 [ 143.221426][ T2123] EXT4-fs (loop8): unmounting filesystem. [ 143.236736][ T1944] usb 1-1: device descriptor read/8, error -71 [ 143.418856][ T2144] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.425981][ T2144] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.433639][ T2144] device bridge_slave_0 entered promiscuous mode [ 143.442095][ T2144] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.449410][ T2144] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.456988][ T2144] device bridge_slave_1 entered promiscuous mode [ 143.506865][ T2144] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.513911][ T2144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.521234][ T2144] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.528313][ T2144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.553778][ T1730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.561730][ T1730] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.569284][ T1730] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.578691][ T1730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.587066][ T1730] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.594098][ T1730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.605065][ T1730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.613403][ T1730] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.620487][ T1730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.633754][ T1730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.644963][ T1730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.660296][ T1730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.669267][ T1731] device veth0 left promiscuous mode [ 143.674707][ T1731] bridge0: port 3(veth0) entered disabled state [ 143.681532][ T1731] device bridge_slave_1 left promiscuous mode [ 143.687800][ T1731] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.695320][ T1731] device bridge_slave_0 left promiscuous mode [ 143.701708][ T1731] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.710059][ T1731] device veth1_macvtap left promiscuous mode [ 143.716279][ T1731] device veth0_vlan left promiscuous mode [ 143.736167][ T1944] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 143.769909][ T1944] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 143.782702][ T1944] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 143.792338][ T1944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.800422][ T1944] usb 1-1: Product: syz [ 143.804682][ T1944] usb 1-1: Manufacturer: syz [ 143.809669][ T1944] usb 1-1: SerialNumber: syz [ 143.833751][ T1730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.841951][ T1730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.849698][ T1730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.858517][ T2144] device veth0_vlan entered promiscuous mode [ 143.875939][ T1730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.885720][ T2144] device veth1_macvtap entered promiscuous mode [ 143.897394][ T1730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.909149][ T1730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.942617][ T2155] loop9: detected capacity change from 0 to 512 [ 143.952421][ T2155] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 143.963191][ T2155] EXT4-fs (loop9): orphan cleanup on readonly fs [ 143.969885][ T2155] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:511: comm syz.9.446: Block bitmap for bg 0 marked uninitialized [ 143.983572][ T2155] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 143.993487][ T2155] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:511: comm syz.9.446: Block bitmap for bg 0 marked uninitialized [ 144.007088][ T2155] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 144.016460][ T2155] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:511: comm syz.9.446: Block bitmap for bg 0 marked uninitialized [ 144.029962][ T2155] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 144.039190][ T2155] EXT4-fs (loop9): 1 orphan inode deleted [ 144.045128][ T2155] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 144.063183][ T2144] EXT4-fs (loop9): unmounting filesystem. [ 144.148715][ T2160] loop9: detected capacity change from 0 to 128 [ 144.173949][ T2160] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 144.182933][ T2160] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.213287][ T2144] EXT4-fs (loop9): unmounting filesystem. [ 144.530298][ T1944] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 144.543306][ T1944] usb 1-1: cannot request logical cluster ID: 3 (err: -71) [ 144.552213][ T1944] usb 1-1: unit 80 not found! [ 144.571658][ T1944] usb 1-1: USB disconnect, device number 11 [ 144.675814][ T2172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.452'. [ 144.837061][ T1206] udevd[1206]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 144.894281][ T2164] loop9: detected capacity change from 0 to 131072 [ 144.937677][ T2164] F2FS-fs (loop9): Invalid segment/section count (458783, 24 x 150994945) [ 144.990202][ T2164] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 145.031294][ T2164] F2FS-fs (loop9): Unrecognized mount option "./file0" or missing value [ 145.157763][ T2194] syz.7.454 uses obsolete (PF_INET,SOCK_PACKET) [ 145.173278][ T2194] device vlan0 entered promiscuous mode [ 145.197440][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 145.197456][ T28] audit: type=1400 audit(1794163417.638:1845): avc: denied { create } for pid=2189 comm="syz.7.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.303156][ T28] audit: type=1400 audit(1794163417.638:1846): avc: denied { connect } for pid=2189 comm="syz.7.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.383127][ T28] audit: type=1400 audit(1794163417.638:1847): avc: denied { shutdown } for pid=2189 comm="syz.7.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.446357][ T28] audit: type=1400 audit(1794163417.888:1848): avc: denied { read write } for pid=2195 comm="syz.7.455" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 145.536771][ T2199] bridge_slave_0: default FDB implementation only supports local addresses [ 145.566256][ T2205] overlayfs: missing 'lowerdir' [ 145.612807][ T28] audit: type=1400 audit(1794163417.888:1849): avc: denied { open } for pid=2195 comm="syz.7.455" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 145.685819][ T28] audit: type=1400 audit(1794163417.908:1850): avc: denied { append } for pid=2195 comm="syz.7.455" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 145.755393][ T28] audit: type=1400 audit(1794163417.908:1851): avc: denied { ioctl } for pid=2195 comm="syz.7.455" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 146.069775][ T2221] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 146.615609][ T2220] netlink: 64 bytes leftover after parsing attributes in process `syz.9.458'. [ 146.648692][ T28] audit: type=1400 audit(1794163418.578:1852): avc: denied { block_suspend } for pid=2217 comm="syz.7.461" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 146.886287][ T28] audit: type=1400 audit(1794163419.318:1853): avc: denied { mounton } for pid=2226 comm="syz.0.464" path="/84/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 146.916325][ T28] audit: type=1400 audit(1794163419.358:1854): avc: denied { search } for pid=2226 comm="syz.0.464" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 147.042004][ T2254] netlink: 28 bytes leftover after parsing attributes in process `syz.9.468'. [ 147.057152][ T2250] loop0: detected capacity change from 0 to 2048 [ 147.137721][ T2250] loop0: p1 < > p4 [ 147.143547][ T2250] loop0: p4 size 722688 extends beyond EOD, truncated [ 147.225121][ T2264] loop9: detected capacity change from 0 to 128 [ 147.398247][ T2279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.473'. [ 147.464763][ T2285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.482935][ T2285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.502215][ T2285] loop9: detected capacity change from 0 to 128 [ 147.516514][ T2285] FAT-fs (loop9): bogus number of reserved sectors [ 147.533274][ T2285] FAT-fs (loop9): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 147.554435][ T2285] FAT-fs (loop9): Can't find a valid FAT filesystem [ 147.597772][ T2283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.609187][ T2283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.716149][ T19] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 147.725368][ T2281] loop0: detected capacity change from 0 to 40427 [ 147.736852][ T2281] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 147.745028][ T2281] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 147.765251][ T2281] F2FS-fs (loop0): invalid crc value [ 147.787086][ T2281] F2FS-fs (loop0): Found nat_bits in checkpoint [ 147.828926][ T2281] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 147.836118][ T2281] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 147.897189][ T19] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.909043][ T19] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 147.922998][ T19] usb 10-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 147.936984][ T19] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.950020][ T2297] syz.0.476: attempt to access beyond end of device [ 147.950020][ T2297] loop0: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 147.967928][ T19] usb 10-1: 0:1 : does not exist [ 147.988824][ T2297] syz.0.476: attempt to access beyond end of device [ 147.988824][ T2297] loop0: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 148.017232][ T2297] syz.0.476: attempt to access beyond end of device [ 148.017232][ T2297] loop0: rw=2049, sector=57344, nr_sectors = 3648 limit=40427 [ 148.099176][ T289] syz-executor: attempt to access beyond end of device [ 148.099176][ T289] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 148.169932][ T2284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.203997][ T2284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.222523][ T2284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.240208][ T2284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.256638][ T2284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.274880][ T2284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.296768][ T292] usb 10-1: USB disconnect, device number 2 [ 148.513669][ T2317] loop0: detected capacity change from 0 to 1024 [ 148.531651][ T2317] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.545731][ T2317] EXT4-fs (loop0): Test dummy encryption mode enabled [ 148.561251][ T2317] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.483: bad orphan inode 134217728 [ 148.573003][ T2317] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 148.591903][ T289] EXT4-fs (loop0): unmounting filesystem. [ 148.650265][ T2322] kvm: pic: level sensitive irq not supported [ 148.650342][ T2322] kvm: pic: non byte read [ 148.671760][ T2322] kvm: pic: non byte read [ 148.681833][ T2322] kvm: pic: non byte read [ 148.691922][ T2322] kvm: pic: non byte read [ 148.702009][ T2322] kvm: pic: non byte read [ 148.712044][ T2322] kvm: pic: single mode not supported [ 148.712059][ T2322] kvm: pic: level sensitive irq not supported [ 148.717840][ T2322] kvm: pic: non byte read [ 148.728792][ T2322] kvm: pic: level sensitive irq not supported [ 148.728862][ T2322] kvm: pic: non byte read [ 148.750018][ T2322] kvm: pic: level sensitive irq not supported [ 148.750086][ T2322] kvm: pic: non byte read [ 148.761256][ T2322] kvm: pic: single mode not supported [ 148.761274][ T2322] kvm: pic: level sensitive irq not supported [ 148.766913][ T2322] kvm: pic: non byte read [ 148.849123][ T2325] xt_hashlimit: size too large, truncated to 1048576 [ 148.949979][ T2338] xt_hashlimit: size too large, truncated to 1048576 [ 149.090536][ T2343] loop0: detected capacity change from 0 to 256 [ 149.117086][ T2343] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda10b903, utbl_chksum : 0xe619d30d) [ 149.146930][ T2343] exFAT-fs (loop0): error, invalid size(size(2677) > aligned(18374686479671623680) [ 149.146930][ T2343] [ 149.274189][ T2343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'. [ 149.696145][ T372] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 149.906171][ T372] usb 10-1: Using ep0 maxpacket: 16 [ 149.913760][ T372] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.069232][ T372] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.135101][ T372] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.146604][ T372] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.156884][ T372] usb 10-1: Product: syz [ 150.172226][ T372] usb 10-1: Manufacturer: syz [ 150.184312][ T372] usb 10-1: SerialNumber: syz [ 151.053645][ T2386] loop7: detected capacity change from 0 to 512 [ 151.070604][ T2386] EXT4-fs (loop7): Test dummy encryption mode enabled [ 151.079865][ T372] usb 10-1: 0:2 : does not exist [ 151.088836][ T372] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 151.121000][ T2386] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.493: inode has both inline data and extents flags [ 151.134360][ T2386] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.493: couldn't read orphan inode 15 (err -117) [ 151.146325][ T2386] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 151.159065][ T372] usb 10-1: USB disconnect, device number 3 [ 151.264228][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 151.264246][ T28] audit: type=1400 audit(1794163423.698:1893): avc: denied { mount } for pid=2409 comm="syz.6.500" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 151.315174][ T1146] EXT4-fs (loop7): unmounting filesystem. [ 151.350308][ T28] audit: type=1400 audit(1794163423.788:1894): avc: denied { name_bind } for pid=2419 comm="syz.7.504" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 151.386852][ T1206] udevd[1206]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 151.416262][ T19] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 151.536524][ T2432] loop9: detected capacity change from 0 to 4096 [ 151.546709][ T2432] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 151.566666][ T19] usb 1-1: device descriptor read/64, error -71 [ 151.573187][ T2432] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 151.582863][ T28] audit: type=1400 audit(1794163424.018:1895): avc: denied { write } for pid=2431 comm="syz.7.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.611582][ T28] audit: type=1400 audit(1794163424.038:1896): avc: denied { read } for pid=2431 comm="syz.7.507" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.632112][ T28] audit: type=1400 audit(1794163424.078:1897): avc: denied { map } for pid=2430 comm="syz.9.508" path=2F31332F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F6D656D6F72792E6576656E74732E6C6F63616C dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 151.726991][ T2437] loop7: detected capacity change from 0 to 16 [ 151.785406][ T2437] erofs: (device loop7): mounted with root inode @ nid 36. [ 151.796967][ T2437] tipc: Started in network mode [ 151.801948][ T2437] tipc: Node identity 4, cluster identity 4711 [ 151.808166][ T2437] tipc: Node number set to 4 [ 151.936402][ T2144] EXT4-fs (loop9): unmounting filesystem. [ 153.077664][ T2448] netlink: 'syz.5.512': attribute type 29 has an invalid length. [ 153.085826][ T2449] netlink: 'syz.5.512': attribute type 29 has an invalid length. [ 153.094893][ T2448] netlink: 'syz.5.512': attribute type 29 has an invalid length. [ 153.159885][ T28] audit: type=1400 audit(1794163425.598:1898): avc: denied { setopt } for pid=2446 comm="syz.5.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 153.230812][ T2461] netlink: 436 bytes leftover after parsing attributes in process `syz.5.516'. [ 153.247912][ T2462] netlink: 436 bytes leftover after parsing attributes in process `syz.5.516'. [ 153.266106][ T19] usb 1-1: device descriptor read/64, error -71 [ 153.301055][ T2469] bridge0: port 3(vlan2) entered blocking state [ 153.309254][ T2469] bridge0: port 3(vlan2) entered disabled state [ 153.316203][ T2469] device vlan2 entered promiscuous mode [ 153.321891][ T2469] device veth1_virt_wifi entered promiscuous mode [ 153.426452][ T28] audit: type=1400 audit(1794163425.868:1899): avc: denied { create } for pid=2478 comm="syz.5.521" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 153.536294][ T19] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 153.591177][ T28] audit: type=1400 audit(1794163426.028:1900): avc: denied { unlink } for pid=508 comm="syz-executor" name="file0" dev="tmpfs" ino=611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 153.666138][ T292] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 153.696132][ T19] usb 1-1: device descriptor read/64, error -71 [ 153.847289][ T292] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 153.857346][ T292] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 153.869041][ T292] usb 10-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 153.878551][ T292] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.893436][ T292] usb 10-1: Product: syz [ 153.898248][ T292] usb 10-1: Manufacturer: syz [ 153.903239][ T292] usb 10-1: SerialNumber: syz [ 153.909481][ T2475] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 153.917312][ T2475] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 153.925553][ T292] usbserial_generic 10-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 153.937269][ T292] usbserial_generic 10-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 153.948843][ T292] usbserial_generic 10-1:1.0: generic converter detected [ 153.957122][ T292] usb 10-1: generic converter now attached to ttyUSB0 [ 153.976111][ T19] usb 1-1: device descriptor read/64, error -71 [ 154.113069][ T19] usb usb1-port1: attempt power cycle [ 154.177864][ T2475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.193630][ T2475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.222461][ T802] usb 10-1: USB disconnect, device number 4 [ 154.227306][ T2502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'. [ 154.231179][ T802] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 154.246826][ T802] usbserial_generic 10-1:1.0: device disconnected [ 154.248540][ T2502] netlink: 'syz.0.526': attribute type 1 has an invalid length. [ 154.287994][ T2504] loop0: detected capacity change from 0 to 1024 [ 154.298094][ T2504] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.317694][ T2504] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 154.330146][ T28] audit: type=1400 audit(1794163426.768:1901): avc: denied { write } for pid=2503 comm="syz.0.527" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.373018][ T28] audit: type=1400 audit(1794163426.808:1902): avc: denied { ioctl } for pid=2503 comm="syz.0.527" path="/96/file1/file1" dev="loop0" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.427198][ T289] EXT4-fs (loop0): unmounting filesystem. [ 154.451713][ T2510] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 154.457846][ T2510] syzkaller0: linktype set to 823 [ 154.463561][ T2510] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 154.475907][ T2510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.528'. [ 154.493232][ T2510] input: syz0 as /devices/virtual/input/input9 [ 154.613108][ T2517] loop0: detected capacity change from 0 to 512 [ 154.650750][ T2517] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 154.663594][ T2517] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.694434][ T2517] EXT4-fs (loop0): unmounting filesystem. [ 154.850838][ T2528] loop7: detected capacity change from 0 to 512 [ 154.869179][ T2528] FAT-fs (loop7): Unrecognized mount option "ÿÿÿ01777777777777777777777" or missing value [ 156.070528][ T2550] loop0: detected capacity change from 0 to 256 [ 156.093121][ T2550] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 156.096780][ T2557] loop7: detected capacity change from 0 to 512 [ 156.126873][ T2550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.537'. [ 156.148802][ T2550] device erspan0 entered promiscuous mode [ 156.165817][ T2557] FAT-fs (loop7): Directory bread(block 1056) failed [ 156.200425][ T2557] FAT-fs (loop7): Directory bread(block 1057) failed [ 156.230476][ T2557] FAT-fs (loop7): Directory bread(block 1058) failed [ 156.249624][ T2561] tap0: tun_chr_ioctl cmd 1074025677 [ 156.251145][ T2557] FAT-fs (loop7): Directory bread(block 1059) failed [ 156.255419][ T2561] tap0: linktype set to 774 [ 156.278639][ T2561] tap0: tun_chr_ioctl cmd 21731 [ 156.292588][ T2561] loop0: detected capacity change from 0 to 2048 [ 156.293378][ T2557] FAT-fs (loop7): Directory bread(block 1060) failed [ 156.316162][ T2561] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 156.332341][ T2561] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 156.347570][ T2561] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 156.361054][ T2561] EXT4-fs (loop0): This should not happen!! Data will be lost [ 156.361054][ T2561] [ 156.367772][ T2557] FAT-fs (loop7): Directory bread(block 1061) failed [ 156.371769][ T2561] EXT4-fs (loop0): Total free blocks count 0 [ 156.384010][ T2561] EXT4-fs (loop0): Free/Dirty block details [ 156.390023][ T2561] EXT4-fs (loop0): free_blocks=2415919504 [ 156.395910][ T2561] EXT4-fs (loop0): dirty_blocks=16 [ 156.401234][ T2561] EXT4-fs (loop0): Block reservation details [ 156.403347][ T2557] FAT-fs (loop7): Directory bread(block 1062) failed [ 156.407750][ T2561] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 156.420849][ T2565] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 156.446467][ T2557] FAT-fs (loop7): Directory bread(block 1063) failed [ 156.481518][ T2557] FAT-fs (loop7): Directory bread(block 1064) failed [ 156.501082][ T2557] FAT-fs (loop7): Directory bread(block 1065) failed [ 156.579026][ T2569] loop7: detected capacity change from 0 to 512 [ 156.597789][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 156.597806][ T28] audit: type=1400 audit(1794163429.038:1918): avc: denied { mounton } for pid=2568 comm="syz.7.542" path="/51/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 156.626553][ T2569] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 156.645353][ T2569] EXT4-fs error (device loop7): xattr_find_entry:297: inode #15: comm syz.7.542: corrupted xattr entries [ 156.658010][ T2569] EXT4-fs (loop7): 1 truncate cleaned up [ 156.663698][ T2569] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 156.726094][ T292] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 156.744021][ T28] audit: type=1400 audit(1794163429.178:1919): avc: denied { map } for pid=2568 comm="syz.7.542" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.907098][ T292] usb 1-1: not running at top speed; connect to a high speed hub [ 156.915597][ T292] usb 1-1: config 1 has an invalid descriptor of length 187, skipping remainder of the config [ 156.936197][ T292] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 156.945130][ T292] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 156.954505][ T292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.962750][ T1161] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 157.147359][ T1161] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.159706][ T1161] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.171172][ T1161] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 157.183964][ T292] usb 1-1: string descriptor 0 read error: -71 [ 157.192213][ T292] usb 1-1: Found UVC 71.01 device (0000:0000) [ 157.199431][ T1161] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 157.208215][ T292] usb 1-1: No valid video chain found. [ 157.213742][ T1161] usb 10-1: Product: syz [ 157.225035][ T292] usb 1-1: USB disconnect, device number 15 [ 157.232827][ T1161] usb 10-1: Manufacturer: syz [ 157.246408][ T1161] hub 10-1:4.0: USB hub found [ 157.390209][ T1146] EXT4-fs (loop7): unmounting filesystem. [ 157.450617][ T2582] loop7: detected capacity change from 0 to 128 [ 157.458141][ T1161] hub 10-1:4.0: config failed, can't read hub descriptor (err -22) [ 157.473839][ T2582] FAT-fs (loop7): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 157.496372][ T2582] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000020) [ 157.526462][ T1161] usb 10-1: USB disconnect, device number 5 [ 157.547409][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 157.645169][ T2597] netlink: 32 bytes leftover after parsing attributes in process `syz.7.545'. [ 157.670254][ T2602] netlink: 32 bytes leftover after parsing attributes in process `syz.7.545'. [ 157.891297][ T2617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.552'. [ 157.900590][ T2617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 158.749072][ T28] audit: type=1400 audit(1794163431.188:1920): avc: denied { create } for pid=2624 comm="syz.7.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.018874][ T28] audit: type=1400 audit(1794163431.458:1921): avc: denied { connect } for pid=2635 comm="syz.5.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 159.038889][ T2633] loop7: detected capacity change from 0 to 40427 [ 159.047500][ T2633] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64) [ 159.054750][ T2633] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 159.065949][ T2633] F2FS-fs (loop7): Image doesn't support compression [ 159.065980][ T2633] F2FS-fs (loop7): Image doesn't support compression [ 159.070148][ T2621] loop9: detected capacity change from 0 to 40427 [ 159.073007][ T2633] F2FS-fs (loop7): invalid crc value [ 159.073277][ T2621] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 159.073299][ T2621] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 159.074128][ T2633] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 159.170093][ T2633] F2FS-fs (loop7): Start checkpoint disabled! [ 159.188746][ T2621] F2FS-fs (loop9): Found nat_bits in checkpoint [ 159.196741][ T2633] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 159.238794][ T2633] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 159.245883][ T2633] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 159.266426][ T1731] kworker/u4:36: attempt to access beyond end of device [ 159.266426][ T1731] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 159.294660][ T2621] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 159.301887][ T2621] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 159.387570][ T2654] loop7: detected capacity change from 0 to 256 [ 159.394317][ T2654] exfat: Bad value for 'gid' [ 160.443687][ T28] audit: type=1400 audit(1794163432.878:1922): avc: denied { bind } for pid=2653 comm="syz.7.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.435772][ T292] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 161.666148][ T292] usb 1-1: device descriptor read/64, error -71 [ 161.956153][ T292] usb 1-1: device descriptor read/64, error -71 [ 162.010530][ T2686] loop0: detected capacity change from 0 to 512 [ 162.351712][ T2694] netlink: 68 bytes leftover after parsing attributes in process `syz.0.571'. [ 162.397652][ T2694] xt_NFQUEUE: number of total queues is 0 [ 162.451911][ T28] audit: type=1400 audit(1794163434.888:1923): avc: denied { watch watch_reads } for pid=2691 comm="syz.0.571" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 162.745087][ T28] audit: type=1400 audit(1794163435.178:1924): avc: denied { ioctl } for pid=2698 comm="syz.6.572" path="socket:[31421]" dev="sockfs" ino=31421 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 162.986316][ T2712] fuse: Bad value for 'fd' [ 162.991808][ T2712] netlink: 4 bytes leftover after parsing attributes in process `syz.6.576'. [ 163.102187][ T28] audit: type=1400 audit(1794163435.538:1925): avc: denied { mount } for pid=2713 comm="syz.0.577" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 163.166759][ T28] audit: type=1400 audit(1794163435.608:1926): avc: denied { getopt } for pid=2713 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 163.547271][ T2721] overlayfs: failed to clone upperpath [ 163.576436][ T28] audit: type=1400 audit(1794163435.978:1927): avc: denied { setopt } for pid=2718 comm="syz.5.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 163.991269][ T28] audit: type=1400 audit(1794163436.428:1928): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 164.060766][ T2725] loop0: detected capacity change from 0 to 128 [ 164.190701][ T308] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 164.214091][ T2727] netlink: 56 bytes leftover after parsing attributes in process `syz.6.581'. [ 164.387502][ T308] usb 10-1: unable to get BOS descriptor or descriptor too short [ 164.407297][ T1206] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.437056][ T308] usb 10-1: not running at top speed; connect to a high speed hub [ 164.452098][ T308] usb 10-1: config 8 has an invalid interface number: 43 but max is 0 [ 164.532926][ T308] usb 10-1: config 8 has no interface number 0 [ 164.540151][ T308] usb 10-1: config 8 interface 43 altsetting 17 has an invalid endpoint with address 0xE5, skipping [ 164.551275][ T308] usb 10-1: config 8 interface 43 altsetting 17 endpoint 0x4 has invalid wMaxPacketSize 0 [ 164.561410][ T308] usb 10-1: config 8 interface 43 has no altsetting 0 [ 164.570104][ T308] usb 10-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 164.579397][ T2733] x86/PAT: syz.0.582:2733 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 164.594078][ T308] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.612787][ T308] usb 10-1: Product: syz [ 164.627634][ T308] usb 10-1: Manufacturer: syz [ 164.632478][ T308] usb 10-1: SerialNumber: syz [ 164.854329][ T28] audit: type=1400 audit(1794163437.288:1929): avc: denied { override_creds } for pid=2722 comm="syz.9.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 165.216198][ T28] audit: type=1400 audit(1794163437.528:1930): avc: denied { create } for pid=2742 comm="syz.7.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 165.404005][ T28] audit: type=1400 audit(1794163437.528:1931): avc: denied { sys_admin } for pid=2742 comm="syz.7.586" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 165.458390][ T28] audit: type=1400 audit(1794163437.628:1932): avc: denied { unmount } for pid=2742 comm="syz.7.586" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 166.029764][ T2723] loop9: detected capacity change from 0 to 131072 [ 166.047962][ T2723] F2FS-fs (loop9): Test dummy encryption mode enabled [ 166.066344][ T2723] F2FS-fs (loop9): invalid crc value [ 166.096973][ T2723] F2FS-fs (loop9): Found nat_bits in checkpoint [ 166.156156][ T2723] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 166.192854][ T308] ums-alauda 10-1:8.43: USB Mass Storage device detected [ 166.270471][ T308] usb 10-1: USB disconnect, device number 6 [ 166.400943][ T2762] loop0: detected capacity change from 0 to 128 [ 166.408725][ T2762] EXT4-fs: Ignoring removed bh option [ 166.415953][ T2762] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 166.437364][ T2762] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.566293][ T2779] loop0: detected capacity change from 128 to 64 [ 166.573734][ T2778] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5954: Out of memory [ 166.583912][ T2778] EXT4-fs error (device loop0): ext4_rmdir:3252: inode #13: comm syz.0.591: mark_inode_dirty error [ 167.835526][ T2814] overlayfs: failed to clone upperpath [ 167.843717][ T289] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5954: Out of memory [ 167.853249][ T289] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #13: comm syz-executor: mark_inode_dirty error [ 167.890955][ T289] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -12) [ 167.926207][ T289] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5954: Out of memory [ 167.953284][ T289] EXT4-fs error (device loop0): ext4_dirty_inode:6158: inode #2: comm syz-executor: mark_inode_dirty error [ 167.985907][ T289] EXT4-fs (loop0): unmounting filesystem. [ 168.095293][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 168.095309][ T28] audit: type=1400 audit(1794163440.528:2014): avc: denied { sqpoll } for pid=2816 comm="syz.5.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 168.196099][ T1162] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 168.297818][ T2833] futex_wake_op: syz.6.613 tries to shift op by 144; fix this program [ 168.378683][ T2837] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.385842][ T2837] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.387773][ T1162] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.394968][ T2837] device bridge_slave_0 entered promiscuous mode [ 168.411216][ T2837] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.417403][ T1162] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.419488][ T2837] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.435750][ T2837] device bridge_slave_1 entered promiscuous mode [ 168.439731][ T1162] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 168.463224][ T1162] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.481620][ T1162] usb 10-1: config 0 descriptor?? [ 168.512146][ T2843] overlayfs: './file1' not a directory [ 168.533223][ T2837] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.540369][ T2837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.547703][ T2837] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.554762][ T2837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.583784][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.591609][ T1710] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.599289][ T1710] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.609325][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.618198][ T1710] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.625299][ T1710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.643322][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.651626][ T1710] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.658767][ T1710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.675911][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.684312][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.694196][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.702947][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.721907][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.730439][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.745848][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.755400][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.764636][ T2837] device veth0_vlan entered promiscuous mode [ 168.771795][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.780273][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.795215][ T2852] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 168.813219][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.821764][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.831478][ T2837] device veth1_macvtap entered promiscuous mode [ 168.840904][ T1731] device bridge_slave_1 left promiscuous mode [ 168.847888][ T1731] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.855338][ T1731] device bridge_slave_0 left promiscuous mode [ 168.861722][ T1731] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.870027][ T1731] device veth1_macvtap left promiscuous mode [ 168.876204][ T1731] device veth0_vlan left promiscuous mode [ 168.896791][ T1162] hid-steam 0003:28DE:1142.0007: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.9-1/input0 [ 169.032608][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.042273][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.050912][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.061026][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.081987][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.100183][ T1162] usb 10-1: USB disconnect, device number 7 [ 169.112209][ T2862] X.509: Couldn't decode AuthKeyIdentifier [ 169.120586][ T28] audit: type=1400 audit(1794163441.568:2015): avc: denied { sys_module } for pid=2861 comm="syz.5.620" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 169.142091][ T2862] Invalid ELF header magic: != ELF [ 169.160389][ T28] audit: type=1400 audit(1794163441.588:2016): avc: denied { module_load } for pid=2861 comm="syz.5.620" path="/124/bus" dev="tmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 169.183034][ T2866] netlink: 40 bytes leftover after parsing attributes in process `syz.1.611'. [ 169.221846][ T2868] loop1: detected capacity change from 0 to 512 [ 169.228494][ T2865] ip_tables: iptables: counters copy to user failed while replacing table [ 169.243175][ T2868] EXT4-fs (loop1): Test dummy encryption mode enabled [ 169.250559][ T2868] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 169.273155][ T2868] EXT4-fs (loop1): 1 truncate cleaned up [ 169.278969][ T2868] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 169.376457][ T2837] EXT4-fs (loop1): unmounting filesystem. [ 169.405779][ T2875] loop1: detected capacity change from 0 to 512 [ 169.426380][ T28] audit: type=1400 audit(1794163441.868:2017): avc: denied { bind } for pid=2876 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 169.447063][ T2875] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 169.456141][ T2875] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.458990][ T28] audit: type=1400 audit(1794163441.898:2018): avc: denied { read } for pid=2880 comm="syz.5.625" name="md0" dev="tmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 169.489248][ T28] audit: type=1400 audit(1794163441.918:2019): avc: denied { open } for pid=2880 comm="syz.5.625" path="/127/md0" dev="tmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 169.704325][ T2897] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 169.871402][ T2910] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 170.005916][ T2920] xt_hashlimit: size too large, truncated to 1048576 [ 170.056588][ T2921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.632'. [ 170.065568][ T2921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.632'. [ 170.248088][ T2837] EXT4-fs (loop1): unmounting filesystem. [ 170.422422][ T2940] loop1: detected capacity change from 0 to 512 [ 170.434235][ T2940] EXT4-fs (loop1): Test dummy encryption mode enabled [ 170.445925][ T2940] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.634: inode has both inline data and extents flags [ 170.460936][ T2940] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.634: couldn't read orphan inode 15 (err -117) [ 170.473671][ T2940] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 170.517209][ T28] audit: type=1400 audit(1794163442.958:2020): avc: denied { create } for pid=2938 comm="syz.7.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 170.542327][ T2939] netlink: 5 bytes leftover after parsing attributes in process `syz.7.636'. [ 170.683754][ T28] audit: type=1400 audit(1794163443.118:2021): avc: denied { watch } for pid=2946 comm="syz.6.638" path="/120" dev="tmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 170.706498][ T28] audit: type=1400 audit(1794163443.148:2022): avc: denied { ioctl } for pid=2946 comm="syz.6.638" path="socket:[31642]" dev="sockfs" ino=31642 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 170.804056][ T2959] FAULT_INJECTION: forcing a failure. [ 170.804056][ T2959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.817324][ T2959] CPU: 0 PID: 2959 Comm: syz.9.642 Not tainted syzkaller #0 [ 170.824643][ T2959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 170.834744][ T2959] Call Trace: [ 170.838043][ T2959] [ 170.841016][ T2959] __dump_stack+0x21/0x24 [ 170.845377][ T2959] dump_stack_lvl+0x110/0x170 [ 170.850075][ T2959] ? __cfi_dump_stack_lvl+0x8/0x8 [ 170.855131][ T2959] dump_stack+0x15/0x24 [ 170.859337][ T2959] should_fail_ex+0x3bf/0x510 [ 170.864048][ T2959] should_fail+0xb/0x10 [ 170.868229][ T2959] should_fail_usercopy+0x1a/0x20 [ 170.873279][ T2959] _copy_from_user+0x1e/0xc0 [ 170.877888][ T2959] iovec_from_user+0x1aa/0x2e0 [ 170.882676][ T2959] __import_iovec+0x6d/0x460 [ 170.887316][ T2959] ? kstrtoull+0x137/0x1d0 [ 170.891767][ T2959] import_iovec+0x7c/0xb0 [ 170.896151][ T2959] ___sys_sendmsg+0x252/0x360 [ 170.900861][ T2959] ? __sys_sendmsg+0x290/0x290 [ 170.905662][ T2959] ? __kasan_check_write+0x14/0x20 [ 170.910885][ T2959] ? proc_fail_nth_write+0x180/0x200 [ 170.916205][ T2959] ? vfs_write+0xa51/0xd00 [ 170.920652][ T2959] ? __fdget+0x19c/0x220 [ 170.924920][ T2959] __x64_sys_sendmsg+0x20d/0x2e0 [ 170.929879][ T2959] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 170.935403][ T2959] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 170.941501][ T2959] x64_sys_call+0x171/0x9a0 [ 170.946033][ T2959] do_syscall_64+0x4c/0xa0 [ 170.950474][ T2959] ? clear_bhb_loop+0x30/0x80 [ 170.955185][ T2959] ? clear_bhb_loop+0x30/0x80 [ 170.959915][ T2959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.965841][ T2959] RIP: 0033:0x7fa2fd19fb19 [ 170.970276][ T2959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.989903][ T2959] RSP: 002b:00007fa2fe0fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.998697][ T2959] RAX: ffffffffffffffda RBX: 00007fa2fd425fa0 RCX: 00007fa2fd19fb19 [ 171.006697][ T2959] RDX: 0000000000040000 RSI: 0000200000001440 RDI: 0000000000000003 [ 171.014688][ T2959] RBP: 00007fa2fe0fd090 R08: 0000000000000000 R09: 0000000000000000 [ 171.022693][ T2959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.030779][ T2959] R13: 00007fa2fd426038 R14: 00007fa2fd425fa0 R15: 00007ffc794be3f8 [ 171.038780][ T2959] [ 171.137791][ T28] audit: type=1401 audit(1794163443.578:2023): op=setxattr invalid_context="system_u:object_r:hald_var_run_t:s0" [ 171.185574][ T2968] loop9: detected capacity change from 0 to 2048 [ 171.208031][ T2968] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 171.218669][ T2968] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 171.227519][ T2968] EXT4-fs (loop9): re-mounted. Quota mode: none. [ 172.477431][ T2837] EXT4-fs (loop1): unmounting filesystem. [ 172.500161][ T2996] overlayfs: failed to clone lowerpath [ 172.508833][ T3002] loop1: detected capacity change from 0 to 128 [ 172.518761][ T3002] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.531563][ T3002] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.665070][ T3015] FAULT_INJECTION: forcing a failure. [ 172.665070][ T3015] name failslab, interval 1, probability 5, space 0, times 3 [ 172.681731][ T3015] CPU: 0 PID: 3015 Comm: syz.1.654 Not tainted syzkaller #0 [ 172.689318][ T3015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 172.699425][ T3015] Call Trace: [ 172.702735][ T3015] [ 172.705697][ T3015] __dump_stack+0x21/0x24 [ 172.710080][ T3015] dump_stack_lvl+0x110/0x170 [ 172.714796][ T3015] ? __cfi_dump_stack_lvl+0x8/0x8 [ 172.719866][ T3015] ? release_sock+0x169/0x1c0 [ 172.724598][ T3015] dump_stack+0x15/0x24 [ 172.728802][ T3015] should_fail_ex+0x3bf/0x510 [ 172.733556][ T3015] __should_failslab+0xac/0xf0 [ 172.738395][ T3015] should_failslab+0x9/0x20 [ 172.742940][ T3015] kmem_cache_alloc_node+0x42/0x330 [ 172.748187][ T3015] ? __alloc_skb+0xe8/0x4a0 [ 172.752735][ T3015] __alloc_skb+0xe8/0x4a0 [ 172.757114][ T3015] netlink_sendmsg+0x635/0xbd0 [ 172.761940][ T3015] ? __cfi_netlink_sendmsg+0x10/0x10 [ 172.767295][ T3015] ? security_socket_sendmsg+0x93/0xb0 [ 172.772805][ T3015] ? __cfi_netlink_sendmsg+0x10/0x10 [ 172.778148][ T3015] ____sys_sendmsg+0x5fb/0x9c0 [ 172.782956][ T3015] ? __sys_sendmsg_sock+0x40/0x40 [ 172.788029][ T3015] ? import_iovec+0x7c/0xb0 [ 172.792585][ T3015] ___sys_sendmsg+0x2a2/0x360 [ 172.797306][ T3015] ? __sys_sendmsg+0x290/0x290 [ 172.802107][ T3015] ? __kasan_check_write+0x14/0x20 [ 172.807261][ T3015] ? proc_fail_nth_write+0x180/0x200 [ 172.812591][ T3015] ? vfs_write+0xa51/0xd00 [ 172.817054][ T3015] ? __fdget+0x19c/0x220 [ 172.821342][ T3015] __x64_sys_sendmsg+0x20d/0x2e0 [ 172.826410][ T3015] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 172.831908][ T3015] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 172.838010][ T3015] x64_sys_call+0x171/0x9a0 [ 172.842550][ T3015] do_syscall_64+0x4c/0xa0 [ 172.846999][ T3015] ? clear_bhb_loop+0x30/0x80 [ 172.851751][ T3015] ? clear_bhb_loop+0x30/0x80 [ 172.856659][ T3015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.862589][ T3015] RIP: 0033:0x7f8e18b9fb19 [ 172.867027][ T3015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.886743][ T3015] RSP: 002b:00007f8e19af9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.895203][ T3015] RAX: ffffffffffffffda RBX: 00007f8e18e25fa0 RCX: 00007f8e18b9fb19 [ 172.903232][ T3015] RDX: 0000000000040000 RSI: 0000200000001440 RDI: 0000000000000003 [ 172.911237][ T3015] RBP: 00007f8e19af9090 R08: 0000000000000000 R09: 0000000000000000 [ 172.919267][ T3015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.927274][ T3015] R13: 00007f8e18e26038 R14: 00007f8e18e25fa0 R15: 00007ffe3cd5ab98 [ 172.935309][ T3015] [ 172.958633][ T3021] loop1: detected capacity change from 0 to 512 [ 172.969603][ T3021] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 173.047024][ T2144] EXT4-fs (loop9): unmounting filesystem. [ 173.266219][ T1162] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 173.376787][ T3041] loop9: detected capacity change from 0 to 40427 [ 173.386817][ T3041] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 173.394644][ T3041] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 173.427163][ T3041] F2FS-fs (loop9): Found nat_bits in checkpoint [ 173.450665][ T1162] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 173.460273][ T1162] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.468648][ T1162] usb 2-1: Product: syz [ 173.472906][ T1162] usb 2-1: Manufacturer: syz [ 173.477806][ T1162] usb 2-1: SerialNumber: syz [ 173.494161][ T3041] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 173.502048][ T3041] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 173.530788][ T3054] futex_wake_op: syz.6.665 tries to shift op by 144; fix this program [ 173.570824][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 173.570840][ T28] audit: type=1400 audit(1794163446.008:2039): avc: denied { connect } for pid=3055 comm="syz.5.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.665004][ T3063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=3063 comm=syz.7.669 [ 173.725751][ T1162] usb 2-1: USB disconnect, device number 4 [ 173.760518][ T3086] netlink: 36 bytes leftover after parsing attributes in process `syz.7.670'. [ 173.777462][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 173.785034][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 173.807288][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 173.817217][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.825534][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 173.836453][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.844863][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.853476][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.862064][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.870892][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.895475][ T28] audit: type=1400 audit(1794163446.328:2040): avc: denied { getopt } for pid=3091 comm="syz.6.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 173.916726][ T28] audit: type=1400 audit(1794163446.358:2041): avc: denied { ioctl } for pid=3091 comm="syz.6.672" path="socket:[32910]" dev="sockfs" ino=32910 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 173.943211][ T28] audit: type=1400 audit(1794163446.388:2042): avc: denied { read } for pid=3091 comm="syz.6.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 174.086203][ T1162] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 174.298535][ T1162] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 174.311833][ T1162] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.328175][ T1162] usb 2-1: Product: syz [ 174.336242][ T1162] usb 2-1: Manufacturer: syz [ 174.346015][ T1162] usb 2-1: SerialNumber: syz [ 174.439066][ T3121] loop9: detected capacity change from 0 to 40427 [ 174.496638][ T1216] I/O error, dev loop9, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 174.567103][ T1162] usb 2-1: USB disconnect, device number 5 [ 174.659349][ T3125] ip_tables: iptables: counters copy to user failed while replacing table [ 174.659386][ T3124] netlink: 32 bytes leftover after parsing attributes in process `syz.5.682'. [ 174.668025][ T28] audit: type=1400 audit(1794163447.098:2043): avc: denied { bind } for pid=3122 comm="syz.5.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 174.716365][ T3125] ip_tables: iptables: counters copy to user failed while replacing table [ 174.746361][ T3124] netlink: 32 bytes leftover after parsing attributes in process `syz.5.682'. [ 174.759243][ T3129] netlink: 12 bytes leftover after parsing attributes in process `syz.9.683'. [ 174.775995][ T3129] loop9: detected capacity change from 0 to 512 [ 174.781064][ T3124] netlink: 32 bytes leftover after parsing attributes in process `syz.5.682'. [ 174.810759][ T3129] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 174.814651][ T3124] netlink: 32 bytes leftover after parsing attributes in process `syz.5.682'. [ 174.848496][ T3124] netlink: 32 bytes leftover after parsing attributes in process `syz.5.682'. [ 174.862820][ T3129] EXT4-fs (loop9): 1 truncate cleaned up [ 174.866407][ T3124] netlink: 32 bytes leftover after parsing attributes in process `syz.5.682'. [ 174.879557][ T3129] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 174.886414][ T3124] netlink: 32 bytes leftover after parsing attributes in process `syz.5.682'. [ 174.897420][ T3124] netlink: 32 bytes leftover after parsing attributes in process `syz.5.682'. [ 174.906220][ T28] audit: type=1400 audit(1794163447.338:2044): avc: denied { map } for pid=3128 comm="syz.9.683" path="/39/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 174.907190][ T28] audit: type=1400 audit(1794163447.338:2045): avc: denied { execute } for pid=3128 comm="syz.9.683" path="/39/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 174.929150][ T3124] netlink: 32 bytes leftover after parsing attributes in process `syz.5.682'. [ 174.994587][ T2144] EXT4-fs (loop9): unmounting filesystem. [ 175.033640][ T28] audit: type=1326 audit(1794163447.468:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3136 comm="syz.9.685" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fd19fb19 code=0x7ffc0000 [ 175.066693][ T28] audit: type=1326 audit(1794163447.468:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3136 comm="syz.9.685" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fd19fb19 code=0x7ffc0000 [ 175.092155][ T2837] EXT4-fs (loop1): unmounting filesystem. [ 175.098344][ T28] audit: type=1326 audit(1794163447.468:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3136 comm="syz.9.685" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fd19fb19 code=0x7ffc0000 [ 175.145166][ T3141] loop1: detected capacity change from 0 to 256 [ 175.170702][ T3141] exfat: Deprecated parameter 'utf8' [ 175.186112][ T3141] exfat: Deprecated parameter 'utf8' [ 175.196203][ T3141] exfat: Unexpected value for 'utf8' [ 175.318800][ T3139] loop9: detected capacity change from 0 to 40427 [ 175.345675][ T3139] F2FS-fs (loop9): Fix alignment : done, start(4096) end(16896) block(12288) [ 175.355162][ T3139] F2FS-fs (loop9): invalid crc value [ 175.368228][ T3139] F2FS-fs (loop9): invalid crc value [ 175.380163][ T3139] F2FS-fs (loop9): Failed to get valid F2FS checkpoint [ 175.418277][ T3156] loop1: detected capacity change from 0 to 256 [ 175.532115][ T3139] netlink: 'syz.9.685': attribute type 4 has an invalid length. [ 175.539940][ T3139] netlink: 'syz.9.685': attribute type 5 has an invalid length. [ 175.554701][ T3162] overlayfs: failed to clone upperpath [ 175.572845][ T3164] loop9: detected capacity change from 0 to 256 [ 175.593905][ T3164] FAT-fs (loop9): Unrecognized mount option "iochÍ6†ñ�0±w_arset=cp949" or missing value [ 176.146195][ T221] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 176.397300][ T221] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.417204][ T221] usb 10-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 176.443569][ T221] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.475160][ T221] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 191, setting to 64 [ 176.496090][ T221] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 176.516482][ T221] usb 10-1: config 0 interface 0 has no altsetting 0 [ 176.534344][ T221] usb 10-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 176.553862][ T221] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.606518][ T221] usb 10-1: config 0 descriptor?? [ 176.612269][ T3164] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 176.699463][ T3178] 9pnet_fd: Insufficient options for proto=fd [ 176.833317][ T221] usbhid 10-1:0.0: can't add hid device: -71 [ 176.856149][ T221] usbhid: probe of 10-1:0.0 failed with error -71 [ 176.868385][ T3195] loop1: detected capacity change from 0 to 256 [ 176.875023][ T3195] exfat: Deprecated parameter 'utf8' [ 176.884082][ T3195] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 176.896591][ T221] usb 10-1: USB disconnect, device number 8 [ 177.036377][ T3195] Core dump to core aborted: cannot preserve file permissions [ 177.169029][ T3203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3203 comm=syz.1.703 [ 177.290735][ T3222] loop1: detected capacity change from 0 to 512 [ 177.309059][ T3222] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 177.317655][ T3222] System zones: 1-12 [ 177.322607][ T3222] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.705: missing EA_INODE flag [ 177.334536][ T3222] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.705: error while reading EA inode 12 err=-117 [ 177.347070][ T3222] EXT4-fs (loop1): 1 orphan inode deleted [ 177.352890][ T3222] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 177.376683][ T3227] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 177.521382][ T3239] xt_hashlimit: size too large, truncated to 1048576 [ 177.584514][ T3242] loop9: detected capacity change from 0 to 256 [ 177.613432][ T3242] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 178.446571][ T3253] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 178.705652][ T3292] loop9: detected capacity change from 0 to 8192 [ 178.768027][ T1206] I/O error, dev loop9, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 179.963947][ T3304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=3304 comm=syz.6.726 [ 180.187635][ T3324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=3324 comm=syz.6.726 [ 180.655863][ T3332] netlink: 'syz.7.730': attribute type 2 has an invalid length. [ 181.378909][ T2837] EXT4-fs (loop1): unmounting filesystem. [ 181.472047][ T3342] loop1: detected capacity change from 0 to 512 [ 181.516389][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 181.516405][ T28] audit: type=1400 audit(1794163453.958:2117): avc: denied { module_load } for pid=3340 comm="syz.1.733" path="/14/file1/file2" dev="loop1" ino=1048758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 181.552264][ T3342] syz.1.733: attempt to access beyond end of device [ 181.552264][ T3342] loop1: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 181.614413][ T3342] syz.1.733: attempt to access beyond end of device [ 181.614413][ T3342] loop1: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 181.641695][ T3342] syz.1.733: attempt to access beyond end of device [ 181.641695][ T3342] loop1: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 181.657691][ T3342] syz.1.733: attempt to access beyond end of device [ 181.657691][ T3342] loop1: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 181.677965][ T28] audit: type=1400 audit(1794163454.118:2118): avc: denied { getopt } for pid=3350 comm="syz.9.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 181.753258][ T3353] loop1: detected capacity change from 0 to 512 [ 181.779197][ T3353] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.736: inode #13: comm syz.1.736: iget: illegal inode # [ 181.795551][ T3353] EXT4-fs (loop1): Remounting filesystem read-only [ 181.802565][ T3353] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.736: couldn't read orphan inode 13 (err -117) [ 181.814957][ T3353] EXT4-fs (loop1): Remounting filesystem read-only [ 181.823306][ T3353] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 181.832855][ T3353] EXT4-fs error (device loop1): ext4_lookup:1858: comm syz.1.736: inode #13: comm syz.1.736: iget: illegal inode # [ 181.845457][ T3353] EXT4-fs (loop1): Remounting filesystem read-only [ 181.863175][ T2837] EXT4-fs (loop1): unmounting filesystem. [ 181.887096][ T3360] loop1: detected capacity change from 0 to 512 [ 181.908921][ T3360] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.738: bg 0: block 288: padding at end of block bitmap is not set [ 181.927109][ T3360] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 181.940383][ T3360] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.738: attempt to clear invalid blocks 1024 len 1 [ 181.954286][ T3360] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.738: invalid indirect mapped block 1819239214 (level 0) [ 181.968272][ T292] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 181.976544][ T3360] EXT4-fs (loop1): 1 truncate cleaned up [ 181.982537][ T3360] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 182.002221][ T2837] EXT4-fs (loop1): unmounting filesystem. [ 182.024185][ T3366] tipc: Started in network mode [ 182.029223][ T3366] tipc: Node identity 4, cluster identity 4711 [ 182.035468][ T3366] tipc: Node number set to 4 [ 182.165535][ T28] audit: type=1400 audit(1794163454.598:2119): avc: denied { getopt } for pid=3376 comm="syz.7.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 182.185739][ T292] usb 10-1: Using ep0 maxpacket: 8 [ 182.192495][ T292] usb 10-1: config index 0 descriptor too short (expected 36, got 10) [ 182.212866][ T292] usb 10-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 182.221832][ T292] usb 10-1: config 0 descriptor has 1 excess byte, ignoring [ 182.229499][ T292] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 65 [ 182.240447][ T292] usb 10-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 182.241346][ T28] audit: type=1400 audit(1794163454.688:2120): avc: denied { mount } for pid=3379 comm="syz.7.745" name="/" dev="configfs" ino=11922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 182.261723][ T292] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.301116][ T292] usb 10-1: Product: syz [ 182.309841][ T292] usb 10-1: Manufacturer: syz [ 182.319995][ T292] usb 10-1: SerialNumber: syz [ 182.325371][ T28] audit: type=1400 audit(1794163454.718:2121): avc: denied { search } for pid=3379 comm="syz.7.745" name="/" dev="configfs" ino=11922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 182.348314][ T292] usb 10-1: config 0 descriptor?? [ 182.381844][ T28] audit: type=1400 audit(1794163454.718:2122): avc: denied { read } for pid=3379 comm="syz.7.745" name="/" dev="configfs" ino=11922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 182.437278][ T28] audit: type=1400 audit(1794163454.718:2123): avc: denied { open } for pid=3379 comm="syz.7.745" path="/" dev="configfs" ino=11922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 182.467484][ T3388] __nla_validate_parse: 61 callbacks suppressed [ 182.467544][ T3388] netlink: 4 bytes leftover after parsing attributes in process `syz.6.747'. [ 182.483666][ T28] audit: type=1400 audit(1794163454.718:2124): avc: denied { write } for pid=3379 comm="syz.7.745" name="/" dev="configfs" ino=11922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 182.557447][ T308] usb 10-1: USB disconnect, device number 9 [ 183.077439][ T3406] loop9: detected capacity change from 0 to 256 [ 183.088285][ T28] audit: type=1400 audit(1794163455.528:2125): avc: denied { map } for pid=3405 comm="syz.9.751" path="/48/file1" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 183.089146][ T3406] FAULT_INJECTION: forcing a failure. [ 183.089146][ T3406] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 183.123611][ T3406] CPU: 1 PID: 3406 Comm: syz.9.751 Not tainted syzkaller #0 [ 183.127927][ T28] audit: type=1400 audit(1794163455.528:2126): avc: denied { append } for pid=3405 comm="syz.9.751" name="usbmon3" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 183.130955][ T3406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 183.130971][ T3406] Call Trace: [ 183.130978][ T3406] [ 183.130986][ T3406] __dump_stack+0x21/0x24 [ 183.175133][ T3406] dump_stack_lvl+0x110/0x170 [ 183.179839][ T3406] ? __cfi_dump_stack_lvl+0x8/0x8 [ 183.184870][ T3406] dump_stack+0x15/0x24 [ 183.189049][ T3406] should_fail_ex+0x3bf/0x510 [ 183.193743][ T3406] should_fail_alloc_page+0x61/0x90 [ 183.198970][ T3406] prepare_alloc_pages+0x131/0x570 [ 183.204118][ T3406] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 183.209332][ T3406] __alloc_pages+0x15b/0x610 [ 183.213944][ T3406] ? __cfi___alloc_pages+0x10/0x10 [ 183.219106][ T3406] ? kasan_save_alloc_info+0x1f/0x30 [ 183.224423][ T3406] ? __kasan_kmalloc+0x95/0xb0 [ 183.229234][ T3406] ? mon_bin_open+0x192/0x590 [ 183.233953][ T3406] get_zeroed_page+0x19/0x40 [ 183.238616][ T3406] mon_bin_open+0x21e/0x590 [ 183.243151][ T3406] chrdev_open+0x593/0x600 [ 183.247612][ T3406] ? __cfi_chrdev_open+0x10/0x10 [ 183.252587][ T3406] ? fsnotify_perm+0x3e9/0x5b0 [ 183.257402][ T3406] do_dentry_open+0x885/0x11f0 [ 183.262317][ T3406] ? __cfi_chrdev_open+0x10/0x10 [ 183.267291][ T3406] vfs_open+0x73/0x80 [ 183.271305][ T3406] path_openat+0x2699/0x2f30 [ 183.275934][ T3406] ? slab_post_alloc_hook+0x4f/0x2d0 [ 183.281263][ T3406] ? kmem_cache_alloc+0x166/0x320 [ 183.286317][ T3406] ? getname_flags+0xba/0x510 [ 183.291028][ T3406] ? do_sys_openat2+0xeb/0x820 [ 183.295843][ T3406] ? do_filp_open+0x420/0x420 [ 183.300586][ T3406] do_filp_open+0x1ee/0x420 [ 183.305138][ T3406] ? __cfi_do_filp_open+0x10/0x10 [ 183.310306][ T3406] ? alloc_fd+0x4c1/0x570 [ 183.314680][ T3406] do_sys_openat2+0x15e/0x820 [ 183.319431][ T3406] ? __se_sys_futex+0x136/0x310 [ 183.324317][ T3406] ? do_sys_open+0xe0/0xe0 [ 183.328772][ T3406] ? __this_cpu_preempt_check+0x13/0x20 [ 183.334361][ T3406] ? xfd_validate_state+0x70/0x150 [ 183.339514][ T3406] __x64_sys_openat+0x136/0x160 [ 183.344408][ T3406] x64_sys_call+0x783/0x9a0 [ 183.348956][ T3406] do_syscall_64+0x4c/0xa0 [ 183.353405][ T3406] ? clear_bhb_loop+0x30/0x80 [ 183.358130][ T3406] ? clear_bhb_loop+0x30/0x80 [ 183.362855][ T3406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.368810][ T3406] RIP: 0033:0x7fa2fd16034e [ 183.373255][ T3406] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 183.392896][ T3406] RSP: 002b:00007fa2fe0fcb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 183.401342][ T3406] RAX: ffffffffffffffda RBX: 00007fa2fe0fd6c0 RCX: 00007fa2fd16034e [ 183.409348][ T3406] RDX: 0000000000004400 RSI: 00007fa2fe0fcc00 RDI: ffffffffffffff9c [ 183.417354][ T3406] RBP: 00007fa2fe0fcc00 R08: 0000000000000000 R09: 0000000000000000 [ 183.425362][ T3406] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 183.433379][ T3406] R13: 00007fa2fd426038 R14: 00007fa2fd425fa0 R15: 00007ffc794be3f8 [ 183.441388][ T3406] [ 183.492146][ T3415] loop9: detected capacity change from 0 to 256 [ 183.520256][ T3415] FAT-fs (loop9): Directory bread(block 64) failed [ 183.522638][ T308] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 183.543712][ T3412] netlink: 'syz.6.753': attribute type 4 has an invalid length. [ 183.558272][ T3415] FAT-fs (loop9): Directory bread(block 65) failed [ 183.565173][ T3415] FAT-fs (loop9): Directory bread(block 66) failed [ 183.572672][ T3415] FAT-fs (loop9): Directory bread(block 67) failed [ 183.579963][ T3415] FAT-fs (loop9): Directory bread(block 68) failed [ 183.587245][ T3415] FAT-fs (loop9): Directory bread(block 69) failed [ 183.588733][ T3418] overlayfs: failed to clone upperpath [ 183.594124][ T3415] FAT-fs (loop9): Directory bread(block 70) failed [ 183.635547][ T3415] FAT-fs (loop9): Directory bread(block 71) failed [ 183.691036][ T3415] FAT-fs (loop9): Directory bread(block 72) failed [ 183.698864][ T3415] FAT-fs (loop9): Directory bread(block 73) failed [ 183.719010][ T308] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.752974][ T308] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.795783][ T308] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.834358][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.951229][ T308] usb 2-1: Product: syz [ 183.955864][ T308] usb 2-1: Manufacturer: syz [ 183.962384][ T308] usb 2-1: SerialNumber: syz [ 185.094988][ T3400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.107863][ T3400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.117294][ T3400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.129197][ T3400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.138842][ T3400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.148497][ T3400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.158103][ T3400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.168856][ T3400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.179353][ T3400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.189394][ T3400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.627236][ T308] usb 2-1: skipping empty audio interface (v1) [ 185.634997][ T308] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 185.646094][ T308] usb 2-1: USB disconnect, device number 6 [ 185.713259][ T3446] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.780622][ T3446] bridge0: port 3(vlan2) entered blocking state [ 185.786968][ T3446] bridge0: port 3(vlan2) entered forwarding state [ 185.848800][ T1206] udevd[1206]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 185.874523][ T3446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 185.932660][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 185.965010][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.000418][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 186.009133][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.017506][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.025730][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.034426][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.042880][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.361766][ T3465] xt_socket: unknown flags 0xc [ 186.531942][ T3448] loop9: detected capacity change from 0 to 131072 [ 186.548753][ T3448] F2FS-fs (loop9): Invalid segment/section count (458783, 24 x 150994945) [ 186.567211][ T3448] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 186.576111][ T308] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 186.585714][ T3448] F2FS-fs (loop9): Unrecognized mount option "& " or missing value [ 186.776849][ T308] usb 2-1: not running at top speed; connect to a high speed hub [ 186.795487][ T308] usb 2-1: config 1 interface 0 has no altsetting 0 [ 186.810919][ T308] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.40 [ 186.829387][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.845659][ T3480] loop9: detected capacity change from 0 to 128 [ 186.853110][ T308] usb 2-1: Manufacturer: ï“¿ [ 186.867121][ T308] usb 2-1: SerialNumber: ꊡ䛋⡗ë„�Þ�總➸ⲭå�´ë�œâ„°á�‰æ¶šê�€î‰…闹䤛핒㿌脞尉ì�€ã½†ã´© [ 186.920676][ T1206] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.000746][ T3485] netlink: 8 bytes leftover after parsing attributes in process `syz.6.773'. [ 187.021778][ T3485] netlink: 8 bytes leftover after parsing attributes in process `syz.6.773'. [ 187.091005][ T3488] loop9: detected capacity change from 0 to 256 [ 187.105403][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 187.105420][ T28] audit: type=1400 audit(1794163459.538:2131): avc: denied { bind } for pid=3489 comm="syz.6.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.168241][ T28] audit: type=1400 audit(1794163459.588:2132): avc: denied { listen } for pid=3489 comm="syz.6.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.636149][ T1162] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 187.826115][ T1162] usb 10-1: Using ep0 maxpacket: 32 [ 187.832788][ T1162] usb 10-1: unable to get BOS descriptor or descriptor too short [ 187.841290][ T1162] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.851552][ T1162] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 187.868138][ T1162] usb 10-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 187.877362][ T1162] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.885467][ T1162] usb 10-1: Product: syz [ 187.889802][ T1162] usb 10-1: Manufacturer: syz [ 187.894507][ T1162] usb 10-1: SerialNumber: syz [ 188.072626][ T3512] fuse: Unknown parameter '/dev/zero' [ 188.101656][ T3505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=3505 comm=syz.9.781 [ 188.163950][ T3518] netlink: 'syz.7.786': attribute type 1 has an invalid length. [ 188.171703][ T3518] netlink: 'syz.7.786': attribute type 2 has an invalid length. [ 188.361266][ T3530] SELinux: security_context_str_to_sid (U) failed with errno=-22 [ 188.371315][ T3530] overlayfs: missing 'lowerdir' [ 188.387870][ T28] audit: type=1400 audit(1794163460.828:2133): avc: denied { map } for pid=3522 comm="syz.7.787" path="pipe:[19778]" dev="pipefs" ino=19778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 188.413926][ T28] audit: type=1400 audit(1794163460.848:2134): avc: denied { execute } for pid=3522 comm="syz.7.787" path="pipe:[19778]" dev="pipefs" ino=19778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 188.443638][ T28] audit: type=1400 audit(1794163460.878:2135): avc: denied { map } for pid=3533 comm="syz.6.791" path="socket:[34931]" dev="sockfs" ino=34931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 189.196933][ T3552] netlink: 24 bytes leftover after parsing attributes in process `syz.6.797'. [ 189.206978][ T28] audit: type=1400 audit(1794163461.648:2136): avc: denied { write } for pid=3551 comm="syz.6.797" path="socket:[34967]" dev="sockfs" ino=34967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 189.241849][ T308] usbhid 2-1:1.0: can't add hid device: -71 [ 189.248357][ T308] usbhid: probe of 2-1:1.0 failed with error -71 [ 189.260941][ T308] usb 2-1: USB disconnect, device number 7 [ 189.275965][ T3551] ================================================================== [ 189.284105][ T3551] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0 [ 189.292221][ T3551] Read of size 4 at addr ffff88812bbe9c00 by task syz.6.797/3551 [ 189.299988][ T3551] [ 189.302346][ T3551] CPU: 1 PID: 3551 Comm: syz.6.797 Not tainted syzkaller #0 [ 189.309655][ T3551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 189.319735][ T3551] Call Trace: [ 189.323041][ T3551] [ 189.326004][ T3551] __dump_stack+0x21/0x24 [ 189.330364][ T3551] dump_stack_lvl+0x110/0x170 [ 189.335070][ T3551] ? __cfi_dump_stack_lvl+0x8/0x8 [ 189.340155][ T3551] ? _raw_spin_lock_bh+0x94/0xf0 [ 189.345134][ T3551] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 189.350886][ T3551] print_address_description+0x71/0x200 [ 189.356479][ T3551] print_report+0x4a/0x60 [ 189.360939][ T3551] kasan_report+0x122/0x150 [ 189.365487][ T3551] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 189.371256][ T3551] __asan_report_load4_noabort+0x14/0x20 [ 189.376924][ T3551] pppol2tp_sock_to_session+0x1a0/0x1b0 [ 189.382512][ T3551] pppol2tp_release+0x150/0x2b0 [ 189.387412][ T3551] sock_close+0xc9/0x220 [ 189.391685][ T3551] ? __cfi_sock_close+0x10/0x10 [ 189.396570][ T3551] __fput+0x1fd/0x8f0 [ 189.400591][ T3551] ____fput+0x15/0x20 [ 189.404607][ T3551] task_work_run+0x1e1/0x250 [ 189.409235][ T3551] ? __cfi_task_work_run+0x10/0x10 [ 189.414396][ T3551] ? __cfi___close_range+0x10/0x10 [ 189.419551][ T3551] exit_to_user_mode_loop+0x9b/0xb0 [ 189.424785][ T3551] exit_to_user_mode_prepare+0x87/0xd0 [ 189.430277][ T3551] syscall_exit_to_user_mode+0x1a/0x30 [ 189.435780][ T3551] do_syscall_64+0x58/0xa0 [ 189.440226][ T3551] ? clear_bhb_loop+0x30/0x80 [ 189.444940][ T3551] ? clear_bhb_loop+0x30/0x80 [ 189.449663][ T3551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.455591][ T3551] RIP: 0033:0x7fe17279fb19 [ 189.460037][ T3551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.479681][ T3551] RSP: 002b:00007ffd8b0bd668 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 189.488135][ T3551] RAX: 0000000000000000 RBX: 00007fe172a27da0 RCX: 00007fe17279fb19 [ 189.496149][ T3551] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 189.504158][ T3551] RBP: 00007fe172a27da0 R08: 00007fe172a26038 R09: 0000000000000000 [ 189.512177][ T3551] R10: 000000000003fd90 R11: 0000000000000246 R12: 000000000002e631 [ 189.520260][ T3551] R13: 00007fe172a2609c R14: 000000000002e361 R15: 00007fe172a26090 [ 189.528286][ T3551] [ 189.531344][ T3551] [ 189.533695][ T3551] Allocated by task 3552: [ 189.538052][ T3551] kasan_set_track+0x4b/0x70 [ 189.542695][ T3551] kasan_save_alloc_info+0x1f/0x30 [ 189.547844][ T3551] __kasan_kmalloc+0x95/0xb0 [ 189.552490][ T3551] __kmalloc+0xb4/0x1e0 [ 189.556685][ T3551] l2tp_session_create+0x38/0xbd0 [ 189.559473][ T3555] loop1: detected capacity change from 0 to 2048 [ 189.561745][ T3551] pppol2tp_connect+0xbf5/0x1640 [ 189.561784][ T3551] __sys_connect+0x3da/0x460 [ 189.577691][ T3551] __x64_sys_connect+0x7a/0x90 [ 189.582500][ T3551] x64_sys_call+0x88d/0x9a0 [ 189.587045][ T3551] do_syscall_64+0x4c/0xa0 [ 189.591498][ T3551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.597470][ T3551] [ 189.599825][ T3551] Freed by task 1730: [ 189.603827][ T3551] kasan_set_track+0x4b/0x70 [ 189.608468][ T3551] kasan_save_free_info+0x2b/0x40 [ 189.613550][ T3551] ____kasan_slab_free+0x132/0x180 [ 189.618702][ T3551] __kasan_slab_free+0x11/0x20 [ 189.623505][ T3551] slab_free_freelist_hook+0xc2/0x190 [ 189.628911][ T3551] __kmem_cache_free+0xb7/0x1b0 [ 189.633937][ T3551] kfree+0x6f/0xf0 [ 189.637692][ T3551] l2tp_session_put+0xaf/0x1a0 [ 189.642498][ T3551] l2tp_session_delete+0x3df/0x4d0 [ 189.647647][ T3551] l2tp_tunnel_del_work+0x199/0x410 [ 189.652884][ T3551] process_one_work+0x717/0xc30 [ 189.657763][ T3551] worker_thread+0xa4d/0x11d0 [ 189.662470][ T3551] kthread+0x281/0x320 [ 189.666564][ T3551] ret_from_fork+0x1f/0x30 [ 189.671011][ T3551] [ 189.673355][ T3551] The buggy address belongs to the object at ffff88812bbe9c00 [ 189.673355][ T3551] which belongs to the cache kmalloc-512 of size 512 [ 189.687439][ T3551] The buggy address is located 0 bytes inside of [ 189.687439][ T3551] 512-byte region [ffff88812bbe9c00, ffff88812bbe9e00) [ 189.700673][ T3551] [ 189.703021][ T3551] The buggy address belongs to the physical page: [ 189.709455][ T3551] page:ffffea0004aefa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12bbe8 [ 189.719761][ T3551] head:ffffea0004aefa00 order:2 compound_mapcount:0 compound_pincount:0 [ 189.728115][ T3551] flags: 0x4000000000010200(slab|head|zone=1) [ 189.734255][ T3551] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00 [ 189.742875][ T3551] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 189.751482][ T3551] page dumped because: kasan: bad access detected [ 189.757930][ T3551] page_owner tracks the page as allocated [ 189.763782][ T3551] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3530, tgid 3529 (syz.6.790), ts 188377759075, free_ts 181048257741 [ 189.786478][ T3551] post_alloc_hook+0x1f5/0x210 [ 189.791292][ T3551] prep_new_page+0x1c/0x110 [ 189.795837][ T3551] get_page_from_freelist+0x2ca9/0x2d20 [ 189.801424][ T3551] __alloc_pages+0x1fa/0x610 [ 189.806056][ T3551] alloc_slab_page+0x6e/0xf0 [ 189.810670][ T3551] new_slab+0x98/0x3e0 [ 189.814786][ T3551] ___slab_alloc+0x70f/0xb70 [ 189.819401][ T3551] __slab_alloc+0x5e/0xa0 [ 189.823744][ T3551] __kmem_cache_alloc_node+0x204/0x2d0 [ 189.829233][ T3551] __kmalloc_node_track_caller+0xa1/0x1e0 [ 189.835004][ T3551] __alloc_skb+0x226/0x4a0 [ 189.839442][ T3551] netlink_sendmsg+0x635/0xbd0 [ 189.844228][ T3551] ____sys_sendmsg+0x5fb/0x9c0 [ 189.849002][ T3551] ___sys_sendmsg+0x2a2/0x360 [ 189.853691][ T3551] __x64_sys_sendmsg+0x20d/0x2e0 [ 189.858649][ T3551] x64_sys_call+0x171/0x9a0 [ 189.863171][ T3551] page last free stack trace: [ 189.867857][ T3551] free_unref_page_prepare+0x81b/0x820 [ 189.873348][ T3551] free_unref_page+0x93/0x530 [ 189.878047][ T3551] __free_pages+0x67/0x100 [ 189.882482][ T3551] free_large_kmalloc+0xae/0xf0 [ 189.887350][ T3551] kfree+0x8b/0xf0 [ 189.891091][ T3551] tipc_nametbl_stop+0x1294/0x12f0 [ 189.896228][ T3551] tipc_exit_net+0x99/0x150 [ 189.900776][ T3551] cleanup_net+0x5b0/0xb10 [ 189.905214][ T3551] process_one_work+0x717/0xc30 [ 189.910088][ T3551] worker_thread+0xa4d/0x11d0 [ 189.914787][ T3551] kthread+0x281/0x320 [ 189.918878][ T3551] ret_from_fork+0x1f/0x30 [ 189.923318][ T3551] [ 189.925653][ T3551] Memory state around the buggy address: [ 189.931296][ T3551] ffff88812bbe9b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 189.939390][ T3551] ffff88812bbe9b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 189.947471][ T3551] >ffff88812bbe9c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.955716][ T3551] ^ [ 189.959808][ T3551] ffff88812bbe9c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.967903][ T3551] ffff88812bbe9d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.975976][ T3551] ================================================================== [ 189.984177][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.995625][ T3551] Disabling lock debugging due to kernel taint [ 189.996028][ T28] audit: type=1400 audit(1794163462.428:2137): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 190.003628][ T3551] ------------[ cut here ]------------ [ 190.025752][ T28] audit: type=1400 audit(1794163462.428:2138): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.029244][ T3551] WARNING: CPU: 0 PID: 3551 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 190.029285][ T3551] Modules linked in: [ 190.051031][ T28] audit: type=1400 audit(1794163462.428:2139): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.060787][ T3551] CPU: 0 PID: 3551 Comm: syz.6.797 Tainted: G B syzkaller #0 [ 190.064829][ T28] audit: type=1400 audit(1794163462.428:2140): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.086110][ T3551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 190.125612][ T3551] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 190.132045][ T3551] Code: 5d c3 e8 3c b8 d4 fc be 02 00 00 00 eb 0a e8 30 b8 d4 fc be 01 00 00 00 4c 89 f7 e8 73 bd cc fd e9 0f ff ff ff e8 19 b8 d4 fc <0f> 0b 48 89 df e8 ff 00 00 00 eb bd e8 08 b8 d4 fc 4c 89 f7 be 03 [ 190.132982][ T3555] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 190.151770][ T3551] RSP: 0018:ffffc9000365fcb0 EFLAGS: 00010293 [ 190.161698][ T3555] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.166897][ T3551] RAX: ffffffff849cba07 RBX: ffff88811522c000 RCX: ffff8881091d6540 [ 190.185372][ T3551] RDX: 0000000000000000 RSI: 0000000032ed8f40 RDI: 000000000c04eb7d [ 190.193423][ T3551] RBP: ffffc9000365fcd0 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc [ 190.201473][ T3551] R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: dffffc0000000000 [ 190.209514][ T3551] R13: dffffc0000000000 R14: 0000000032ed8f40 R15: ffff88812bbe9c00 [ 190.217559][ T3551] FS: 0000555582e3d500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 190.226557][ T3551] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.233191][ T3551] CR2: 00007f6dc8259000 CR3: 000000011470e000 CR4: 00000000003506b0 [ 190.241261][ T3551] Call Trace: [ 190.244587][ T3551] [ 190.247583][ T3551] pppol2tp_release+0x150/0x2b0 [ 190.252347][ T3555] fs-verity: sha512 using implementation "sha512-avx2" [ 190.252508][ T3551] sock_close+0xc9/0x220 [ 190.263649][ T3551] ? __cfi_sock_close+0x10/0x10 [ 190.268591][ T3551] __fput+0x1fd/0x8f0 [ 190.272722][ T3551] ____fput+0x15/0x20 [ 190.275378][ T3555] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 190.276773][ T3551] task_work_run+0x1e1/0x250 [ 190.287474][ T3551] ? __cfi_task_work_run+0x10/0x10 [ 190.292641][ T3551] ? __cfi___close_range+0x10/0x10 [ 190.297831][ T3551] exit_to_user_mode_loop+0x9b/0xb0 [ 190.303073][ T3551] exit_to_user_mode_prepare+0x87/0xd0 [ 190.308590][ T3551] syscall_exit_to_user_mode+0x1a/0x30 [ 190.314101][ T3551] do_syscall_64+0x58/0xa0 [ 190.318602][ T3551] ? clear_bhb_loop+0x30/0x80 [ 190.323339][ T3551] ? clear_bhb_loop+0x30/0x80 [ 190.328076][ T3551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.334007][ T3551] RIP: 0033:0x7fe17279fb19 [ 190.337588][ T3559] netlink: 380 bytes leftover after parsing attributes in process `syz.1.798'. [ 190.338516][ T3551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.367097][ T3551] RSP: 002b:00007ffd8b0bd668 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 190.375630][ T3551] RAX: 0000000000000000 RBX: 00007fe172a27da0 RCX: 00007fe17279fb19 [ 190.383668][ T3551] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 190.391703][ T3551] RBP: 00007fe172a27da0 R08: 00007fe172a26038 R09: 0000000000000000 [ 190.399764][ T3551] R10: 000000000003fd90 R11: 0000000000000246 R12: 000000000002e631 [ 190.407801][ T3551] R13: 00007fe172a2609c R14: 000000000002e361 R15: 00007fe172a26090 [ 190.415791][ T3551] [ 190.418869][ T3551] ---[ end trace 0000000000000000 ]--- [ 190.435652][ T1162] usb 10-1: 0:2 : does not exist [ 190.440700][ T1162] usb 10-1: unit 249 not found! [ 190.445702][ T1162] usb 10-1: unit 2 not found! [ 190.458686][ T1162] usb 10-1: USB disconnect, device number 10 [ 190.522713][ T2837] EXT4-fs (loop1): unmounting filesystem. [ 190.667640][ T3443] udevd[3443]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory